Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/323830343a373236343a3a2f33322d313238203d3e20323730383439.roa
File:                     323830343a373236343a3a2f33322d313238203d3e20323730383439.roa (raw, json)
Hash identifier:          gBLlJfxGNQhYN3P6iXELZqSv9hzHUk6g+Eum7wloReA=
Subject key identifier:   93:58:5B:85:9C:D8:8F:A9:1A:BE:F7:52:E4:60:44:9D:D6:AF:A3:9F
Certificate issuer:       /CN=205BDAA59440034C4D1BF95271B3B291B494E890
Certificate serial:       2B82EC6E3C5F6298798DC784565C366F58AD162E
Authority key identifier: 20:5B:DA:A5:94:40:03:4C:4D:1B:F9:52:71:B3:B2:91:B4:94:E8:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205BDAA59440034C4D1BF95271B3B291B494E890.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/323830343a373236343a3a2f33322d313238203d3e20323730383439.roa
Signing time:             Mon 28 Jul 2025 14:27:08 +0000
ROA not before:           Mon 28 Jul 2025 14:22:08 +0000
ROA not after:            Mon 27 Jul 2026 14:27:08 +0000
asID:                     270849
IP address blocks:        2804:7264::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/205BDAA59440034C4D1BF95271B3B291B494E890.crl
                          rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/205BDAA59440034C4D1BF95271B3B291B494E890.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205BDAA59440034C4D1BF95271B3B291B494E890.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 21:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:82:ec:6e:3c:5f:62:98:79:8d:c7:84:56:5c:36:6f:58:ad:16:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=205BDAA59440034C4D1BF95271B3B291B494E890
        Validity
            Not Before: Jul 28 14:22:08 2025 GMT
            Not After : Jul 27 14:27:08 2026 GMT
        Subject: CN=93585B859CD88FA91ABEF752E460449DD6AFA39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ce:32:90:2e:1c:30:92:f0:4e:54:f4:89:0d:
                    a3:62:fc:76:c3:9e:59:34:ff:13:07:38:63:9a:7c:
                    35:61:04:3c:a7:6e:82:b5:5f:9e:77:cd:ce:e3:6e:
                    87:cf:04:9e:3a:5c:ee:48:51:04:91:d4:38:1c:9f:
                    d0:91:be:22:05:41:19:18:c0:6c:84:7b:92:43:35:
                    a1:a6:ba:7b:62:17:a6:14:65:50:26:fc:fe:9b:8b:
                    83:a1:ab:cd:5b:f9:06:1e:6a:5b:a1:b9:be:39:b5:
                    f1:6b:d8:25:16:3f:6f:5c:1a:33:83:c0:f0:d2:47:
                    94:a9:9b:3b:e6:50:00:11:79:29:69:b5:5c:e6:28:
                    6f:ae:27:ea:c4:ed:ec:dd:f3:01:86:a4:e0:ed:83:
                    32:56:d1:6c:12:a9:32:c1:2c:9d:a7:81:e0:73:75:
                    af:5c:3a:c9:57:9d:9a:c8:30:13:cb:d8:83:9a:c2:
                    b9:9b:60:1a:05:96:c4:78:a3:59:0d:07:e0:3b:b7:
                    92:73:ca:79:50:95:f2:1b:29:82:eb:f6:ba:30:cd:
                    24:ae:5d:8f:af:e0:d9:37:5f:bb:67:85:a0:b0:0c:
                    81:6d:06:fd:84:c0:f4:71:d2:95:aa:99:fe:04:b6:
                    d3:5a:a0:fb:d7:91:28:2e:fa:3a:84:9a:5b:91:ea:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:58:5B:85:9C:D8:8F:A9:1A:BE:F7:52:E4:60:44:9D:D6:AF:A3:9F
            X509v3 Authority Key Identifier:
                keyid:20:5B:DA:A5:94:40:03:4C:4D:1B:F9:52:71:B3:B2:91:B4:94:E8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/205BDAA59440034C4D1BF95271B3B291B494E890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/205BDAA59440034C4D1BF95271B3B291B494E890.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E6FrUm25nbQVYhe16vy99irty7wUHQ5WY5XMaCaYt3BR/0/323830343a373236343a3a2f33322d313238203d3e20323730383439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7264::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:4c:7f:f3:f6:45:c2:2e:d0:7d:58:e8:d0:1c:d0:f9:2a:07:
         32:28:17:96:7c:ae:87:dc:51:34:28:bd:9c:f9:58:94:c8:d0:
         0e:6b:60:1f:7a:15:cd:76:39:b0:04:6e:b7:46:a4:3b:46:4f:
         99:dd:f7:03:f5:9b:8c:61:3d:91:4f:99:87:a3:03:26:de:3b:
         66:db:1f:f6:65:af:98:15:c2:21:f0:6c:c2:2a:09:71:bb:c5:
         7a:fd:ca:5a:dd:e2:48:29:ec:45:a5:e2:bd:8f:11:71:f6:20:
         f5:a7:e6:0e:81:11:38:e9:9f:85:08:3b:b7:af:b3:06:63:d5:
         92:d8:91:e6:26:96:dc:53:ca:ff:67:d2:e8:d9:fb:d7:83:70:
         b1:43:54:9f:b7:18:9d:58:bc:a3:42:e9:05:f1:e2:d0:08:e4:
         40:f7:04:b5:b2:70:9f:b3:2e:c1:41:49:aa:9a:85:eb:f6:df:
         a0:e2:ec:32:45:c9:db:97:20:0b:1a:b9:c4:cd:b8:74:d5:6e:
         e2:1a:ab:3c:52:68:1c:71:17:96:2b:2a:81:8f:12:14:ec:41:
         82:dd:86:77:d4:24:15:0c:94:29:05:76:1a:95:f8:69:75:4a:
         6d:a7:fc:7b:c3:67:5d:be:71:12:ce:d5:19:9f:90:53:d4:e6:
         3b:6c:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:34:00 2025 by rpki-client