Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/323830343a363032303a3a2f33322d313238203d3e20323639313437.roa
File:                     323830343a363032303a3a2f33322d313238203d3e20323639313437.roa (raw, json)
Hash identifier:          atPOZ+v+uoJyPzZjiZJs06SSiwIYkKzMtaHF/Bo7lH8=
Subject key identifier:   22:DA:EA:B8:7E:31:36:8B:BD:40:AA:71:E7:0D:DB:F0:59:4B:E4:CB
Certificate issuer:       /CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
Certificate serial:       440EE8CBFAEA31BA82C022B9094E178910DE575B
Authority key identifier: 79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/323830343a363032303a3a2f33322d313238203d3e20323639313437.roa
Signing time:             Mon 09 Jun 2025 20:55:58 +0000
ROA not before:           Mon 09 Jun 2025 20:50:58 +0000
ROA not after:            Mon 08 Jun 2026 20:55:58 +0000
asID:                     269147
IP address blocks:        2804:6020::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl
                          rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 07:09:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0e:e8:cb:fa:ea:31:ba:82:c0:22:b9:09:4e:17:89:10:de:57:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7
        Validity
            Not Before: Jun  9 20:50:58 2025 GMT
            Not After : Jun  8 20:55:58 2026 GMT
        Subject: CN=22DAEAB87E31368BBD40AA71E70DDBF0594BE4CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:e4:4a:53:a9:d3:0f:3e:5b:0a:b4:c1:aa:
                    db:c4:e4:4a:cf:c5:c3:ce:1a:cf:4a:ec:62:3a:cc:
                    55:14:12:7d:84:e5:e2:64:67:c2:74:b3:65:fb:0b:
                    a9:2c:26:e8:ce:c8:90:64:32:3f:c9:ab:6a:04:34:
                    fe:48:18:b6:12:8e:90:b2:e0:d4:0f:11:40:e2:87:
                    cd:70:ab:33:a2:84:0a:36:b6:ab:5c:95:aa:b1:51:
                    2f:10:64:33:10:cf:50:ac:aa:70:a3:43:50:7b:b1:
                    26:0f:1e:bc:a6:83:00:df:ac:e7:9d:98:d8:21:71:
                    e0:82:4b:d8:10:84:6e:bb:2f:21:00:92:ca:3f:49:
                    11:fd:1c:af:74:a9:69:75:be:16:cc:81:fc:e5:5c:
                    3c:4d:4b:62:ab:d0:ce:ce:be:d3:60:7d:d2:ef:b7:
                    5d:53:2a:8e:75:ff:b4:c7:8f:b0:dc:42:36:9a:c2:
                    f6:b9:31:63:6a:d0:f5:0d:16:7e:e1:6b:a5:58:7e:
                    6b:13:74:5a:05:2c:02:1c:91:d8:6c:8c:c6:c3:50:
                    1c:45:41:82:d1:66:60:86:c8:e2:a5:26:55:35:d5:
                    54:c7:5b:30:fb:8b:c5:f2:22:13:43:a1:d4:db:09:
                    74:bd:86:83:04:cd:43:10:65:37:00:11:c2:c3:bb:
                    ef:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DA:EA:B8:7E:31:36:8B:BD:40:AA:71:E7:0D:DB:F0:59:4B:E4:CB
            X509v3 Authority Key Identifier:
                keyid:79:02:99:0B:6B:AE:3D:B7:24:9A:F5:2B:E3:F9:CA:51:F0:97:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7902990B6BAE3DB7249AF52BE3F9CA51F097A6A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ocRFaP8FReKg7P1yVg66obAobMvWZz6LiMcAMrFqRze/0/323830343a363032303a3a2f33322d313238203d3e20323639313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6020::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:54:a8:d1:ed:3a:51:3f:96:83:9d:33:f4:ba:b7:8c:0b:13:
         72:a0:cf:ef:de:82:93:59:18:c9:e8:3c:51:b3:13:85:f8:6e:
         7b:4f:21:dc:26:87:9f:a7:de:9c:11:6c:c9:ef:b6:35:1b:f8:
         d2:1f:87:41:83:21:4c:fc:3f:11:00:1e:33:4b:48:2a:2f:68:
         dc:1e:9d:72:f9:51:58:fd:30:39:0b:73:b1:4c:d3:f9:e3:0d:
         1c:32:d9:64:86:41:12:7a:08:69:db:0f:83:89:3f:3a:08:6c:
         25:44:dc:18:55:85:02:d4:d1:61:1f:9b:b4:7b:98:7b:84:6a:
         59:e9:e8:5e:ed:bf:2d:fc:9c:ca:6b:65:d3:9b:cf:c0:3a:64:
         41:f7:d7:e0:98:c9:6f:db:53:03:74:8d:78:74:a7:03:2c:c4:
         49:45:ff:37:02:93:33:9a:99:d3:12:41:f8:dd:cd:b7:73:21:
         57:91:96:0a:3f:55:1f:fd:46:7b:dd:9c:cd:69:c9:7f:31:8c:
         c4:14:d5:9e:13:9d:fa:8f:cc:8a:6d:92:02:5d:93:19:fb:1c:
         22:7d:49:aa:92:28:0d:0f:a2:47:71:3e:1d:9e:cd:93:8b:63:
         11:1f:59:5e:04:54:2f:dc:09:93:bd:b3:bf:0a:bc:f2:d2:00:
         0d:9d:29:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:25:33 2025 by rpki-client