Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3438203d3e20323639303536.roa
File:                     323830343a356563383a3a2f33322d3438203d3e20323639303536.roa (raw, json)
Hash identifier:          iVzGwIcktrLJfi4MMxN4YYOLT8qF41PrYjqdCiMjJL8=
Subject key identifier:   19:91:4C:C7:C2:58:E3:1B:83:D2:AA:1E:20:0C:A9:5E:77:C6:84:F7
Certificate issuer:       /CN=85338CFAF888C0350AE9CB844AEBC476C4367656
Certificate serial:       71DAD209E8545C21DA28FC13999A3AB37C4CEE21
Authority key identifier: 85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3438203d3e20323639303536.roa
Signing time:             Tue 24 Jun 2025 14:47:52 +0000
ROA not before:           Tue 24 Jun 2025 14:42:52 +0000
ROA not after:            Tue 23 Jun 2026 14:47:52 +0000
asID:                     269056
IP address blocks:        2804:5ec8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl
                          rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 03:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:da:d2:09:e8:54:5c:21:da:28:fc:13:99:9a:3a:b3:7c:4c:ee:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85338CFAF888C0350AE9CB844AEBC476C4367656
        Validity
            Not Before: Jun 24 14:42:52 2025 GMT
            Not After : Jun 23 14:47:52 2026 GMT
        Subject: CN=19914CC7C258E31B83D2AA1E200CA95E77C684F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:35:05:fb:8c:e6:c6:09:7f:c0:8a:1e:b0:
                    9b:19:a8:17:67:82:f8:0a:68:fa:d1:1d:5a:20:ed:
                    8c:c3:62:e3:23:b0:84:5f:ac:b4:7c:a0:d4:ec:f3:
                    9d:1f:d2:ce:75:5e:31:e4:95:77:ba:a8:5b:0c:82:
                    0e:f9:d9:2a:67:6b:e9:f3:3b:d5:37:03:73:c3:df:
                    ac:97:77:b5:d3:e2:69:c3:4d:67:7c:df:15:76:6f:
                    2f:57:d8:0a:32:a1:ca:83:ed:25:f0:f2:ec:66:fb:
                    b4:0e:ac:f9:ad:72:bd:3e:49:96:e5:1e:a9:36:d3:
                    88:81:54:1a:1d:1e:e6:32:f9:b6:da:c2:06:24:ef:
                    53:21:f4:7e:ab:f2:44:24:2c:67:7f:36:00:47:98:
                    60:f6:6e:7e:ee:d2:3f:bc:44:69:90:59:74:29:87:
                    86:19:0e:09:8b:f8:a7:4b:c8:a1:43:57:9b:d5:4f:
                    8b:e2:f3:4e:9e:3b:6f:57:25:5b:6c:9f:88:15:5b:
                    26:e9:f0:ae:80:ea:2c:7f:1e:9f:05:45:df:96:65:
                    40:81:93:cc:28:30:c6:26:66:b8:7b:0b:58:ea:ea:
                    45:0f:9d:f7:1e:9c:6f:a3:82:bb:b9:a3:d6:e5:7e:
                    a6:3c:af:ce:f0:fc:2b:35:43:2a:33:bc:94:bd:c3:
                    ce:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:4C:C7:C2:58:E3:1B:83:D2:AA:1E:20:0C:A9:5E:77:C6:84:F7
            X509v3 Authority Key Identifier:
                keyid:85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/323830343a356563383a3a2f33322d3438203d3e20323639303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ec8::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:60:9a:f5:72:47:03:5d:0f:fb:1c:be:1d:70:74:f3:d7:a1:
         76:60:49:74:fe:23:1c:dc:bd:74:e6:65:a3:76:66:68:3b:37:
         c9:ad:1e:06:31:37:cc:26:4c:a8:43:2a:20:2b:bb:16:81:77:
         13:0e:12:08:71:6c:76:44:9b:a4:52:df:08:0d:64:17:fe:9a:
         67:35:30:e6:68:26:8e:ad:34:77:98:01:be:a1:7a:1a:2a:6f:
         f3:71:62:9e:38:64:72:99:b0:1f:60:04:45:42:e8:6d:73:e9:
         39:75:cb:40:47:d0:0e:11:83:d2:94:a7:7f:78:c6:4c:07:dc:
         cc:5c:63:2d:75:a2:b3:64:9a:92:87:db:99:66:02:0b:60:39:
         ee:83:4a:2c:f9:75:5b:77:14:18:4e:d9:ff:e9:16:52:7a:61:
         a3:5f:01:af:69:12:64:d6:a0:4d:0e:68:73:5e:79:27:68:be:
         b2:c9:ff:58:98:4f:5c:49:df:12:e7:3d:c6:65:8d:a9:09:96:
         32:62:6a:a1:18:54:5f:ab:42:ea:03:fe:7d:a8:6a:7e:a2:e2:
         19:06:87:f9:a9:6e:92:c4:0e:41:af:a3:a2:a9:db:b4:9d:57:
         86:f3:41:35:e7:c9:fd:cf:4f:d9:6d:bc:f8:42:8d:60:db:93:
         af:52:ce:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:40:18 2025 by rpki-client