Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/323830343a3530303a3a2f33322d3332203d3e20323632343835.roa
File:                     323830343a3530303a3a2f33322d3332203d3e20323632343835.roa (raw, json)
Hash identifier:          sYkRrYyfmVJ9U4M3kEeK/T2t/TNJcMUwN37RFJJRJCs=
Subject key identifier:   B3:C6:8D:15:22:9B:7C:F1:E1:7C:73:4D:74:AC:A4:B4:C5:78:40:1B
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       0DF5C9201D4FE5CFD46044CE8E0C44F2FF6970FD
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/323830343a3530303a3a2f33322d3332203d3e20323632343835.roa
Signing time:             Sat 28 Jun 2025 21:33:39 +0000
ROA not before:           Sat 28 Jun 2025 21:28:39 +0000
ROA not after:            Sat 27 Jun 2026 21:33:39 +0000
asID:                     262485
IP address blocks:        2804:500::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 21:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f5:c9:20:1d:4f:e5:cf:d4:60:44:ce:8e:0c:44:f2:ff:69:70:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: Jun 28 21:28:39 2025 GMT
            Not After : Jun 27 21:33:39 2026 GMT
        Subject: CN=B3C68D15229B7CF1E17C734D74ACA4B4C578401B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:84:84:da:83:fb:9b:16:02:7c:cf:84:b7:
                    5a:99:4a:42:87:b8:c1:08:53:bb:2b:b0:34:d8:aa:
                    f7:0b:bc:9a:d4:73:11:19:d8:32:27:8d:5e:d1:e6:
                    e0:a6:97:11:87:1f:ec:1c:d2:4e:7e:8f:7b:dd:81:
                    00:c7:14:80:fb:4c:e4:45:9c:29:8c:e7:05:c9:ee:
                    a0:05:80:c3:25:f0:a4:06:b1:58:5a:47:ac:4a:a3:
                    93:35:7b:6c:ca:f0:bf:9e:03:56:20:92:78:0f:0b:
                    06:b6:0b:b7:6e:9b:bc:b6:f0:7b:85:1b:4f:b3:fd:
                    81:4f:72:5e:78:97:1b:8c:85:74:eb:aa:25:c9:bc:
                    98:a4:59:7a:56:cd:bf:1d:b5:02:ff:02:e3:a8:44:
                    9e:a1:98:f0:ab:f4:0d:88:be:d8:2a:a1:91:b9:0f:
                    b3:3b:96:aa:cb:b3:0d:de:24:d6:a8:f9:f6:b9:bc:
                    50:f5:ab:2d:8d:21:be:39:52:e3:8c:d4:44:eb:f1:
                    a2:85:8e:0e:56:e9:9e:66:f6:17:6f:98:74:9c:2f:
                    1b:49:99:72:70:a0:58:d5:f5:b6:27:ad:b5:38:dd:
                    52:58:02:f1:a9:31:51:cb:1e:fc:0c:a5:d1:06:c9:
                    bb:05:ec:01:9a:5d:86:b8:20:de:77:5f:f5:d4:ae:
                    ed:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C6:8D:15:22:9B:7C:F1:E1:7C:73:4D:74:AC:A4:B4:C5:78:40:1B
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/323830343a3530303a3a2f33322d3332203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:15:1b:2f:a2:d8:b3:3f:5c:c7:99:2f:42:c0:f3:3d:06:fb:
         9e:a2:cc:43:92:6b:ef:c9:b1:c9:4d:7c:6e:e2:a3:58:af:54:
         2d:2d:b2:3d:2e:e2:bc:8f:43:2e:e9:f4:f5:a4:37:02:b5:a5:
         18:49:81:9c:80:23:54:46:bc:43:6b:cc:6a:f6:15:1a:2f:9e:
         1d:76:16:98:d8:bb:52:dd:31:ea:54:17:6a:b1:01:f2:25:b2:
         6f:50:b6:31:61:f2:38:44:9e:e8:fb:e2:55:ad:b8:44:bf:7a:
         26:0e:f4:f7:ae:0f:f7:1a:37:52:05:45:8d:ce:ad:e2:b9:6c:
         9d:46:0d:15:9b:9f:89:ff:df:69:5f:1c:61:0c:88:54:2c:f8:
         1a:22:f8:e0:6f:43:07:49:3a:d5:73:00:3e:af:0b:55:63:00:
         15:5a:fd:19:f0:a1:09:48:c6:64:07:d8:13:d5:e8:77:3b:c8:
         c5:ec:7b:2c:69:bc:41:67:1c:b2:ed:a0:5f:66:73:ec:de:ee:
         e1:42:85:f5:f6:59:1f:65:25:5a:dd:70:1d:26:f6:28:8c:27:
         38:9f:99:d3:cf:ea:f9:78:51:e2:ea:f1:97:60:3e:59:4e:25:
         27:03:cb:97:35:6a:74:3c:6d:77:22:16:48:24:f6:60:ab:9d:
         b9:82:76:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:46:43 2025 by rpki-client