Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/323830343a323534303a3a2f33322d313238203d3e20323634323638.roa
File:                     323830343a323534303a3a2f33322d313238203d3e20323634323638.roa (raw, json)
Hash identifier:          LtSf2zRxdt6ow6Vhlq6nj+Vq6G9d30OycVXO+ctOcNI=
Subject key identifier:   B5:3A:F3:62:C0:08:5E:10:E9:39:79:AE:BF:E1:B9:64:81:BE:96:F9
Certificate issuer:       /CN=01CC4ED75252A6B3FCFC438848ADDD2DA638308B
Certificate serial:       7FD4DD0E5CA1F21AECDA4A4490A4E92431C4AD05
Authority key identifier: 01:CC:4E:D7:52:52:A6:B3:FC:FC:43:88:48:AD:DD:2D:A6:38:30:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/323830343a323534303a3a2f33322d313238203d3e20323634323638.roa
Signing time:             Sun 13 Jul 2025 00:16:43 +0000
ROA not before:           Sun 13 Jul 2025 00:11:43 +0000
ROA not after:            Sun 12 Jul 2026 00:16:43 +0000
asID:                     264268
IP address blocks:        2804:2540::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.crl
                          rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d4:dd:0e:5c:a1:f2:1a:ec:da:4a:44:90:a4:e9:24:31:c4:ad:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01CC4ED75252A6B3FCFC438848ADDD2DA638308B
        Validity
            Not Before: Jul 13 00:11:43 2025 GMT
            Not After : Jul 12 00:16:43 2026 GMT
        Subject: CN=B53AF362C0085E10E93979AEBFE1B96481BE96F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:84:b4:12:6f:6d:16:45:60:03:65:8d:05:
                    f8:f0:5e:a7:70:49:a9:43:98:8a:34:f3:7a:25:1e:
                    07:e2:55:74:83:9d:29:18:08:0a:e4:41:a2:96:bd:
                    98:48:99:f9:2d:43:d9:2d:31:8d:a8:59:7b:d1:b9:
                    b3:31:f8:58:b7:fe:ae:1f:51:23:43:e3:f5:4f:98:
                    84:6e:b7:97:98:01:d2:2c:ce:df:a9:a1:6d:ea:02:
                    7e:8f:9d:92:c9:71:b4:3d:d5:ca:0c:48:b8:77:76:
                    83:e9:0e:60:f6:09:50:e8:ca:e9:3f:b8:ec:5d:d0:
                    d2:d6:28:8e:2d:74:b8:9a:94:10:82:94:17:a5:03:
                    9e:65:75:b0:5d:3e:7c:dd:04:f5:72:c9:6b:b2:cb:
                    eb:c2:5f:66:68:24:62:7f:16:0e:12:7b:15:5a:6a:
                    d1:3b:32:35:70:0d:b2:76:0e:56:44:7e:08:1f:db:
                    94:8f:13:6f:2f:2d:b4:87:4c:9b:60:eb:6b:cd:87:
                    4d:7d:f2:38:02:5b:0e:08:b4:bf:3b:0b:58:4e:91:
                    90:c7:5c:55:81:15:c2:2d:ea:22:b5:d4:24:dd:f5:
                    82:d8:ee:a9:2a:51:63:2c:3d:2b:71:42:44:92:fe:
                    98:6c:da:fe:f6:16:0f:55:c9:6e:ef:29:98:5d:d2:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3A:F3:62:C0:08:5E:10:E9:39:79:AE:BF:E1:B9:64:81:BE:96:F9
            X509v3 Authority Key Identifier:
                keyid:01:CC:4E:D7:52:52:A6:B3:FC:FC:43:88:48:AD:DD:2D:A6:38:30:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CC4ED75252A6B3FCFC438848ADDD2DA638308B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/323830343a323534303a3a2f33322d313238203d3e20323634323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2540::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:29:82:ba:a8:a5:a1:d6:b7:1a:74:f6:ea:dc:c1:d4:f7:5d:
         65:7f:da:4f:d2:a8:51:4b:82:bf:04:95:b8:a8:ac:18:cd:9e:
         f8:61:d0:31:d4:0b:a3:a8:78:a1:e2:3b:34:95:c0:23:52:53:
         12:f1:36:7c:d5:0c:1e:29:be:51:46:30:b3:e1:29:e5:14:ea:
         1f:88:2b:a0:51:d2:28:e9:3e:b3:5f:6f:4f:69:f5:3f:06:f0:
         9f:eb:10:ae:a7:3f:07:d5:94:61:9e:ca:b7:79:65:cc:f0:c4:
         cf:e7:4a:bc:f7:2f:fe:12:be:49:48:bf:36:a1:bc:28:84:63:
         e3:78:76:51:79:84:c8:69:98:1f:9c:0d:bc:e0:f7:fa:d4:66:
         f5:05:bb:8b:a3:da:5c:65:41:38:03:bd:53:00:15:be:17:d7:
         f7:c7:87:9f:a4:29:1c:25:9f:95:9c:5a:ac:2c:e6:a0:ae:56:
         14:32:51:75:80:a6:92:13:b8:dd:df:fd:4c:9e:f7:00:97:2a:
         f0:e0:29:61:20:c0:e9:4c:c6:7d:25:79:2d:ba:3a:94:7b:32:
         87:b6:0c:cd:80:8f:fd:ed:a6:76:6e:e6:b0:a3:83:21:22:d7:
         a4:d8:79:3d:c8:53:c5:3e:a0:78:de:21:23:ae:4e:13:ac:87:
         59:de:a3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:27:01 2025 by rpki-client