Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/323830343a383265343a3a2f33322d313238203d3e20323732313633.roa
File:                     323830343a383265343a3a2f33322d313238203d3e20323732313633.roa (raw, json)
Hash identifier:          bOnGn5jEZZUdnKCk8TPsF7RdZwERV8ucQJlCyuFI6H8=
Subject key identifier:   E7:48:EF:8D:AC:A2:42:F6:C6:A1:F7:85:48:42:E9:89:A8:41:24:89
Certificate issuer:       /CN=B836C5A84D0AFA45DB0B287BEB7D587E59887D9A
Certificate serial:       2455BEB9BACA850A68B66061F235E5ECF6A3C4B6
Authority key identifier: B8:36:C5:A8:4D:0A:FA:45:DB:0B:28:7B:EB:7D:58:7E:59:88:7D:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B836C5A84D0AFA45DB0B287BEB7D587E59887D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/323830343a383265343a3a2f33322d313238203d3e20323732313633.roa
Signing time:             Fri 25 Jul 2025 14:24:52 +0000
ROA not before:           Fri 25 Jul 2025 14:19:52 +0000
ROA not after:            Fri 24 Jul 2026 14:24:52 +0000
asID:                     272163
IP address blocks:        2804:82e4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/B836C5A84D0AFA45DB0B287BEB7D587E59887D9A.crl
                          rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/B836C5A84D0AFA45DB0B287BEB7D587E59887D9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B836C5A84D0AFA45DB0B287BEB7D587E59887D9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 18:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:55:be:b9:ba:ca:85:0a:68:b6:60:61:f2:35:e5:ec:f6:a3:c4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B836C5A84D0AFA45DB0B287BEB7D587E59887D9A
        Validity
            Not Before: Jul 25 14:19:52 2025 GMT
            Not After : Jul 24 14:24:52 2026 GMT
        Subject: CN=E748EF8DACA242F6C6A1F7854842E989A8412489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:96:1a:79:50:be:db:a9:cf:6b:3d:ee:a0:
                    c3:ae:2a:de:d0:af:a9:22:6d:a3:a4:0f:ea:8f:49:
                    97:d0:6b:b1:25:9a:4b:19:6d:10:21:88:46:27:bc:
                    11:cc:b4:0b:fc:65:81:49:61:34:f3:24:6a:de:21:
                    5f:2b:d7:57:4b:66:46:06:e9:96:69:41:74:0e:e6:
                    7b:9a:84:51:e8:95:ad:e8:14:41:32:3b:74:03:5c:
                    22:54:03:d5:2f:89:8b:89:88:75:35:7d:40:49:13:
                    21:56:1c:d9:27:86:b5:fa:f5:30:5a:55:a9:94:48:
                    a4:8f:4d:66:bc:b4:1c:7e:3e:fd:69:6b:22:4e:aa:
                    6f:eb:fa:b8:20:ad:e9:27:1b:44:1a:19:8b:11:da:
                    e0:72:e3:22:57:9c:0c:9c:c1:44:d4:33:a6:1b:34:
                    b1:77:c5:72:fa:f6:2d:54:66:ee:8e:1a:38:42:01:
                    a2:46:af:b2:d2:5a:a2:2d:bc:3c:64:8b:7e:16:a2:
                    43:c5:ad:ab:f3:98:e8:8f:b2:e7:7b:92:9d:fd:00:
                    a9:0e:ee:da:b3:1a:e0:f9:5b:54:8a:cb:4a:6f:57:
                    09:bf:0b:18:05:b3:f9:c0:b4:a6:f5:37:05:43:ba:
                    e4:a3:da:48:ba:3e:d3:ad:65:fe:df:08:be:54:04:
                    b2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:48:EF:8D:AC:A2:42:F6:C6:A1:F7:85:48:42:E9:89:A8:41:24:89
            X509v3 Authority Key Identifier:
                keyid:B8:36:C5:A8:4D:0A:FA:45:DB:0B:28:7B:EB:7D:58:7E:59:88:7D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/B836C5A84D0AFA45DB0B287BEB7D587E59887D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B836C5A84D0AFA45DB0B287BEB7D587E59887D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRVAUH7oF5UPFXxHNym3TonTHo5QX4wKSa3ePk6LCJmP/0/323830343a383265343a3a2f33322d313238203d3e20323732313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:8a:e0:e4:88:05:a8:af:b4:b2:f3:42:2b:96:0a:03:3d:98:
         f5:7a:ab:49:27:5c:9c:4d:b7:e9:b1:26:4a:7e:83:02:c1:16:
         6d:c2:0b:93:82:1d:94:89:8c:f5:6d:43:b0:cb:b6:e1:42:21:
         12:0a:8f:d8:52:5f:65:b1:36:6d:50:99:f8:df:c2:2f:2e:2a:
         c6:9b:72:3a:83:8a:9f:31:c0:83:d2:fa:b4:13:de:14:89:2a:
         39:02:3d:17:2b:e8:21:53:44:c1:3e:76:1c:b1:86:10:1b:33:
         8f:84:5b:ca:74:0e:10:42:8e:b8:82:0d:2b:77:b8:12:76:c2:
         0c:1d:cd:35:ca:30:70:60:81:95:e5:9b:d9:72:33:1e:89:0a:
         e2:f4:a1:9a:2a:03:e7:ff:ef:f9:fe:d7:c3:d6:9c:ad:82:94:
         8f:36:9d:6f:95:12:07:36:78:89:bc:87:ae:4a:db:d4:2d:0f:
         7e:7a:0d:13:f6:96:8d:18:90:77:f9:1e:21:7c:48:c1:74:31:
         f2:b8:52:e9:84:7e:12:aa:4a:ef:99:76:81:30:e7:34:18:40:
         a0:61:75:b2:cb:c3:c9:8b:5e:cc:8c:3f:f4:08:eb:82:ff:5b:
         8d:8e:d9:04:f8:d7:47:cf:c2:3b:ca:be:08:4b:00:ec:1d:49:
         9f:df:8a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:30 2025 by rpki-client