Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a383030303a3a2f33332d3333203d3e20323730373131.roa
File:                     323830343a373033303a383030303a3a2f33332d3333203d3e20323730373131.roa (raw, json)
Hash identifier:          Z0zFSfjolwTyX1stxNi3rCvgTyxE5Pk19ywTrjFf7Ag=
Subject key identifier:   36:FC:C2:63:5A:3F:C7:D2:C7:2D:EB:5D:C9:15:67:CC:F0:4F:3D:AA
Certificate issuer:       /CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
Certificate serial:       77B178018506DBEBDD48B87C71B3D077943E792F
Authority key identifier: 44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a383030303a3a2f33332d3333203d3e20323730373131.roa
Signing time:             Thu 31 Jul 2025 15:08:25 +0000
ROA not before:           Thu 31 Jul 2025 15:03:25 +0000
ROA not after:            Thu 30 Jul 2026 15:08:25 +0000
asID:                     270711
IP address blocks:        2804:7030:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl
                          rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 01:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b1:78:01:85:06:db:eb:dd:48:b8:7c:71:b3:d0:77:94:3e:79:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444210FC27C99FBF6FD91D34DBA40091272E0BE6
        Validity
            Not Before: Jul 31 15:03:25 2025 GMT
            Not After : Jul 30 15:08:25 2026 GMT
        Subject: CN=36FCC2635A3FC7D2C72DEB5DC91567CCF04F3DAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c1:a6:5c:38:d3:07:e5:93:3b:5e:9d:ee:86:
                    03:7e:40:ed:13:fd:b2:8c:8b:51:d4:e7:e6:fc:9d:
                    57:39:ee:5a:87:a3:7d:ed:ad:b7:1f:40:f0:fa:b9:
                    9f:5d:34:23:ab:7a:9b:9c:59:30:fb:a0:d1:8a:9a:
                    17:a0:5c:f0:37:96:92:1a:90:a1:f8:20:bf:8f:60:
                    ec:62:32:ff:04:cc:79:56:06:1b:a1:6e:cf:8c:22:
                    ed:39:e8:97:e2:aa:fe:f3:45:83:d7:29:46:4c:77:
                    f4:3e:4c:93:99:8f:b6:be:5b:be:99:07:24:58:f4:
                    35:e5:2d:76:37:ba:01:d0:af:55:5f:17:b1:1b:c4:
                    9a:64:90:7b:47:39:e3:3a:87:03:2d:30:b8:37:5c:
                    d7:6f:e4:3c:8b:dd:9a:c7:06:44:0d:7c:4a:c8:68:
                    ef:ed:d1:00:43:4a:73:a9:98:1a:a6:ee:e2:cd:36:
                    61:6c:c7:80:3f:2f:3e:f2:3e:ba:a9:7b:aa:97:2b:
                    a6:33:63:c2:42:d6:34:f7:3b:66:32:ea:16:c1:9e:
                    b7:cc:e1:ce:48:bf:97:f8:7f:f9:1e:e3:df:30:c8:
                    86:cc:66:9d:d9:8d:48:fe:db:1b:41:00:82:85:f9:
                    ed:de:81:2b:46:19:53:f5:2d:82:98:9e:2f:2e:ec:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FC:C2:63:5A:3F:C7:D2:C7:2D:EB:5D:C9:15:67:CC:F0:4F:3D:AA
            X509v3 Authority Key Identifier:
                keyid:44:42:10:FC:27:C9:9F:BF:6F:D9:1D:34:DB:A4:00:91:27:2E:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/444210FC27C99FBF6FD91D34DBA40091272E0BE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/444210FC27C99FBF6FD91D34DBA40091272E0BE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/0/323830343a373033303a383030303a3a2f33332d3333203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7030:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         34:29:7e:c8:53:ee:97:b4:b8:ce:f6:f7:7b:37:75:bd:44:a4:
         89:6f:af:b7:4f:e0:3a:d0:97:54:b7:d8:9b:39:4d:d9:5d:91:
         dc:12:96:cf:d0:43:1f:1e:48:33:91:50:2d:04:89:85:1c:4c:
         ab:b5:7f:c1:0f:de:22:fa:90:fb:e1:2a:b4:23:f1:9e:0b:4a:
         55:dc:46:89:b9:e1:33:26:2e:8a:10:83:e7:34:4e:3e:e0:a9:
         a7:b2:16:01:9b:89:a9:3f:37:b8:2f:90:39:07:7d:03:bb:d9:
         d5:b2:f9:ed:20:da:73:02:5f:f2:39:ee:d3:e0:c3:40:5d:ab:
         78:6b:60:3b:c7:4a:5a:d2:4d:28:99:0d:47:a4:e6:58:97:67:
         d5:72:7e:fa:26:03:22:4f:63:f4:a7:84:99:ef:43:3b:9d:19:
         5d:f8:e5:22:e2:a1:7b:72:9e:a8:0d:f7:91:57:b1:f1:10:9a:
         a3:a2:d4:7a:e2:77:fd:33:e6:07:2f:4c:87:ab:dc:89:c9:97:
         cc:81:f9:62:ac:e6:44:ff:44:14:48:e3:80:c6:00:50:48:ca:
         36:bd:34:18:10:a4:8f:11:e7:52:6a:9b:e1:58:b2:80:3d:c6:
         e2:ce:1c:ac:42:56:17:c1:54:cd:cb:15:88:ec:3b:4f:66:6f:
         3b:83:43:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:46:55 2025 by rpki-client