Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a3130333a3a2f34382d3438203d3e20323635393530.roa
File:                     323830343a343034633a3130333a3a2f34382d3438203d3e20323635393530.roa (raw, json)
Hash identifier:          gVGofx/C/pxhJOPBLM5jtFW4ObjIEWPajGsq0u8MGHA=
Subject key identifier:   76:F7:26:F9:9F:96:50:88:03:13:55:DF:31:E1:EB:96:2B:79:D6:98
Certificate issuer:       /CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
Certificate serial:       60BCACE158DFEEDB41CD6DC469E2BF1C66F937A0
Authority key identifier: 2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a3130333a3a2f34382d3438203d3e20323635393530.roa
Signing time:             Wed 11 Jun 2025 05:46:59 +0000
ROA not before:           Wed 11 Jun 2025 05:41:59 +0000
ROA not after:            Wed 10 Jun 2026 05:46:59 +0000
asID:                     265950
IP address blocks:        2804:404c:103::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 07:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:bc:ac:e1:58:df:ee:db:41:cd:6d:c4:69:e2:bf:1c:66:f9:37:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
        Validity
            Not Before: Jun 11 05:41:59 2025 GMT
            Not After : Jun 10 05:46:59 2026 GMT
        Subject: CN=76F726F99F965088031355DF31E1EB962B79D698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b8:de:e8:59:33:ed:e8:09:db:3b:b6:58:c0:
                    ca:fd:13:2d:78:3e:eb:cd:f2:bc:d5:f8:84:aa:0a:
                    4d:d2:d3:b3:76:2d:e5:28:f0:0c:e5:7f:26:30:d0:
                    81:64:14:81:4c:0b:84:ac:2f:59:c1:21:7a:ca:35:
                    d7:a3:78:f5:81:64:55:bb:50:82:72:9e:42:63:86:
                    0b:90:a5:63:be:29:dc:82:99:81:ff:4a:9e:66:f3:
                    8a:d5:d3:f6:f9:28:b9:8c:d3:0c:f5:86:cc:7a:97:
                    64:5b:14:a4:46:75:e1:ac:ac:61:8a:b1:46:bd:62:
                    8c:0a:63:8a:ab:5f:4d:b0:95:e5:b3:bd:ec:37:a1:
                    75:2f:78:be:d6:1c:ea:56:10:b5:76:47:c8:61:29:
                    d0:c8:45:a5:d2:e6:63:ca:b4:be:6c:05:2b:50:1d:
                    9c:7d:4b:6a:03:90:e3:65:56:ad:67:43:c0:21:85:
                    b9:54:48:2c:6d:7e:74:ad:24:d3:08:4e:f5:85:d0:
                    10:db:e9:80:8d:8c:1d:eb:df:7e:d2:3b:67:14:58:
                    54:75:8f:9f:e7:0f:0f:e5:d8:b8:87:b9:3c:1f:05:
                    f0:b4:ae:43:88:05:79:0d:13:60:82:29:dd:d2:28:
                    22:48:e9:58:7c:41:51:a7:ea:79:3e:25:2e:02:41:
                    d2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F7:26:F9:9F:96:50:88:03:13:55:DF:31:E1:EB:96:2B:79:D6:98
            X509v3 Authority Key Identifier:
                keyid:2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a3130333a3a2f34382d3438203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:404c:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:59:46:b8:ba:be:05:52:fa:b1:e0:5a:a2:42:89:b7:a5:b3:
         54:c2:46:ef:a4:32:e4:a2:60:44:a0:91:c3:9b:b0:a6:54:ad:
         c9:f8:0f:f4:e9:4b:95:9c:dc:b3:11:e1:66:64:a5:7b:db:cc:
         a3:23:6c:06:d2:3d:ef:45:b0:41:7d:29:fb:f5:c7:31:4b:5d:
         b9:be:8b:bb:0f:e9:0b:d7:34:9a:24:81:e9:89:08:ec:44:be:
         e8:84:f9:e3:07:85:d9:58:77:b0:a6:f5:c8:ac:e4:ab:1a:ca:
         25:c7:17:bf:51:27:c7:6b:a0:2c:92:19:f6:1f:09:d7:fb:a3:
         a7:52:1c:fb:20:8b:09:43:d1:20:10:50:31:29:70:91:cf:97:
         48:e8:b3:bd:73:16:3d:fe:5a:7f:e7:ae:6c:21:9c:8f:0b:48:
         89:60:1e:db:88:f4:ae:9f:7f:6c:9c:e8:cc:2c:1e:93:5c:d8:
         19:b0:7a:4d:dd:96:17:e1:38:cf:01:2e:ea:ba:25:4b:4b:2b:
         5f:55:85:a7:4a:29:0f:83:83:ee:88:a5:8c:a1:70:1f:5f:bc:
         39:5e:a2:26:48:fc:be:87:23:ec:ef:18:bf:2e:14:4b:78:31:
         77:cf:a8:56:db:9e:c4:22:ae:84:78:f6:fa:e5:8c:2c:57:24:
         87:2c:1e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:05:07 2025 by rpki-client