Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa
File:                     323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa (raw, json)
Hash identifier:          Y/91UtAKoquFsWubq6LOKvQldnEvym4LP9Ysec9nxMw=
Subject key identifier:   4A:6E:4B:7C:B0:F1:A6:DB:76:47:28:6F:19:E3:AB:48:D3:44:22:FB
Certificate issuer:       /CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
Certificate serial:       63F7EFBE443905AC7E0CCAFC4888D658DF1BD95F
Authority key identifier: 40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa
Signing time:             Wed 25 Jun 2025 19:37:23 +0000
ROA not before:           Wed 25 Jun 2025 19:32:23 +0000
ROA not after:            Wed 24 Jun 2026 19:37:23 +0000
asID:                     274763
IP address blocks:        2804:9334:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl
                          rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f7:ef:be:44:39:05:ac:7e:0c:ca:fc:48:88:d6:58:df:1b:d9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE
        Validity
            Not Before: Jun 25 19:32:23 2025 GMT
            Not After : Jun 24 19:37:23 2026 GMT
        Subject: CN=4A6E4B7CB0F1A6DB7647286F19E3AB48D34422FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:28:9f:8e:bd:bf:28:c5:12:59:ea:5c:14:bc:
                    79:31:b2:4f:44:0d:ca:82:b5:c6:38:14:fd:7e:81:
                    1f:96:8e:2d:ed:95:ce:4b:18:76:bf:f0:ac:b6:29:
                    7d:68:af:7a:f4:35:e8:31:af:58:6f:b2:53:a8:83:
                    d2:ba:be:a9:84:84:92:84:f7:f1:03:ae:f9:d2:1a:
                    31:3d:79:ee:9f:6b:c7:cd:84:68:7c:da:d7:c5:e8:
                    80:44:ad:39:1e:83:e3:a9:18:f6:53:36:d7:bf:9d:
                    c0:1f:d2:85:37:1d:3b:04:d2:0c:c7:bb:14:b3:70:
                    32:9b:e5:b7:4b:4b:ba:3e:df:cd:02:66:40:b7:64:
                    19:16:38:33:9d:aa:a4:65:37:4c:fe:84:6f:dc:31:
                    c5:8c:58:6c:98:1d:4d:e9:8d:4a:f3:02:30:e1:7d:
                    b0:8d:51:83:c4:0c:fb:29:f9:70:e7:c4:69:f3:5f:
                    fe:21:7a:ed:75:f3:a2:f8:61:1d:f3:5f:70:e6:1f:
                    8b:ac:dc:66:82:28:b2:b4:b3:dd:aa:9b:68:9b:2a:
                    b1:a6:ac:c0:9f:c9:ec:65:77:7f:d5:4f:ed:cc:97:
                    ea:bc:8e:a4:3f:81:bd:0b:1b:72:72:62:a7:1c:44:
                    cb:82:ae:e0:b4:3c:4d:52:5a:57:5c:46:e4:01:96:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6E:4B:7C:B0:F1:A6:DB:76:47:28:6F:19:E3:AB:48:D3:44:22:FB
            X509v3 Authority Key Identifier:
                keyid:40:BB:14:A2:FD:8B:81:10:30:42:BF:32:FA:C9:B2:D9:0A:CF:8A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40BB14A2FD8B81103042BF32FAC9B2D90ACF8AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oWon9ukj5YKgYfECdsH4rb97JUFpcX2tZF2qS6M9662/0/323830343a393333343a666630303a3a2f34302d3430203d3e20323734373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9334:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:6b:9a:7c:38:fe:5e:7f:b3:87:32:d5:63:18:cc:75:48:52:
         a1:cb:69:ed:ef:51:22:9c:3b:41:7b:8f:d3:cd:fd:5c:47:3b:
         4a:9d:ef:24:6e:54:21:8a:42:08:86:c9:bc:a9:39:b7:30:79:
         88:6f:98:47:4a:d7:75:1d:91:e2:8a:9b:84:24:cd:b7:c0:49:
         d0:c0:36:05:0d:50:4b:f1:3f:bd:7d:12:93:a9:f0:8d:49:83:
         94:a5:5e:cc:3d:4b:6b:83:95:06:05:cf:12:60:57:6b:3d:02:
         e3:5f:b7:cc:6f:c2:86:24:df:9a:fa:4c:8d:91:99:6e:9d:e6:
         33:85:a9:e1:43:c7:c0:37:e3:1c:74:5d:24:74:50:95:e4:be:
         31:25:db:e4:39:d6:75:49:bb:6d:79:93:8c:89:d5:8e:0b:35:
         54:3d:8f:7a:79:fc:55:3b:67:a5:a2:42:28:94:9b:df:90:80:
         4e:2b:ae:8a:c7:aa:53:e5:0a:09:a6:61:8a:99:27:ac:25:99:
         dc:06:ca:df:0a:f6:61:f7:ca:c3:a5:f0:13:3c:78:16:a3:ab:
         53:45:57:10:fd:98:12:1f:09:c2:bd:4f:27:9b:00:76:d3:dc:
         74:13:5f:3b:f9:1c:0d:76:b9:eb:3e:58:c8:35:1b:74:f3:8b:
         d4:67:38:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:15:55 2025 by rpki-client