Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/323830343a323138633a3a2f33322d313238203d3e20323634353631.roa
File:                     323830343a323138633a3a2f33322d313238203d3e20323634353631.roa (raw, json)
Hash identifier:          WhxXmmb8B4Jp9oC6oI66M1i8L6hhmUfMvKAUGaNhhYE=
Subject key identifier:   AA:17:70:18:B6:9B:72:C0:B5:04:B3:E8:9C:1E:DC:BE:69:17:11:F5
Certificate issuer:       /CN=83F178570844213DA4956E726863AF8BF0E6CC68
Certificate serial:       31B0C3C36B57701685FDB8A0B78A4D58EA3E0BB1
Authority key identifier: 83:F1:78:57:08:44:21:3D:A4:95:6E:72:68:63:AF:8B:F0:E6:CC:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F178570844213DA4956E726863AF8BF0E6CC68.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/323830343a323138633a3a2f33322d313238203d3e20323634353631.roa
Signing time:             Tue 15 Jul 2025 12:01:01 +0000
ROA not before:           Tue 15 Jul 2025 11:56:01 +0000
ROA not after:            Tue 14 Jul 2026 12:01:01 +0000
asID:                     264561
IP address blocks:        2804:218c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/83F178570844213DA4956E726863AF8BF0E6CC68.crl
                          rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/83F178570844213DA4956E726863AF8BF0E6CC68.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F178570844213DA4956E726863AF8BF0E6CC68.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b0:c3:c3:6b:57:70:16:85:fd:b8:a0:b7:8a:4d:58:ea:3e:0b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F178570844213DA4956E726863AF8BF0E6CC68
        Validity
            Not Before: Jul 15 11:56:01 2025 GMT
            Not After : Jul 14 12:01:01 2026 GMT
        Subject: CN=AA177018B69B72C0B504B3E89C1EDCBE691711F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ce:7b:0c:be:3d:9f:22:d3:e3:fc:2c:4f:97:
                    53:05:ef:9f:58:c2:83:94:57:58:c0:11:ac:10:08:
                    0e:9a:1d:43:6a:21:b2:18:57:5d:aa:b2:3c:72:91:
                    84:77:b7:76:fd:a1:9b:20:18:8f:d1:7e:ee:bd:22:
                    ee:74:31:9e:03:ef:db:b7:c4:19:9f:53:8a:e2:be:
                    9f:e6:ed:fc:69:6f:1a:84:7e:c5:72:b9:95:5b:b8:
                    29:35:20:2e:1a:b2:fb:78:8a:40:40:05:9d:6b:ce:
                    18:b5:5e:e0:d4:16:b8:92:c7:61:02:0b:19:50:a7:
                    fb:b1:8f:13:6c:16:34:ed:8a:58:57:4c:1d:59:d9:
                    51:32:cb:87:32:6d:a2:4e:f8:0c:22:bc:ee:63:4b:
                    c5:19:1a:77:9a:72:b4:3a:1a:75:82:09:f3:89:6a:
                    f5:bc:d6:d6:f0:85:b6:d8:30:79:03:7e:c6:91:a8:
                    86:a0:6a:5f:cb:9c:3d:96:9d:21:93:18:2f:cd:8b:
                    55:61:4d:d2:94:03:58:3c:21:7f:4e:b1:a3:80:b7:
                    29:db:d8:3e:5d:31:5a:92:ba:d1:18:d5:9e:bd:f7:
                    b4:5f:3b:b5:02:ae:74:7f:1b:81:36:6f:60:ee:da:
                    dd:f5:fa:5f:5b:55:5b:34:d2:d6:b5:cf:b9:4c:81:
                    fb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:17:70:18:B6:9B:72:C0:B5:04:B3:E8:9C:1E:DC:BE:69:17:11:F5
            X509v3 Authority Key Identifier:
                keyid:83:F1:78:57:08:44:21:3D:A4:95:6E:72:68:63:AF:8B:F0:E6:CC:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/83F178570844213DA4956E726863AF8BF0E6CC68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F178570844213DA4956E726863AF8BF0E6CC68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/323830343a323138633a3a2f33322d313238203d3e20323634353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:218c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:b9:ca:fb:cc:a1:99:2c:cc:80:a2:d4:b8:ec:b0:4f:d8:3b:
         0e:c4:4b:db:14:17:84:e1:b3:14:41:12:09:85:c1:98:c3:81:
         9d:7c:92:12:f6:13:fe:43:42:1e:09:d1:2e:40:26:f5:b8:fd:
         89:46:95:bc:23:00:36:95:00:4b:33:ca:22:98:1e:83:65:0d:
         10:b5:6b:c0:8c:bf:2d:d3:e0:05:2d:ab:b9:60:4a:49:11:98:
         b5:f2:ad:f5:4a:30:40:0b:80:dc:ad:22:03:a3:1e:76:16:68:
         29:c5:90:21:1d:77:1c:62:34:b4:7b:9e:e5:80:12:ce:55:57:
         0d:97:5b:a9:37:7e:a6:1d:37:4c:96:b0:e4:49:ad:3e:59:76:
         e9:39:36:f4:d6:9e:53:db:1c:45:82:f9:10:22:48:43:c4:fa:
         90:1a:d3:f2:46:b9:98:62:cd:4a:38:ff:c2:93:0d:1c:e7:00:
         05:59:42:79:69:72:dd:7a:11:2d:76:b2:92:36:95:bd:6d:84:
         a9:4b:c2:d6:41:cc:54:2c:cd:aa:77:08:db:a2:53:b8:62:d5:
         57:a4:82:fb:b5:83:f2:d8:4d:e0:8e:d2:4f:f4:c2:db:3f:e1:
         93:9a:4a:ba:70:ab:e3:46:ce:11:46:c4:c5:7e:5e:28:41:c9:
         e2:9c:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:26:25 2025 by rpki-client