Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          e+bp+28M0qMtE5ZQGEU+0x2XFd+COW6Uw0V37gGEVQU=
Subject key identifier:   60:20:C7:74:8F:CF:3E:5E:70:F9:BB:E7:BC:BF:70:0C:95:3F:18:8A
Certificate issuer:       /CN=7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA
Certificate serial:       0DF6E82F30F2F7AA5740846B27E35CA88BC991A5
Authority key identifier: 7A:F2:51:28:E8:7A:F7:9D:E2:10:4B:62:1E:ED:A3:FB:A5:B3:9E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Fri 01 Aug 2025 15:35:29 +0000
ROA not before:           Fri 01 Aug 2025 15:30:29 +0000
ROA not after:            Fri 31 Jul 2026 15:35:29 +0000
asID:                     273728
IP address blocks:        2804:8b5c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.crl
                          rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 22:25:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f6:e8:2f:30:f2:f7:aa:57:40:84:6b:27:e3:5c:a8:8b:c9:91:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA
        Validity
            Not Before: Aug  1 15:30:29 2025 GMT
            Not After : Jul 31 15:35:29 2026 GMT
        Subject: CN=6020C7748FCF3E5E70F9BBE7BCBF700C953F188A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b2:3c:b3:52:99:b7:3d:0f:29:02:2b:e0:72:
                    0a:3e:26:5f:71:b7:4d:e8:b3:48:35:19:4e:bd:fd:
                    17:ac:ac:74:d4:f6:09:67:18:ab:be:4c:24:ac:02:
                    8f:b5:7f:66:65:e2:17:48:2f:ca:1e:f1:51:ed:bf:
                    5a:87:65:c4:12:87:b1:6a:10:b7:c6:31:34:5c:f6:
                    5d:c2:2a:0b:89:a9:19:2b:11:b3:31:34:2a:a4:69:
                    eb:dc:b8:c2:b2:df:f0:e5:56:c7:70:78:52:8b:f1:
                    a5:51:2c:76:15:2a:af:af:f0:15:c2:68:49:fd:ad:
                    90:b4:56:c4:65:4d:c4:ee:da:21:bf:a9:ca:c3:7f:
                    c5:5f:de:7f:a1:93:4c:a2:62:8e:86:88:29:d4:40:
                    a8:2c:ef:91:9f:68:d6:9e:7d:d4:f6:0e:14:7d:65:
                    a5:8b:a4:72:74:99:33:d7:8e:04:ad:67:de:4e:95:
                    0d:43:49:25:01:b6:04:ca:20:3b:28:9a:32:b6:df:
                    08:10:44:cf:c1:bb:af:13:9d:ad:de:f8:1a:97:eb:
                    58:81:e5:bd:94:37:81:ac:cc:7f:d0:55:94:72:da:
                    e3:8e:d0:68:e4:1d:df:66:f3:48:6c:50:e4:03:07:
                    cd:b5:52:1f:56:7a:8e:8e:00:af:75:04:e8:14:00:
                    c2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:20:C7:74:8F:CF:3E:5E:70:F9:BB:E7:BC:BF:70:0C:95:3F:18:8A
            X509v3 Authority Key Identifier:
                keyid:7A:F2:51:28:E8:7A:F7:9D:E2:10:4B:62:1E:ED:A3:FB:A5:B3:9E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AF25128E87AF79DE2104B621EEDA3FBA5B39EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/34

    Signature Algorithm: sha256WithRSAEncryption
         65:82:a0:f5:92:87:48:d5:28:3b:98:74:0e:90:56:cb:80:92:
         f1:00:37:e4:b3:95:57:6a:85:08:26:3c:2a:08:99:0f:42:c5:
         03:96:a4:33:4d:56:74:9f:6c:46:d3:0e:99:b2:dc:1b:14:a6:
         3d:58:fa:ea:8b:20:37:35:14:9e:2b:79:06:71:75:9f:5d:cd:
         85:eb:0a:ab:ea:cc:4d:59:b0:13:6c:79:10:8e:fb:4c:05:8b:
         f0:d0:96:41:9c:f3:93:36:20:09:ba:d5:2d:cb:02:00:12:0c:
         2f:a4:4c:a9:1a:7f:3f:4f:46:27:d6:e6:5b:d2:6f:4d:fd:1f:
         9b:a1:c4:83:1f:13:a7:d6:45:04:ba:34:66:7a:67:e2:fd:12:
         40:5e:da:19:19:39:22:1d:3a:a7:0b:3c:a6:6c:7f:be:5f:7f:
         58:a4:80:da:66:d9:e7:28:fb:35:03:18:35:83:83:97:8d:c3:
         d8:b2:c1:dc:35:df:11:1a:7b:ba:d6:54:79:c3:c3:c4:86:21:
         28:6d:17:73:4b:1c:23:dc:97:59:a5:fb:8b:cc:59:8f:26:e3:
         8c:b9:c4:b1:e0:6f:5a:23:f6:61:88:03:ad:11:42:48:f6:2a:
         07:eb:db:82:8f:1d:ae:a3:71:42:60:83:6c:8c:2e:3f:64:c1:
         4c:62:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:58:08 2025 by rpki-client