Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/323830343a393437343a3a2f33322d3332203d3e20323734383433.roa
File:                     323830343a393437343a3a2f33322d3332203d3e20323734383433.roa (raw, json)
Hash identifier:          bIPMCPvUueptaQJiAaxfSkRglTHFfHoB/c6hsICk6K0=
Subject key identifier:   72:76:8C:2B:4F:FC:86:DF:C8:B3:B7:F2:88:7F:0C:A0:A2:1E:B8:5B
Certificate issuer:       /CN=4130195A850DBB00999B6AA1A1580CED92CE55E0
Certificate serial:       6F91B4C37886EDBE27FBE766E476E10AC791A321
Authority key identifier: 41:30:19:5A:85:0D:BB:00:99:9B:6A:A1:A1:58:0C:ED:92:CE:55:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130195A850DBB00999B6AA1A1580CED92CE55E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/323830343a393437343a3a2f33322d3332203d3e20323734383433.roa
Signing time:             Thu 26 Jun 2025 18:45:16 +0000
ROA not before:           Thu 26 Jun 2025 18:40:16 +0000
ROA not after:            Thu 25 Jun 2026 18:45:16 +0000
asID:                     274843
IP address blocks:        2804:9474::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/4130195A850DBB00999B6AA1A1580CED92CE55E0.crl
                          rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/4130195A850DBB00999B6AA1A1580CED92CE55E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130195A850DBB00999B6AA1A1580CED92CE55E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 22:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:91:b4:c3:78:86:ed:be:27:fb:e7:66:e4:76:e1:0a:c7:91:a3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4130195A850DBB00999B6AA1A1580CED92CE55E0
        Validity
            Not Before: Jun 26 18:40:16 2025 GMT
            Not After : Jun 25 18:45:16 2026 GMT
        Subject: CN=72768C2B4FFC86DFC8B3B7F2887F0CA0A21EB85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:19:ce:68:1f:5f:bb:32:6c:ba:3b:c8:b8:23:
                    2b:5a:76:99:77:8d:b0:12:a1:a6:a2:27:62:c5:cd:
                    9d:e5:d9:92:27:9a:11:e8:d0:7d:e2:99:77:e1:cd:
                    62:b6:c3:74:f9:92:8f:3b:51:9e:b6:4d:e3:23:24:
                    aa:da:bf:b3:39:7f:6e:35:94:78:ad:c9:0b:86:11:
                    29:4a:53:27:66:1e:80:58:87:46:86:c2:34:93:ea:
                    af:48:5a:1d:69:c8:64:8b:0b:6d:01:4b:a8:fb:78:
                    24:af:98:a1:11:28:0e:3f:5c:b5:ff:8d:ae:cd:2e:
                    13:4b:8c:4a:86:53:28:e7:eb:41:b6:68:69:15:4d:
                    ce:26:c3:aa:0a:b5:52:6f:4e:43:f1:d4:f2:f4:c1:
                    bb:7e:28:9d:14:5a:5f:5f:de:c0:3c:31:0a:ad:3e:
                    9f:f3:ef:ba:78:a2:e6:4b:ff:e1:44:fb:f1:fd:56:
                    33:45:f2:92:ae:0c:54:8e:9e:cb:c4:10:4a:cd:62:
                    54:98:3b:62:9f:5d:89:0e:b8:fb:66:55:00:47:a4:
                    d8:e5:dc:17:9c:55:f6:0a:72:cc:f5:b3:f9:30:ca:
                    4d:3c:21:eb:f9:aa:2d:fe:d3:67:b0:1d:bd:6d:04:
                    70:87:5d:8a:a6:a3:76:54:fb:f5:01:85:2e:9c:37:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:76:8C:2B:4F:FC:86:DF:C8:B3:B7:F2:88:7F:0C:A0:A2:1E:B8:5B
            X509v3 Authority Key Identifier:
                keyid:41:30:19:5A:85:0D:BB:00:99:9B:6A:A1:A1:58:0C:ED:92:CE:55:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/4130195A850DBB00999B6AA1A1580CED92CE55E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4130195A850DBB00999B6AA1A1580CED92CE55E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWzs6iszmJqhPTfHpjACsj4w57qDxdMUSViuJkLfF7U/0/323830343a393437343a3a2f33322d3332203d3e20323734383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9474::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:f9:2a:01:9a:fb:aa:31:d6:89:d7:80:c0:2e:9c:5b:81:d6:
         88:c1:6b:4f:2c:a7:49:5b:4b:15:23:07:2e:af:4e:a8:53:16:
         05:44:39:ad:bc:c3:79:99:12:60:cb:fd:7b:f9:ad:04:4a:a9:
         67:bd:1d:44:d1:f6:0c:bc:2d:e7:7d:4d:29:50:a5:ba:8a:73:
         0a:25:4b:33:06:85:aa:dc:5d:9a:e5:91:e3:1e:eb:b7:cc:8a:
         3a:08:ee:a0:97:f3:ac:d4:77:e5:47:20:b5:9b:b3:d7:b7:d2:
         a7:3c:d2:21:e5:1c:28:f4:fc:fb:3b:0a:3b:4f:03:bb:ba:ca:
         ed:4f:a4:2b:03:f0:30:49:57:5f:16:f1:39:94:73:a8:e7:15:
         d8:d7:3d:f1:2e:54:35:4a:81:b8:cb:b7:bf:2b:15:c4:a6:5c:
         05:b2:61:9f:b6:23:e0:57:15:b4:4a:89:5e:da:36:24:d5:75:
         98:e8:c4:3c:e1:f1:b0:cc:9f:4e:4b:e8:1c:86:15:16:2e:92:
         07:c5:f9:19:09:88:1b:85:5a:b9:93:2f:b0:f2:66:b6:00:fe:
         85:2c:15:07:00:66:5d:f9:4d:b5:04:9a:74:57:e2:15:dd:d2:
         92:14:96:97:6e:f3:a4:1f:2b:5b:e5:20:07:f7:d0:8f:b3:e4:
         47:20:a7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:54:06 2025 by rpki-client