Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa
File:                     323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa (raw, json)
Hash identifier:          3YkpeN5/LmicmMJBRdlGOYeqdPDbg3UjbzkCbOpV+ZE=
Subject key identifier:   0B:C4:46:DB:57:5C:19:28:0A:83:CC:6B:EB:72:B4:F5:EF:DB:73:ED
Certificate issuer:       /CN=1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B
Certificate serial:       3EB363684C4D7B3783AA1A039026A50BD3594155
Authority key identifier: 15:91:BF:2B:14:A6:62:F5:F2:EA:E5:C8:44:0E:EC:20:EB:C0:DD:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa
Signing time:             Mon 21 Jul 2025 18:59:10 +0000
ROA not before:           Mon 21 Jul 2025 18:54:10 +0000
ROA not after:            Mon 20 Jul 2026 18:59:10 +0000
asID:                     267086
IP address blocks:        2801:80:22e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.crl
                          rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 07:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b3:63:68:4c:4d:7b:37:83:aa:1a:03:90:26:a5:0b:d3:59:41:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B
        Validity
            Not Before: Jul 21 18:54:10 2025 GMT
            Not After : Jul 20 18:59:10 2026 GMT
        Subject: CN=0BC446DB575C19280A83CC6BEB72B4F5EFDB73ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9a:04:2f:4d:99:e2:37:49:3d:b1:02:7e:e0:
                    f9:01:af:33:54:ba:86:99:1e:61:0e:6c:9b:c0:a0:
                    dd:11:ac:dc:25:fb:4b:9d:ad:52:f6:f9:b5:f6:fb:
                    b1:1c:d2:3f:25:a2:4e:31:cc:0d:c2:56:76:02:b0:
                    39:e8:b5:36:37:b1:34:cb:7a:c7:86:ea:86:bf:1a:
                    28:01:5e:6e:2f:6e:bb:31:f7:3c:6e:2b:35:65:d8:
                    13:00:67:0b:f5:26:6c:59:e6:58:1c:13:b2:16:7a:
                    24:c1:1b:68:34:2d:63:25:a1:a0:09:f1:29:a3:e7:
                    17:9c:af:0c:ed:13:a2:1f:e8:b2:2c:fe:32:c6:98:
                    0b:ff:d8:eb:34:14:85:d9:49:1d:cd:af:a3:58:7c:
                    6a:21:b8:05:00:cc:52:06:1c:8e:47:32:da:9b:9a:
                    44:5b:cb:99:ef:46:9d:92:9f:c2:20:35:1e:dd:bd:
                    8d:26:dd:59:90:17:0d:2b:5c:eb:d0:b2:56:a6:0f:
                    40:83:80:d3:f7:da:3d:d5:ad:8e:12:86:2b:e9:fd:
                    00:18:82:dd:b1:da:84:bb:29:bd:43:11:fb:f7:80:
                    3b:21:61:21:86:05:74:a0:ba:46:05:86:ae:a7:83:
                    74:02:93:d4:b9:6f:77:d7:8e:ee:67:5a:82:3e:b6:
                    6c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C4:46:DB:57:5C:19:28:0A:83:CC:6B:EB:72:B4:F5:EF:DB:73:ED
            X509v3 Authority Key Identifier:
                keyid:15:91:BF:2B:14:A6:62:F5:F2:EA:E5:C8:44:0E:EC:20:EB:C0:DD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1591BF2B14A662F5F2EAE5C8440EEC20EBC0DD2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ABhXCY8npkK9jSEshHZmvgS8PND7S9rMJs9imxWACN/0/323830313a38303a323265303a3a2f34382d3438203d3e20323637303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:22e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:7d:cb:52:25:4c:0d:0d:d6:8a:ce:5a:f4:9c:77:2e:b4:e2:
         3d:be:39:f1:2a:4f:9f:de:87:93:aa:a6:10:64:80:32:0b:a1:
         c7:b6:1e:13:19:7f:55:5a:5f:22:17:a0:c2:a2:53:8e:05:0e:
         3a:34:e7:8f:2a:9c:90:6d:18:d4:84:81:c2:66:57:22:aa:de:
         e2:b5:f7:c3:f2:ae:23:bc:1c:2d:11:42:62:0c:3b:79:b2:9f:
         45:91:e7:f5:9c:84:08:36:79:a7:25:41:d8:c8:e1:e4:84:fd:
         53:7e:6c:88:61:cb:c1:da:6e:af:95:00:2f:c4:33:1d:dd:9a:
         b1:85:39:97:e1:12:b4:86:1a:3b:50:c4:0f:b0:e2:f6:62:fb:
         56:20:b8:88:d7:23:c8:fe:7c:dd:35:b1:fa:ab:d4:b4:ef:29:
         ad:13:71:0b:60:28:08:0e:78:bb:a9:3e:37:fa:95:65:0e:04:
         b8:6f:e7:6b:b8:6f:f7:2c:89:13:ae:ab:14:fb:ec:20:22:70:
         75:f3:18:e3:e7:94:1c:e0:cc:90:30:97:1e:8d:75:77:55:5e:
         d3:d6:63:f8:75:f6:69:81:08:ca:c3:ab:f3:11:ea:f8:86:3f:
         cc:4a:f8:6e:3f:d0:57:a6:44:fb:19:d1:fa:7d:b5:c8:6a:b7:
         46:1a:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:08 2025 by rpki-client