Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/323830343a393336383a3a2f33322d3332203d3e20323734373735.roa
File:                     323830343a393336383a3a2f33322d3332203d3e20323734373735.roa (raw, json)
Hash identifier:          mHRlJpWubevoztrsvsI+yBuNVeD2l3VfqnwIVk02yeQ=
Subject key identifier:   03:EA:2F:EA:CB:40:C7:4D:21:B8:3A:69:7F:80:A0:DE:EA:DA:E1:EF
Certificate issuer:       /CN=72498970A4E832211C0DA0ED3526B1CE579C5172
Certificate serial:       0CFAB7352521003CCA590F610695BCCC9FDBA1C3
Authority key identifier: 72:49:89:70:A4:E8:32:21:1C:0D:A0:ED:35:26:B1:CE:57:9C:51:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/323830343a393336383a3a2f33322d3332203d3e20323734373735.roa
Signing time:             Thu 10 Jul 2025 13:48:39 +0000
ROA not before:           Thu 10 Jul 2025 13:43:39 +0000
ROA not after:            Thu 09 Jul 2026 13:48:39 +0000
asID:                     274775
IP address blocks:        2804:9368::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.crl
                          rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fa:b7:35:25:21:00:3c:ca:59:0f:61:06:95:bc:cc:9f:db:a1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72498970A4E832211C0DA0ED3526B1CE579C5172
        Validity
            Not Before: Jul 10 13:43:39 2025 GMT
            Not After : Jul  9 13:48:39 2026 GMT
        Subject: CN=03EA2FEACB40C74D21B83A697F80A0DEEADAE1EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:74:3d:46:03:55:29:1f:2d:8f:fd:d5:58:
                    63:b3:e1:03:48:92:2a:3a:b3:99:42:b6:0f:27:45:
                    67:08:e6:d0:87:1a:25:db:4a:ed:a0:5f:1f:09:88:
                    77:90:f5:c2:43:f7:25:d4:90:37:c2:57:01:ed:91:
                    91:5e:1f:12:e4:f4:fa:f9:d4:06:08:ba:1e:15:ef:
                    a5:71:67:6c:65:01:92:b6:a4:ca:54:17:2f:b0:64:
                    17:8d:11:aa:df:73:83:da:20:b9:c1:df:dd:7d:08:
                    fe:7a:16:61:f5:d9:5d:ff:ba:67:3b:3f:45:d4:f8:
                    85:7a:94:f4:fb:ea:d2:ab:97:d6:cd:2b:df:d9:fd:
                    4f:4e:54:5c:be:d3:00:4e:9e:08:7b:ae:56:b0:59:
                    19:7d:8f:b8:49:5f:25:a0:a6:f3:14:48:99:a0:7a:
                    8a:1d:6a:95:38:c8:fd:de:ae:3b:7e:34:d0:0c:8d:
                    6e:e8:24:84:4e:08:86:3b:0f:bf:91:98:d3:76:20:
                    4a:d4:78:e9:f8:94:46:d0:0e:1e:57:61:3b:d6:77:
                    8c:0e:25:f6:ef:a5:11:c8:6b:5c:e8:a6:32:bd:38:
                    88:92:54:64:3b:cd:28:11:f1:ed:9b:39:2b:ea:a8:
                    c2:b6:3c:8c:67:e5:bf:cb:1d:03:d8:d8:21:56:ed:
                    9b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EA:2F:EA:CB:40:C7:4D:21:B8:3A:69:7F:80:A0:DE:EA:DA:E1:EF
            X509v3 Authority Key Identifier:
                keyid:72:49:89:70:A4:E8:32:21:1C:0D:A0:ED:35:26:B1:CE:57:9C:51:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/72498970A4E832211C0DA0ED3526B1CE579C5172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72498970A4E832211C0DA0ED3526B1CE579C5172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1zMEY4eCELTX91aar5b9DP12qXet2wPyCrxBZYp8T8U/0/323830343a393336383a3a2f33322d3332203d3e20323734373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9368::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:02:82:e3:13:8f:cd:4b:74:22:12:d0:cf:10:ae:50:d4:74:
         4b:c2:fc:89:d8:91:e6:30:d2:dd:4b:ff:b8:a5:b7:58:84:b4:
         d8:8d:4e:6c:f1:d1:92:9d:78:f0:d2:ff:f7:bf:15:59:6b:83:
         7e:52:c6:a4:c9:45:93:de:e3:c3:da:54:d1:99:03:c2:1b:b6:
         ff:9c:3f:69:41:d8:0c:4b:7c:75:c1:0e:91:37:52:84:bc:ca:
         6a:8e:a7:f7:51:4e:61:99:c2:32:9b:18:07:14:7a:11:08:1e:
         a6:56:60:ea:5a:12:0c:40:2e:02:56:df:d8:63:95:23:24:16:
         b6:cf:1e:18:16:b0:73:2e:0e:01:67:41:15:dd:26:87:17:9a:
         47:32:8a:86:6c:ee:44:19:b6:cd:a0:ef:d0:7a:3d:aa:37:df:
         dc:cf:1f:bd:87:c1:7a:c8:0b:76:11:e8:c0:56:fb:89:74:07:
         da:fd:d1:2a:51:53:1e:46:67:fe:e0:f5:d4:c9:f5:d4:5d:26:
         3f:95:2f:c5:82:bc:d5:fb:8d:68:f0:57:f9:32:9c:6e:4d:d6:
         fb:f6:9f:3a:dd:cc:fa:39:72:c9:72:2c:ee:a4:b0:9a:ea:74:
         32:46:ae:4e:f1:1a:87:ee:04:48:a8:47:40:f5:b9:1c:cb:34:
         34:ef:2d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:18 2025 by rpki-client