Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/323830343a393135343a3a2f33322d3438203d3e20313938393439.roa
File:                     323830343a393135343a3a2f33322d3438203d3e20313938393439.roa (raw, json)
Hash identifier:          qNasuXqlNChRw7gtul1sHvhrU4J7qXMVXWWyfSOi770=
Subject key identifier:   8D:66:7C:C8:34:E1:BD:CC:22:B9:45:7E:8D:55:F2:F7:A4:4B:5E:D1
Certificate issuer:       /CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
Certificate serial:       487295B8BB687597730C7DEC41E6A5D611C80BB1
Authority key identifier: 2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/323830343a393135343a3a2f33322d3438203d3e20313938393439.roa
Signing time:             Mon 21 Jul 2025 15:17:29 +0000
ROA not before:           Mon 21 Jul 2025 15:12:29 +0000
ROA not after:            Mon 20 Jul 2026 15:17:29 +0000
asID:                     198949
IP address blocks:        2804:9154::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl
                          rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:72:95:b8:bb:68:75:97:73:0c:7d:ec:41:e6:a5:d6:11:c8:0b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C227BE6DEFB4B9EB005C0AC9FC284727A424D89
        Validity
            Not Before: Jul 21 15:12:29 2025 GMT
            Not After : Jul 20 15:17:29 2026 GMT
        Subject: CN=8D667CC834E1BDCC22B9457E8D55F2F7A44B5ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:15:b5:e2:69:54:0f:73:d3:7c:4b:48:03:
                    1c:07:a9:6f:4a:74:4b:70:0c:e9:2a:e1:ee:d1:c6:
                    b1:21:86:17:b3:37:ef:64:1b:55:1b:20:44:8b:1a:
                    95:5d:df:22:90:a0:2a:a3:70:d7:56:5a:3f:68:06:
                    ee:db:88:49:52:d6:2c:67:db:be:f7:3f:ea:7f:36:
                    df:88:5e:15:78:7b:a2:08:c1:d0:c7:47:73:89:1a:
                    5e:07:da:ed:7f:58:f0:f1:59:96:03:a7:75:2b:80:
                    b1:35:43:50:04:17:de:40:30:d9:b3:5c:97:e3:c7:
                    37:1a:2a:9a:76:de:4c:bd:df:b9:62:47:c2:2f:e6:
                    a7:46:9a:16:8a:03:72:f9:50:e8:ff:46:11:aa:56:
                    73:de:b3:af:b3:15:0d:4d:56:82:98:54:f8:c9:d5:
                    28:33:fb:0a:09:90:fc:9e:0d:ec:fd:76:49:b2:aa:
                    a3:ad:29:0f:01:07:f7:21:4a:bd:3a:5c:41:48:66:
                    3f:ff:1e:69:61:09:7e:68:fd:8c:1d:43:1f:51:d3:
                    a5:2b:41:ff:13:c9:29:74:d9:10:85:bb:83:36:21:
                    4e:d3:04:60:ad:dd:6c:04:fc:9e:98:a5:92:4d:71:
                    e0:a2:72:9e:cc:9b:78:fe:74:d1:4d:8a:3d:d9:03:
                    20:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:66:7C:C8:34:E1:BD:CC:22:B9:45:7E:8D:55:F2:F7:A4:4B:5E:D1
            X509v3 Authority Key Identifier:
                keyid:2C:22:7B:E6:DE:FB:4B:9E:B0:05:C0:AC:9F:C2:84:72:7A:42:4D:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C227BE6DEFB4B9EB005C0AC9FC284727A424D89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/buk6RpZJNyaD7zMQ7W2MYosvQrFBAZLpCpvuzZN1eHn/0/323830343a393135343a3a2f33322d3438203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9154::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:de:b3:e4:d8:b4:50:6a:0e:35:44:87:0c:ba:53:30:1f:9f:
         1f:c6:ae:11:3a:05:bc:6d:34:e4:96:0d:8c:c5:35:56:5f:a4:
         fe:8c:68:85:3f:9f:3c:44:03:82:93:f6:7c:e8:cd:8b:f3:65:
         da:fe:41:83:e7:42:29:f4:f0:78:5d:c5:88:e0:59:52:d4:66:
         ee:74:07:51:63:e8:15:d9:6a:bb:c2:59:de:51:5a:15:da:5a:
         5d:51:63:3e:08:87:1c:9a:cf:2d:ab:af:61:13:ff:19:94:1e:
         4e:18:f3:f1:a6:37:4d:56:cc:82:a7:1c:30:84:77:14:46:fc:
         35:bf:67:d9:20:91:9a:d4:8d:6a:2a:d1:f0:d4:28:d0:f1:2c:
         b1:f6:be:51:b1:a8:5e:13:ca:be:8f:93:ea:26:60:cf:1e:18:
         4a:c9:61:52:6e:de:3a:3b:66:ed:52:2a:e0:3a:db:7f:9f:f9:
         e0:0f:dd:6c:e9:43:ec:20:e2:66:00:fb:68:32:67:b2:91:78:
         a2:5e:5a:e2:06:c1:53:f4:f7:49:53:2d:4a:bf:4d:d8:fe:4e:
         b2:c8:83:1f:76:62:e3:97:20:fd:1c:fd:a7:83:a4:2a:ff:8a:
         c9:4c:77:7f:3b:70:5b:1b:3a:c1:b4:c4:3e:00:d1:cb:cb:80:
         ba:8a:a8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:34:09 2025 by rpki-client