Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/323830343a366439303a3a2f33322d313238203d3e20323730353431.roa
File:                     323830343a366439303a3a2f33322d313238203d3e20323730353431.roa (raw, json)
Hash identifier:          swBW3pusBeatAmY5yEvWPZ9jPCdYzNG1b8A38zWPj0U=
Subject key identifier:   85:DB:81:13:3E:AE:4D:1C:BE:33:5C:F2:42:E9:AC:EA:A7:C5:47:9F
Certificate issuer:       /CN=A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA
Certificate serial:       44FCF4C60ED6FEF51C62061C0D070BD7EDC0EC99
Authority key identifier: A0:C8:F9:AB:C5:5A:6B:F1:28:36:EC:23:29:88:FD:9A:1A:C6:AE:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/323830343a366439303a3a2f33322d313238203d3e20323730353431.roa
Signing time:             Mon 28 Jul 2025 14:49:43 +0000
ROA not before:           Mon 28 Jul 2025 14:44:43 +0000
ROA not after:            Mon 27 Jul 2026 14:49:43 +0000
asID:                     270541
IP address blocks:        2804:6d90::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.crl
                          rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fc:f4:c6:0e:d6:fe:f5:1c:62:06:1c:0d:07:0b:d7:ed:c0:ec:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA
        Validity
            Not Before: Jul 28 14:44:43 2025 GMT
            Not After : Jul 27 14:49:43 2026 GMT
        Subject: CN=85DB81133EAE4D1CBE335CF242E9ACEAA7C5479F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:8a:25:00:da:19:03:74:2e:8c:d9:89:f7:
                    da:45:61:77:0b:3e:08:19:21:b1:83:90:05:b7:94:
                    d4:85:45:a5:4c:5b:fc:e0:4f:6c:41:25:bf:fe:a0:
                    a0:dc:9a:e0:6d:38:fc:f4:9e:03:46:47:68:b7:e0:
                    25:79:cf:8f:2f:0a:2e:b9:f5:dd:af:71:c9:ed:2a:
                    22:56:99:94:5a:46:90:d9:a8:eb:aa:52:30:01:b4:
                    0a:d7:4c:43:4f:4b:23:58:23:74:3c:d6:43:bb:f2:
                    e2:9e:79:f9:19:3a:76:47:f3:43:db:e3:43:42:9e:
                    02:e2:7a:12:ab:ac:41:2e:a4:13:ad:a4:52:2d:35:
                    85:00:80:95:4e:27:56:f2:82:ee:6a:84:bc:8f:a9:
                    46:7c:d3:f1:78:c6:6d:03:7c:65:88:80:1b:89:03:
                    4f:1d:29:2d:92:c2:6c:9f:b9:72:f8:c2:c7:80:db:
                    b8:e9:8e:89:82:68:54:f2:cc:af:2d:b2:9b:1c:7b:
                    eb:b9:85:cd:09:b4:0a:c9:30:b8:1b:d7:6f:c4:ef:
                    cd:5c:45:62:04:03:df:dc:fd:84:83:a9:72:2e:31:
                    c6:ae:54:15:f3:2b:29:67:62:ac:14:98:f9:c8:d5:
                    d7:4f:c7:e2:2a:44:c5:68:10:62:fa:1e:b1:f6:1b:
                    09:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DB:81:13:3E:AE:4D:1C:BE:33:5C:F2:42:E9:AC:EA:A7:C5:47:9F
            X509v3 Authority Key Identifier:
                keyid:A0:C8:F9:AB:C5:5A:6B:F1:28:36:EC:23:29:88:FD:9A:1A:C6:AE:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0C8F9ABC55A6BF12836EC232988FD9A1AC6AEFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G1FVMKAV9y9LYTDdmZ3kbH9oShx7qR7dt6ih9TB5jF8w/0/323830343a366439303a3a2f33322d313238203d3e20323730353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:25:f4:e0:e3:38:6a:f5:d1:d7:04:8a:7b:4a:9c:2d:b9:10:
         81:6b:ec:4f:b7:60:ef:38:de:9f:13:90:69:9f:69:3d:66:a0:
         ae:c8:7d:de:be:85:ee:40:44:0a:c8:46:f9:c8:48:1d:11:e9:
         a9:f9:c5:6e:f1:49:ac:65:18:b3:f9:a7:80:78:c2:cc:bc:a1:
         23:20:d9:f0:45:35:b1:9a:c8:84:e1:a8:99:83:ff:cd:55:80:
         9a:04:3e:05:40:58:f4:c3:95:11:26:75:35:51:de:d3:4a:27:
         b3:44:d2:fa:f0:b6:c7:e2:c5:9f:76:fb:a0:2b:14:7a:6d:5b:
         2d:55:d7:a6:ad:d2:ed:b8:d5:a3:d5:78:b9:7c:cf:05:d0:2d:
         c2:0b:5b:13:91:76:f5:6b:e3:f1:7b:97:b2:40:22:db:46:51:
         b3:1f:6b:b4:da:14:a0:31:54:43:76:ed:43:61:97:3f:36:3f:
         4f:fd:69:a7:f7:d5:a5:13:3b:31:8a:87:80:0a:96:6f:9b:f3:
         e7:5b:06:9d:81:6a:07:68:94:88:fa:e3:98:e4:d7:e0:6b:7e:
         f6:e5:59:4a:54:51:2c:a1:86:af:4a:f3:f3:aa:35:52:6c:1d:
         1d:ad:d6:ec:5f:ca:ea:4c:b9:db:31:ff:4f:2d:31:66:39:db:
         ad:ff:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:50:02 2025 by rpki-client