Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa
File:                     323830343a313563633a3a2f33322d313238203d3e20323633343131.roa (raw, json)
Hash identifier:          LQPKqbmfeg4NpAUbhzB+1yvoH2eUg2Anf4XK9wlnysI=
Subject key identifier:   D0:BF:83:81:71:6A:22:1D:D7:AE:C3:19:8B:DD:E4:59:19:29:2B:E0
Certificate issuer:       /CN=732D6A05F268E4A19C0D95A4D9E95EE3C6CA67A0
Certificate serial:       4BF7C8B47E1558CD600766A51292403F74187E4B
Authority key identifier: 73:2D:6A:05:F2:68:E4:A1:9C:0D:95:A4:D9:E9:5E:E3:C6:CA:67:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732D6A05F268E4A19C0D95A4D9E95EE3C6CA67A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa
Signing time:             Thu 24 Jul 2025 16:57:01 +0000
ROA not before:           Thu 24 Jul 2025 16:52:01 +0000
ROA not after:            Thu 23 Jul 2026 16:57:01 +0000
asID:                     263411
IP address blocks:        2804:15cc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/732D6A05F268E4A19C0D95A4D9E95EE3C6CA67A0.crl
                          rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/732D6A05F268E4A19C0D95A4D9E95EE3C6CA67A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732D6A05F268E4A19C0D95A4D9E95EE3C6CA67A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 02:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f7:c8:b4:7e:15:58:cd:60:07:66:a5:12:92:40:3f:74:18:7e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732D6A05F268E4A19C0D95A4D9E95EE3C6CA67A0
        Validity
            Not Before: Jul 24 16:52:01 2025 GMT
            Not After : Jul 23 16:57:01 2026 GMT
        Subject: CN=D0BF8381716A221DD7AEC3198BDDE45919292BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:69:45:50:61:a7:de:45:f2:4e:28:c5:18:28:
                    55:bf:dd:a4:00:56:f9:f1:aa:5e:70:78:91:ab:6e:
                    a6:82:4d:b0:2b:5e:b2:62:18:eb:96:d4:27:b6:7c:
                    f6:ad:c7:3d:50:cc:dd:62:2a:ec:3a:02:68:6a:04:
                    4b:bc:4e:3a:60:6e:7f:c7:2c:b9:8a:eb:e6:6d:ae:
                    fc:3b:ae:ca:ae:58:c8:3a:a1:e9:69:3e:aa:fb:34:
                    a5:f0:88:77:b2:d4:c0:80:a0:2d:80:01:a6:91:f8:
                    0f:6f:dd:60:f9:6e:84:4e:b9:4f:03:c2:5f:a5:8b:
                    0f:a0:c3:c2:da:d2:37:bf:be:1b:84:8c:d3:36:f8:
                    17:83:39:f1:02:9f:24:5e:ed:0a:38:11:8e:9c:7d:
                    51:aa:d3:c2:e4:bb:20:fd:c8:9a:de:31:25:cb:29:
                    6c:5a:da:0f:42:1e:e4:0d:40:d4:92:bf:09:f8:56:
                    0f:b9:d9:e3:a3:8d:b1:9f:a8:49:7d:b5:39:f4:0d:
                    9a:76:9e:52:31:bc:9c:5a:fd:8b:20:b1:98:78:57:
                    ce:05:16:cb:66:69:b3:53:95:d8:45:2c:e3:4d:b5:
                    76:05:cd:a5:4c:0f:9e:48:3c:d9:a9:94:d1:de:76:
                    18:3b:3c:1f:dc:7e:57:f7:97:36:10:be:65:53:c2:
                    03:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BF:83:81:71:6A:22:1D:D7:AE:C3:19:8B:DD:E4:59:19:29:2B:E0
            X509v3 Authority Key Identifier:
                keyid:73:2D:6A:05:F2:68:E4:A1:9C:0D:95:A4:D9:E9:5E:E3:C6:CA:67:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/732D6A05F268E4A19C0D95A4D9E95EE3C6CA67A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/732D6A05F268E4A19C0D95A4D9E95EE3C6CA67A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Wqg2tCrNMSBPy7doFt1BnJ6U2kCtwDKMeyzM5KBLHwk/0/323830343a313563633a3a2f33322d313238203d3e20323633343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:de:5b:6f:67:67:96:b7:22:d4:fa:ec:66:00:dc:a1:b2:97:
         b6:28:df:13:56:d6:0c:b3:f7:eb:9c:8e:72:7c:01:97:a1:d5:
         10:89:dd:98:b5:2b:4c:ca:5f:40:07:b4:fb:63:f0:58:c4:aa:
         d5:7d:2d:94:44:b3:e8:83:1f:01:e5:90:1c:e7:30:05:10:a0:
         d9:ef:31:c1:5c:74:f4:8a:80:25:cb:fb:35:6d:c5:e0:97:e9:
         d4:6b:55:71:d8:0b:a3:90:8a:be:6a:eb:92:a6:36:52:bd:d6:
         16:0c:0e:4e:fa:c5:ca:fe:75:15:09:14:8c:7d:af:ad:e8:93:
         30:e0:5a:0c:b4:6a:0c:3b:ff:04:24:39:c3:dd:91:3a:ce:4a:
         00:d7:60:e0:2b:9d:0d:42:e3:c2:95:0a:80:38:73:19:84:79:
         60:ed:82:5c:70:76:5c:93:16:a7:70:cc:de:3d:ab:2e:00:d9:
         a9:f9:cc:5c:51:cc:ac:93:25:88:2e:94:16:e2:ba:f6:5a:90:
         1d:ae:e5:e1:c2:17:f7:fc:98:bd:4d:5b:c1:cd:cc:d9:80:71:
         9d:95:40:57:0b:b5:d4:77:ca:2c:57:55:c6:08:25:8f:58:67:
         fb:51:d6:53:36:dc:a6:1a:84:13:d6:e5:27:92:08:13:80:8a:
         31:1c:7e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:50:49 2025 by rpki-client