Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a383830303a3a2f34302d3430203d3e20323633303835.roa
File:                     323830343a3936633a383830303a3a2f34302d3430203d3e20323633303835.roa (raw, json)
Hash identifier:          m3ls13XwMMeaUU0wgwEDdQpbhiGR1d07fgmlhjZjmcs=
Subject key identifier:   2D:06:47:3E:7C:F9:2C:3E:3E:ED:0C:5B:0A:46:0E:63:35:42:DF:D1
Certificate issuer:       /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial:       10398E2DE5015EA1C6FB32FE64B8EC56C5884720
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a383830303a3a2f34302d3430203d3e20323633303835.roa
Signing time:             Sun 13 Jul 2025 18:16:46 +0000
ROA not before:           Sun 13 Jul 2025 18:11:46 +0000
ROA not after:            Sun 12 Jul 2026 18:16:46 +0000
asID:                     263085
IP address blocks:        2804:96c:8800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
                          rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 21:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:39:8e:2d:e5:01:5e:a1:c6:fb:32:fe:64:b8:ec:56:c5:88:47:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
        Validity
            Not Before: Jul 13 18:11:46 2025 GMT
            Not After : Jul 12 18:16:46 2026 GMT
        Subject: CN=2D06473E7CF92C3E3EED0C5B0A460E633542DFD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:6c:a0:01:85:84:6b:e7:6d:b6:04:d3:8a:
                    f9:80:bd:75:09:38:7d:37:98:e7:90:b3:1a:3d:96:
                    5c:b4:ff:92:7b:7a:fd:d3:e7:17:5f:0d:70:cf:04:
                    9b:45:c5:da:fb:88:61:3e:10:b2:46:1f:a3:a0:4b:
                    af:6c:12:97:ff:b1:84:30:06:44:91:31:93:c8:9a:
                    28:5a:66:e0:04:5f:c7:75:2e:96:ec:89:46:17:28:
                    d1:ba:33:f7:b9:cf:07:67:6e:93:11:b2:2e:90:ee:
                    95:49:9a:21:0c:cf:b7:e5:8a:37:18:e4:0a:d8:4f:
                    cd:0a:48:ca:40:a6:d7:27:23:23:6e:e0:ad:0a:68:
                    8f:3c:0a:eb:22:b9:e4:cd:07:97:d1:ec:4f:18:2e:
                    84:fc:83:eb:d3:92:fc:8a:91:30:82:a3:5e:f7:50:
                    99:65:1d:9c:5f:5a:c5:f7:33:57:78:c8:a1:f8:e4:
                    4a:b7:6a:85:52:40:48:41:10:e9:01:a9:92:5d:40:
                    ba:aa:9c:d1:b2:1b:e6:9f:04:da:94:7c:95:0a:4b:
                    19:46:47:79:2c:40:e3:ff:ed:8a:83:61:58:8a:d1:
                    4e:6c:1a:7d:39:69:ef:b0:78:e9:b5:3b:e1:ce:cf:
                    01:c3:75:d9:fd:e9:25:64:01:ee:ee:0c:d7:47:c6:
                    78:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:06:47:3E:7C:F9:2C:3E:3E:ED:0C:5B:0A:46:0E:63:35:42:DF:D1
            X509v3 Authority Key Identifier:
                keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a383830303a3a2f34302d3430203d3e20323633303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:96c:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:70:55:ac:68:09:a9:d9:f6:5d:4e:33:21:92:09:c2:53:5d:
         18:60:19:d0:1c:0d:9e:27:f3:31:b3:c4:ce:09:7e:6a:bf:34:
         fe:1a:33:1e:17:95:0e:e9:90:6f:d3:8b:24:77:17:e4:0a:68:
         cc:af:b2:ff:b1:df:b7:2e:be:79:7a:61:8e:f1:a7:bf:5e:97:
         0f:ae:fd:ce:d9:66:5d:5e:33:3d:7d:92:29:24:ed:93:5b:92:
         51:3f:a8:c5:69:31:15:1d:ca:b5:0d:96:8e:7e:e5:b7:ba:3d:
         c9:b4:96:19:9c:a4:a3:29:6a:85:56:ed:16:b3:c2:66:c8:18:
         d1:3c:e8:f7:b1:de:5a:8d:86:fc:4e:ea:54:30:71:c2:b5:88:
         75:f7:8c:88:07:b3:5d:1e:53:71:1d:ca:c8:c4:32:2a:6a:3a:
         62:c2:12:1f:b1:af:1a:e5:95:49:3e:e5:a6:ac:70:88:8f:d3:
         63:fc:bf:3e:74:ee:cb:3f:6f:ce:2b:6b:b4:30:67:f7:9d:77:
         fe:25:e5:9d:90:0d:52:3b:16:1c:b9:cb:4c:5d:f7:ad:7c:d1:
         57:bc:bf:8b:f0:19:63:80:18:fd:48:8d:58:75:27:5a:46:2b:
         17:b4:4f:68:2a:72:54:e0:b7:a2:e7:13:4a:a8:fc:bf:d2:e7:
         15:d1:2d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:55:04 2025 by rpki-client