Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a393239323a3a2f34382d3438203d3e20323635393530.roa
File:                     323830343a343034633a393239323a3a2f34382d3438203d3e20323635393530.roa (raw, json)
Hash identifier:          AVaahXdHBAIrVbNBM6y9xY9e1Ah+RFuuhXeFxmYqflc=
Subject key identifier:   87:0F:90:1E:EF:9A:42:55:53:A4:92:80:B9:FC:B8:EC:E4:CB:51:DB
Certificate issuer:       /CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
Certificate serial:       5A8FCE552DFF1250712F1B2DE64749FA5E4B96C5
Authority key identifier: 2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a393239323a3a2f34382d3438203d3e20323635393530.roa
Signing time:             Wed 11 Jun 2025 05:47:00 +0000
ROA not before:           Wed 11 Jun 2025 05:42:00 +0000
ROA not after:            Wed 10 Jun 2026 05:47:00 +0000
asID:                     265950
IP address blocks:        2804:404c:9292::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl
                          rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 07:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8f:ce:55:2d:ff:12:50:71:2f:1b:2d:e6:47:49:fa:5e:4b:96:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DCA2D45B3BD5112EAF183233C1838B22FE43763
        Validity
            Not Before: Jun 11 05:42:00 2025 GMT
            Not After : Jun 10 05:47:00 2026 GMT
        Subject: CN=870F901EEF9A425553A49280B9FCB8ECE4CB51DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d1:78:a4:29:a5:5d:d3:cf:4b:91:a6:99:67:
                    92:bd:0b:e2:21:03:96:aa:22:04:b0:6e:bb:76:76:
                    62:5e:1d:9e:f3:57:e2:09:74:9d:93:93:1b:d2:5e:
                    0f:c3:1e:40:c3:a3:44:d3:06:8e:b8:4a:67:6f:db:
                    6e:bc:ff:bb:89:fe:bb:94:9f:9a:26:96:a5:d0:00:
                    e4:a0:71:f3:45:84:ec:c1:b4:59:38:53:c9:2a:49:
                    9a:e2:9d:5a:38:63:a9:84:27:fb:8c:98:14:b1:80:
                    a7:29:6c:ab:1e:39:6c:73:0b:85:ca:fc:e7:1c:f1:
                    1c:ec:cd:ff:e0:85:e1:3f:49:44:89:f7:f7:b3:9a:
                    cb:77:64:8a:bb:58:56:8c:d1:41:91:f4:37:5d:3e:
                    13:7d:96:f7:39:d2:9c:1b:ca:f4:97:e4:9a:77:c6:
                    44:0f:de:9e:d6:eb:dd:06:c3:3e:7a:61:52:66:11:
                    96:d3:ae:f0:20:f2:92:96:44:5a:37:d9:e0:57:62:
                    cc:3c:1f:cb:58:68:a8:61:91:55:8d:22:22:33:e2:
                    56:25:e8:a2:ac:cb:3c:84:a8:ca:96:b4:1e:01:b1:
                    69:50:8b:6a:0b:1a:ed:c1:f5:0e:fa:73:0d:04:ac:
                    10:60:f4:5d:ce:c8:4b:4c:c8:34:2c:20:79:f8:74:
                    30:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0F:90:1E:EF:9A:42:55:53:A4:92:80:B9:FC:B8:EC:E4:CB:51:DB
            X509v3 Authority Key Identifier:
                keyid:2D:CA:2D:45:B3:BD:51:12:EA:F1:83:23:3C:18:38:B2:2F:E4:37:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/2DCA2D45B3BD5112EAF183233C1838B22FE43763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DCA2D45B3BD5112EAF183233C1838B22FE43763.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6y5Q9C9LwfreSLkK8XsMF7xAjw5h9KqjybmNVvPwg4uC/0/323830343a343034633a393239323a3a2f34382d3438203d3e20323635393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:404c:9292::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:88:07:1c:f8:8d:cd:13:e5:f8:e6:07:41:41:76:44:cf:b7:
         64:86:b6:9d:4b:ee:e2:ff:08:83:86:d3:9d:74:f7:14:80:5c:
         cd:d9:eb:ca:a2:64:21:8e:ed:8c:68:8f:59:98:51:1b:f3:72:
         69:d3:04:10:74:c9:44:81:90:7b:dc:61:91:1e:e1:8c:94:40:
         a8:62:80:be:1e:3f:8f:3d:fa:a7:00:b8:02:a0:6d:82:4a:f3:
         06:54:8b:eb:90:62:23:6a:20:10:ba:a5:d9:9c:2e:3f:f7:5b:
         10:b0:14:a8:49:e4:f7:ef:6d:36:34:92:91:11:1e:bf:ba:1d:
         48:ad:1a:b2:59:73:d0:9a:a9:e9:7b:77:4f:24:7d:7f:ab:56:
         27:b8:31:a1:d9:88:80:e7:a5:2c:44:6d:0f:1d:26:21:08:68:
         5c:c2:9a:98:04:83:66:66:7b:1d:f7:21:e8:db:a9:cf:dc:35:
         c4:7c:64:54:44:d1:e8:9d:bb:8b:19:7d:b3:59:f5:07:3a:28:
         3e:dd:77:ef:35:4c:5c:63:00:61:a7:d0:80:37:83:54:09:39:
         74:ce:2e:97:8a:70:5d:58:38:0a:3b:b9:61:4c:c6:00:4f:51:
         e3:d6:2b:4c:c3:24:ad:c0:24:04:71:cc:de:96:d0:d9:ba:97:
         9d:a2:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:32:15 2025 by rpki-client