Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/323830343a346261343a3a2f33322d3336203d3e20323637333230.roa
File:                     323830343a346261343a3a2f33322d3336203d3e20323637333230.roa (raw, json)
Hash identifier:          zBmzJ5ngMzyTxbPDph3+Klnh09o64jqvtJJAOBcF29g=
Subject key identifier:   4F:55:00:31:04:CD:F6:7B:96:7E:90:08:59:82:D7:3C:B5:A0:F1:FD
Certificate issuer:       /CN=2093C028134D5E53FE47E27335D15EB3DE7F9C85
Certificate serial:       147AAF998579F7ABE3FB3E0A38FB6ED31DF8341D
Authority key identifier: 20:93:C0:28:13:4D:5E:53:FE:47:E2:73:35:D1:5E:B3:DE:7F:9C:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2093C028134D5E53FE47E27335D15EB3DE7F9C85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/323830343a346261343a3a2f33322d3336203d3e20323637333230.roa
Signing time:             Fri 13 Jun 2025 00:07:48 +0000
ROA not before:           Fri 13 Jun 2025 00:02:48 +0000
ROA not after:            Fri 12 Jun 2026 00:07:48 +0000
asID:                     267320
IP address blocks:        2804:4ba4::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/2093C028134D5E53FE47E27335D15EB3DE7F9C85.crl
                          rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/2093C028134D5E53FE47E27335D15EB3DE7F9C85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2093C028134D5E53FE47E27335D15EB3DE7F9C85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 18:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7a:af:99:85:79:f7:ab:e3:fb:3e:0a:38:fb:6e:d3:1d:f8:34:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2093C028134D5E53FE47E27335D15EB3DE7F9C85
        Validity
            Not Before: Jun 13 00:02:48 2025 GMT
            Not After : Jun 12 00:07:48 2026 GMT
        Subject: CN=4F55003104CDF67B967E90085982D73CB5A0F1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:48:3c:ce:90:fd:ff:f3:b6:71:72:f9:f7:c4:
                    da:54:b7:f7:c4:a5:a0:6f:a6:a6:30:b3:3b:7e:6c:
                    52:f1:2e:b6:25:4f:2d:14:17:d5:57:1f:f9:17:34:
                    0d:76:b6:11:0c:bf:89:5a:f9:68:86:e4:d3:ee:79:
                    5f:cb:9a:e5:af:5a:69:e0:2f:7d:cd:08:8c:91:ef:
                    12:8b:61:63:28:44:cd:9a:c8:4d:6c:88:77:ce:8f:
                    2f:e0:5f:25:a3:50:25:c4:88:3d:66:51:88:f5:d3:
                    39:f1:7e:71:25:0b:07:85:f5:10:35:44:45:67:c3:
                    b9:91:14:8c:a1:bd:ce:1d:fd:b4:4a:e7:4a:37:92:
                    5b:77:3c:99:9a:98:c6:a6:ec:f3:72:f6:29:f4:51:
                    eb:01:87:d8:be:f0:e8:7d:5a:f0:1e:c8:5f:d1:ee:
                    12:98:1c:39:8d:e2:6d:dc:40:75:3d:0a:dc:86:ce:
                    e5:3e:43:21:76:d8:d9:05:4a:99:d4:18:43:b6:96:
                    9e:f9:94:4e:37:7d:cf:8e:e1:4e:6c:4c:0a:40:0d:
                    25:9d:d9:73:af:25:ea:f5:fb:6a:f3:fb:8c:e8:91:
                    4e:94:e7:b9:6e:4f:99:18:22:0d:ad:34:2c:2e:c3:
                    49:50:5e:36:3f:a5:d6:5b:d5:5d:f9:d2:b6:79:2e:
                    29:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:55:00:31:04:CD:F6:7B:96:7E:90:08:59:82:D7:3C:B5:A0:F1:FD
            X509v3 Authority Key Identifier:
                keyid:20:93:C0:28:13:4D:5E:53:FE:47:E2:73:35:D1:5E:B3:DE:7F:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/2093C028134D5E53FE47E27335D15EB3DE7F9C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2093C028134D5E53FE47E27335D15EB3DE7F9C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73Z53K3jApso9T86FkkiLYJH6raB5RJGKC8EFJjAaybN/0/323830343a346261343a3a2f33322d3336203d3e20323637333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ba4::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:de:5d:7c:91:0a:24:9a:ff:d0:92:5f:4e:f2:a9:c5:cf:f4:
         6d:b8:45:bc:71:78:96:15:a6:14:19:f6:bc:22:a1:67:3f:12:
         e1:34:d7:97:bd:e6:98:1f:3c:b2:12:5e:af:1c:5e:38:7f:ae:
         e7:d9:e7:eb:86:0b:6b:3b:5f:4d:56:28:13:08:af:3b:a9:24:
         dd:e7:33:49:2d:03:e8:18:f7:a1:97:02:77:6e:a0:2f:7a:b0:
         c1:c3:74:74:05:65:ec:01:49:5d:13:73:8c:a6:71:9a:83:26:
         9a:3a:50:41:ab:c9:1f:c5:14:bd:eb:a6:39:e0:7d:d1:81:be:
         e6:00:ca:e7:2a:f4:8f:db:c5:29:27:e3:57:14:85:01:77:db:
         2c:1f:6e:55:ce:70:b6:a6:4b:2e:ec:98:4f:66:d0:87:6e:b1:
         ab:7d:07:60:db:19:a6:11:65:e6:62:9d:3b:be:a4:f3:42:7c:
         11:96:91:13:7b:9a:ad:c7:c6:0c:b0:c4:5f:92:72:ca:7a:60:
         9e:2c:53:7a:5a:ae:a4:9b:e5:bc:0b:c0:33:0d:55:02:3c:b4:
         39:d8:32:a4:2b:ef:25:4b:09:36:b5:68:d1:80:cb:f3:00:5a:
         37:70:4b:2a:e6:bb:f0:1e:2f:52:65:75:46:27:4a:83:e4:47:
         40:33:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:50:31 2025 by rpki-client