Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/323830343a316338303a3a2f33332d3333203d3e203631363537.roa
File:                     323830343a316338303a3a2f33332d3333203d3e203631363537.roa (raw, json)
Hash identifier:          MfFK6hYP4MJ2S+dUP+PSgoX1L4x4180NupHcdZbpLBY=
Subject key identifier:   02:71:3A:A7:33:36:94:E9:CA:4A:FD:97:4F:A7:E7:21:4C:66:E4:CC
Certificate issuer:       /CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
Certificate serial:       5D8B2C0A8D0357DC2974CC19D79B27FEA4F21074
Authority key identifier: 40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/323830343a316338303a3a2f33332d3333203d3e203631363537.roa
Signing time:             Fri 01 Aug 2025 19:55:55 +0000
ROA not before:           Fri 01 Aug 2025 19:50:55 +0000
ROA not after:            Fri 31 Jul 2026 19:55:55 +0000
asID:                     61657
IP address blocks:        2804:1c80::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8b:2c:0a:8d:03:57:dc:29:74:cc:19:d7:9b:27:fe:a4:f2:10:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C338AB97D7CECF1B4083D9A3136A59FFB6627F
        Validity
            Not Before: Aug  1 19:50:55 2025 GMT
            Not After : Jul 31 19:55:55 2026 GMT
        Subject: CN=02713AA7333694E9CA4AFD974FA7E7214C66E4CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:b9:ff:c0:e4:97:de:3f:bf:6d:6a:1d:3e:
                    d7:f7:a4:37:31:20:5e:9b:a2:a6:1f:87:58:37:6c:
                    86:3e:ac:2b:a1:cb:67:2c:33:60:78:80:2d:73:e4:
                    7a:ae:2c:f2:bb:b2:ab:58:c0:6c:80:1e:fd:1c:7a:
                    d5:81:9c:5f:70:88:1f:db:d9:c1:32:e2:71:cb:34:
                    a2:73:f7:fe:14:41:0b:12:e1:e2:e8:d6:89:19:10:
                    1d:1f:51:8a:99:00:dd:d7:b5:23:c7:6f:bc:e0:f7:
                    5c:c6:b9:8a:25:5b:81:48:b8:f0:88:af:73:27:b8:
                    2f:5e:22:a6:6d:ce:75:b8:3d:f0:25:61:85:51:ac:
                    02:fa:d5:9b:f2:f9:41:4d:86:f1:fb:13:24:2f:f0:
                    33:3d:b4:86:3e:37:4e:46:98:1b:14:6a:2d:b8:f7:
                    dd:b3:23:a8:14:c8:41:dc:74:65:eb:f7:4f:4c:08:
                    44:c6:79:62:35:f7:22:db:55:ad:a0:05:62:2e:ec:
                    c5:a3:83:46:c9:c5:18:62:c1:ad:a1:a4:91:d8:05:
                    42:10:d0:4b:82:fc:59:0a:91:28:35:0c:5e:45:91:
                    5f:81:63:d3:09:e9:40:1f:f5:34:f9:82:21:c9:bc:
                    ec:f9:8e:19:31:03:fe:89:4c:ac:52:01:df:33:e9:
                    47:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:71:3A:A7:33:36:94:E9:CA:4A:FD:97:4F:A7:E7:21:4C:66:E4:CC
            X509v3 Authority Key Identifier:
                keyid:40:C3:38:AB:97:D7:CE:CF:1B:40:83:D9:A3:13:6A:59:FF:B6:62:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40C338AB97D7CECF1B4083D9A3136A59FFB6627F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/323830343a316338303a3a2f33332d3333203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c80::/33

    Signature Algorithm: sha256WithRSAEncryption
         8b:91:1f:53:00:08:18:0a:9c:af:6e:3c:6a:ff:b1:da:8c:d8:
         f2:90:44:d0:89:9e:3c:e9:7e:e6:76:e2:d6:67:53:65:12:ea:
         02:51:12:96:f4:12:de:d5:be:a2:c2:57:ec:cb:da:10:7b:6b:
         c1:36:c3:0b:8f:0a:0d:5d:55:5e:65:81:c6:da:03:a7:5c:52:
         71:47:ec:56:37:be:23:3a:b5:ed:21:82:a6:1f:5c:2c:b9:4d:
         f4:08:4b:6e:d8:37:f8:22:61:b3:ca:16:39:f3:1a:84:59:bb:
         af:60:b6:7d:b1:d0:8c:cf:b3:af:58:49:45:86:f6:56:ce:d0:
         c8:2c:98:d0:50:28:cc:13:49:1f:c3:e0:42:55:4e:37:db:f0:
         24:43:9d:ab:2e:fd:28:20:8c:0c:e4:70:37:4f:09:48:e2:c6:
         84:0c:57:f5:94:6d:27:2a:42:55:9b:53:e1:aa:6a:a9:5e:4f:
         85:52:91:77:4f:41:a3:99:fb:2f:65:d8:20:fb:bb:92:ba:17:
         11:29:3b:96:d9:52:5d:96:bb:fc:5b:b2:b7:74:ef:16:e1:02:
         b0:c7:cc:b4:8a:44:73:25:e6:d8:fd:c9:5f:88:8e:99:b0:c1:
         49:0e:9a:09:aa:21:4e:17:8b:07:d1:88:7d:34:b8:4d:4a:98:
         e6:bf:6f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:50:43 2025 by rpki-client