Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/323830343a316338303a3a2f33322d3332203d3e203631363537.roa
File:                     323830343a316338303a3a2f33322d3332203d3e203631363537.roa (raw, json)
Hash identifier:          UXSdckR8jgl4Jxiq1/xCimMvphYENYDkmBnxZZnaEEk=
Subject key identifier:   0E:30:32:2E:17:E7:08:AB:5B:62:99:62:38:E2:7F:22:A8:A5:0F:0E
Certificate issuer:       /CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
Certificate serial:       7607332FB58B7150C099A3C373FDF643D0A3CF2E
Authority key identifier: 40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/323830343a316338303a3a2f33322d3332203d3e203631363537.roa
Signing time:             Fri 01 Aug 2025 19:55:51 +0000
ROA not before:           Fri 01 Aug 2025 19:50:51 +0000
ROA not after:            Fri 31 Jul 2026 19:55:51 +0000
asID:                     61657
IP address blocks:        2804:1c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:07:33:2f:b5:8b:71:50:c0:99:a3:c3:73:fd:f6:43:d0:a3:cf:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
        Validity
            Not Before: Aug  1 19:50:51 2025 GMT
            Not After : Jul 31 19:55:51 2026 GMT
        Subject: CN=0E30322E17E708AB5B62996238E27F22A8A50F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:15:49:d5:fd:db:e1:9f:d7:0e:cc:27:dd:
                    4f:75:bf:81:a2:8f:47:67:a4:eb:f4:e8:d9:dc:e0:
                    9b:65:80:d8:0b:1d:ee:2f:c9:90:54:29:95:16:f8:
                    68:e4:b4:33:4c:69:6c:7a:34:ec:3b:8d:ae:8e:7b:
                    d3:f5:49:8e:b5:24:c4:79:2e:3d:1d:eb:4d:ff:25:
                    a6:5a:ca:08:b0:5b:f6:5f:eb:7d:2f:1b:7e:3e:80:
                    61:52:3d:1b:6e:bb:42:79:49:fb:08:26:91:b9:b9:
                    37:00:4c:a7:dd:8e:55:cb:a3:cd:04:1a:15:e4:0c:
                    47:50:ee:ca:52:4b:6e:95:65:dc:3a:81:24:15:54:
                    9c:44:7d:d7:cc:5b:f9:5d:79:94:dd:ae:05:8c:cf:
                    4f:07:61:f2:fb:b2:17:57:fe:4f:1f:01:07:2e:0d:
                    ae:21:0f:33:e9:4d:a2:68:3f:36:22:8f:9d:26:e3:
                    bf:d8:ac:78:cb:af:4c:21:09:2c:c5:66:df:01:dd:
                    70:64:0b:aa:f9:47:4c:5e:d9:25:85:f5:02:8b:a2:
                    bb:36:c4:2d:e8:c0:b1:ad:6b:2a:ef:4e:d7:c1:c5:
                    ca:95:59:4d:bb:77:46:ea:82:d3:38:a2:b4:1c:e6:
                    8a:cb:67:65:dd:79:8c:8b:e1:85:4e:78:d3:1d:36:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:30:32:2E:17:E7:08:AB:5B:62:99:62:38:E2:7F:22:A8:A5:0F:0E
            X509v3 Authority Key Identifier:
                keyid:40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/323830343a316338303a3a2f33322d3332203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:16:1e:bb:97:a4:0a:5d:aa:a8:27:8f:b7:48:8e:50:63:50:
         2d:0b:35:79:21:de:76:78:d6:71:60:91:36:9f:00:0f:dd:3e:
         47:87:aa:16:d7:f4:70:8f:10:2d:06:8f:27:d0:d5:79:09:3a:
         7a:88:3a:0c:9d:03:57:93:8f:6a:d0:91:47:20:8d:94:5c:ca:
         d3:fb:70:8c:6a:23:9e:a5:c3:31:32:ab:0e:b4:3d:82:89:9f:
         4f:f1:fd:67:30:4c:ad:b6:fa:74:a9:fb:f3:86:71:79:52:e1:
         ad:43:7e:8b:b8:f0:43:fb:8e:7e:35:f4:1f:11:03:ce:3d:3a:
         1a:3b:b4:51:9e:b7:e1:bd:f0:27:9c:0d:e7:27:41:5f:dd:c0:
         e6:b7:df:8d:f2:49:7b:ea:f5:a7:2c:60:b0:e1:54:2a:f4:44:
         e9:d3:2b:5c:ec:86:87:33:ed:7e:fa:40:2b:4c:2c:18:eb:09:
         70:41:1d:13:ff:ae:cc:67:79:21:5e:9b:66:b3:11:ee:7b:80:
         4c:8e:9c:6b:86:eb:da:83:ff:73:cf:14:0d:96:fd:a1:50:fa:
         70:c3:73:4f:3b:8c:b3:97:8f:b0:c7:2a:9c:a7:19:b5:b5:3e:
         eb:7e:89:f1:43:be:35:5f:69:fb:53:7a:a8:e1:96:0f:4e:ec:
         7f:58:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:51:22 2025 by rpki-client