Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/323830343a356334633a3a2f33322d313238203d3e20323638393030.roa
File:                     323830343a356334633a3a2f33322d313238203d3e20323638393030.roa (raw, json)
Hash identifier:          kdtllbruno+FBLUBMCoh1dhlBJK9pdANFraBIZprbcg=
Subject key identifier:   6F:DE:95:D9:20:77:22:A8:71:0A:15:F8:78:B7:E5:5C:5C:9E:79:A4
Certificate issuer:       /CN=A64D92728F9E62F16E233EB8AE3F0B776551119E
Certificate serial:       3DA4844335481702AA128C3C38CA0181BD0A8C78
Authority key identifier: A6:4D:92:72:8F:9E:62:F1:6E:23:3E:B8:AE:3F:0B:77:65:51:11:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A64D92728F9E62F16E233EB8AE3F0B776551119E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/323830343a356334633a3a2f33322d313238203d3e20323638393030.roa
Signing time:             Thu 29 May 2025 02:01:42 +0000
ROA not before:           Thu 29 May 2025 01:56:42 +0000
ROA not after:            Thu 28 May 2026 02:01:42 +0000
asID:                     268900
IP address blocks:        2804:5c4c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/A64D92728F9E62F16E233EB8AE3F0B776551119E.crl
                          rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/A64D92728F9E62F16E233EB8AE3F0B776551119E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A64D92728F9E62F16E233EB8AE3F0B776551119E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 20:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a4:84:43:35:48:17:02:aa:12:8c:3c:38:ca:01:81:bd:0a:8c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64D92728F9E62F16E233EB8AE3F0B776551119E
        Validity
            Not Before: May 29 01:56:42 2025 GMT
            Not After : May 28 02:01:42 2026 GMT
        Subject: CN=6FDE95D9207722A8710A15F878B7E55C5C9E79A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:08:dd:08:13:0a:d5:5a:bf:10:a0:a9:a5:64:
                    a0:8f:29:a6:45:8f:a8:e9:b0:b9:97:1b:69:e9:6c:
                    5c:2c:7e:64:75:ea:f5:c2:5b:cd:a3:a9:38:ba:71:
                    70:4a:08:23:b2:b6:f7:34:10:38:d1:6e:61:53:3a:
                    33:98:b1:30:51:c1:9a:dc:74:d7:34:a2:eb:6a:0b:
                    e0:8c:cc:a8:d9:db:59:cc:1f:9c:49:4c:ba:9f:02:
                    95:f4:bc:9c:4b:51:e0:5c:3a:ec:83:b8:e7:d4:9a:
                    08:58:73:a6:db:7f:29:f7:77:7f:7b:62:c0:02:f7:
                    56:50:00:ad:30:cf:bc:3b:ab:25:46:85:bd:0c:30:
                    58:ab:63:d7:19:3b:bb:81:a0:4c:43:4a:22:66:78:
                    af:8e:cf:7d:fb:29:f8:45:b4:8a:c2:87:fd:44:eb:
                    83:db:4d:2c:54:1b:b7:7a:f8:83:fc:5f:78:ca:14:
                    4e:30:0e:51:03:61:86:ae:c2:dd:71:20:e7:e1:1c:
                    c0:b7:e8:ab:b2:8b:39:d2:0a:bb:ae:64:a3:c8:33:
                    d3:af:6b:b8:12:8d:54:60:14:08:fc:65:9a:08:b7:
                    7b:88:3a:fa:10:d6:0f:e6:1f:9e:16:e4:78:15:5b:
                    52:35:42:48:76:bc:53:46:57:eb:5e:cd:59:1a:88:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DE:95:D9:20:77:22:A8:71:0A:15:F8:78:B7:E5:5C:5C:9E:79:A4
            X509v3 Authority Key Identifier:
                keyid:A6:4D:92:72:8F:9E:62:F1:6E:23:3E:B8:AE:3F:0B:77:65:51:11:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/A64D92728F9E62F16E233EB8AE3F0B776551119E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A64D92728F9E62F16E233EB8AE3F0B776551119E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4t5VbjAc5GmpEcjbpgvdyXevm2Ai5nbh6F8YSPWSTtSe/0/323830343a356334633a3a2f33322d313238203d3e20323638393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:72:b9:e7:71:08:65:db:df:0a:cd:2d:73:02:9a:00:7a:eb:
         41:46:22:8f:a9:42:76:7c:25:07:de:90:b2:c4:62:84:61:55:
         82:11:38:2d:c0:ab:3d:28:da:5b:11:ff:de:18:ad:4c:e3:fc:
         b8:9e:8a:c3:a7:ff:4f:b9:b4:c6:e1:6b:0d:66:46:79:13:23:
         74:62:b7:d5:58:a0:c3:bb:f8:27:7f:33:03:57:a3:3a:2b:b7:
         b1:94:8d:b0:a4:6d:f4:eb:d7:70:ca:f9:0c:40:7e:35:d0:46:
         5e:79:29:99:60:74:3a:a3:ff:84:73:f9:87:ab:fc:64:c1:71:
         d5:05:6a:92:a5:0a:81:e8:fc:29:3f:00:8f:db:0f:7a:d6:26:
         ee:b4:eb:9c:8d:49:6f:37:d8:d1:f9:21:27:41:b9:41:6f:09:
         02:4d:27:1b:a2:76:50:51:2e:b9:ea:99:4b:c7:82:65:70:ab:
         84:7e:43:0f:2d:23:f0:e8:65:75:b2:62:b0:88:62:c8:f0:26:
         b7:bb:50:ec:05:77:14:64:f6:df:c6:42:24:17:43:d2:e1:bf:
         a5:4c:10:9a:1d:33:e1:d4:57:7a:2c:27:05:ec:3e:3c:7b:14:
         ab:54:81:ac:d1:58:1e:52:7f:82:b5:3f:8a:dd:79:c1:ad:20:
         23:99:7a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:28:09 2025 by rpki-client