Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/323830343a343763383a3a2f33322d3438203d3e20323637303736.roa
File:                     323830343a343763383a3a2f33322d3438203d3e20323637303736.roa (raw, json)
Hash identifier:          8Z+GZy0FcUj+iOhWV+8awPlmePfR1cP8hxk/OwC4RfI=
Subject key identifier:   16:63:D3:3F:1C:0C:AB:31:C8:96:81:5A:C2:F0:7B:BE:D9:27:DD:A9
Certificate issuer:       /CN=1CC741EDBBA21BD03B4790A7C9503F54CA161D7D
Certificate serial:       7E0C8D339BF4DDAF2CBA81DBBFB75CEBD759F217
Authority key identifier: 1C:C7:41:ED:BB:A2:1B:D0:3B:47:90:A7:C9:50:3F:54:CA:16:1D:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/323830343a343763383a3a2f33322d3438203d3e20323637303736.roa
Signing time:             Wed 30 Jul 2025 13:40:33 +0000
ROA not before:           Wed 30 Jul 2025 13:35:33 +0000
ROA not after:            Wed 29 Jul 2026 13:40:33 +0000
asID:                     267076
IP address blocks:        2804:47c8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.crl
                          rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 02:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0c:8d:33:9b:f4:dd:af:2c:ba:81:db:bf:b7:5c:eb:d7:59:f2:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CC741EDBBA21BD03B4790A7C9503F54CA161D7D
        Validity
            Not Before: Jul 30 13:35:33 2025 GMT
            Not After : Jul 29 13:40:33 2026 GMT
        Subject: CN=1663D33F1C0CAB31C896815AC2F07BBED927DDA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:ff:43:b5:36:c4:05:a2:ff:5f:9d:d4:7d:
                    de:c1:34:53:f9:f6:ef:df:b4:09:32:f9:2e:40:a1:
                    4c:91:e7:7c:21:d6:25:41:5c:d1:80:aa:ab:18:1f:
                    b1:2a:d9:21:f0:df:c9:62:f0:98:79:2f:bd:ba:40:
                    ac:31:3e:4e:98:77:c2:6d:45:2b:74:0a:b0:0f:ad:
                    60:c4:f0:60:75:b1:7c:f4:0a:53:51:5f:95:f7:f7:
                    da:ee:9b:3c:a6:82:e2:0b:9d:b1:70:c2:47:e9:80:
                    b1:0e:7d:1f:23:f6:db:c8:3b:ff:29:45:9b:20:14:
                    ba:fe:de:6f:e5:e0:2f:38:ff:a3:a8:fc:0f:18:ec:
                    eb:30:a7:1b:d6:f1:56:9c:d3:c9:7b:d8:53:7d:de:
                    1b:8e:aa:1e:a9:73:75:ee:ed:cc:59:59:59:63:9c:
                    3b:37:0a:3f:10:78:9e:dd:cc:5d:07:de:fb:f9:bb:
                    83:0b:13:3e:40:26:24:28:7d:73:e6:2a:12:8f:7a:
                    f2:ab:d4:1a:3e:ab:6e:d2:18:65:3a:f8:74:17:df:
                    9e:0a:f3:1f:80:d3:5d:e6:19:bc:ea:b2:83:86:16:
                    d4:61:66:b7:fd:d0:bb:69:35:0d:0b:f4:df:d0:e5:
                    61:dc:4f:fb:9e:9e:e1:61:55:80:94:a3:3e:dc:05:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:63:D3:3F:1C:0C:AB:31:C8:96:81:5A:C2:F0:7B:BE:D9:27:DD:A9
            X509v3 Authority Key Identifier:
                keyid:1C:C7:41:ED:BB:A2:1B:D0:3B:47:90:A7:C9:50:3F:54:CA:16:1D:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CC741EDBBA21BD03B4790A7C9503F54CA161D7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHAdynFUWto6x1gfymNVR6wjbM1pdv2GootwHEsUdSe6/1/323830343a343763383a3a2f33322d3438203d3e20323637303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:db:c5:3f:15:9c:a5:56:07:bc:2a:82:94:f2:34:1a:05:1b:
         12:e1:72:e9:e1:e9:31:dd:75:63:80:6f:85:c1:b4:d3:79:ad:
         c6:86:78:bd:c8:97:a7:f1:d7:8c:f8:df:3f:a0:eb:aa:82:bf:
         6b:55:f2:64:2c:a2:64:6f:e2:99:82:0c:8f:c6:8b:46:86:52:
         85:32:d8:78:e7:d4:e7:47:e8:fc:ee:3d:bd:65:db:a9:72:3b:
         60:f5:8e:f3:b7:cc:9f:3c:97:49:86:e8:92:32:8a:7a:e0:0a:
         d7:f8:e7:6c:87:c3:19:55:6b:01:75:be:34:fa:8b:a8:55:af:
         9d:fc:56:43:f7:ab:ea:4d:b6:29:8a:34:8d:35:6d:86:2d:69:
         b9:f7:76:c2:40:4e:f2:48:30:92:2d:94:9c:9d:89:1c:79:a0:
         c1:d2:1a:ea:0f:01:11:2c:3f:cd:fc:c4:ed:63:26:98:19:ca:
         3e:27:79:7f:18:8e:04:f5:70:f8:b0:cd:e0:4e:b6:f4:29:74:
         56:1d:18:ac:e4:79:e1:e3:9a:99:6c:80:9a:56:ae:02:25:1c:
         50:87:14:79:6b:07:26:72:e9:5b:48:84:e5:27:c1:87:36:46:
         b2:3a:5a:7e:ab:07:7a:61:a1:76:8f:14:66:f8:d9:55:ef:ac:
         dd:ef:e0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:58 2025 by rpki-client