Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33352d3335203d3e20323635323934.roa
File:                     323830343a326461343a3a2f33352d3335203d3e20323635323934.roa (raw, json)
Hash identifier:          cVSB/QLmJomMG2nrpxfpElrZAltZG5VZeSggnlMbh24=
Subject key identifier:   78:6F:66:96:44:C7:C8:AB:31:17:11:68:D6:AD:51:8F:77:95:37:D0
Certificate issuer:       /CN=C6097CB6BD5F2601D6B32994C5DA4AD5568AB473
Certificate serial:       285540ECF6602E3137003EC3F85A22E83BD84C0E
Authority key identifier: C6:09:7C:B6:BD:5F:26:01:D6:B3:29:94:C5:DA:4A:D5:56:8A:B4:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33352d3335203d3e20323635323934.roa
Signing time:             Tue 17 Jun 2025 11:28:10 +0000
ROA not before:           Tue 17 Jun 2025 11:23:10 +0000
ROA not after:            Tue 16 Jun 2026 11:28:10 +0000
asID:                     265294
IP address blocks:        2804:2da4::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.crl
                          rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 14:33:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:55:40:ec:f6:60:2e:31:37:00:3e:c3:f8:5a:22:e8:3b:d8:4c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6097CB6BD5F2601D6B32994C5DA4AD5568AB473
        Validity
            Not Before: Jun 17 11:23:10 2025 GMT
            Not After : Jun 16 11:28:10 2026 GMT
        Subject: CN=786F669644C7C8AB31171168D6AD518F779537D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:2e:5c:61:65:37:3e:c0:51:95:60:7d:dd:
                    b3:a4:96:ed:2f:65:a7:3c:bd:c3:0c:2c:f8:43:c7:
                    a3:80:42:8f:b0:ad:eb:dd:99:05:33:16:3b:33:ae:
                    ec:ba:a7:f3:9a:56:e1:2c:3d:17:b7:41:2a:da:3b:
                    c5:3b:ef:63:5e:df:67:63:9d:60:97:4d:52:5a:33:
                    a3:5e:6f:f2:3d:4a:35:19:17:e4:7f:c9:e5:89:39:
                    7b:99:fe:79:39:07:55:ed:f9:61:c8:56:d7:64:df:
                    6b:53:15:86:35:a9:76:fc:b2:49:80:bf:ae:c5:f7:
                    69:b0:6f:71:8e:a7:d0:1a:67:8b:8e:e5:00:00:82:
                    c4:7a:9d:74:3c:ab:a8:fb:00:8e:25:1b:89:f8:e1:
                    49:a2:b5:e7:92:d0:66:6f:5f:bf:59:82:f8:d7:f3:
                    75:a3:7a:55:7f:76:0a:8d:44:98:f6:ac:f6:38:ad:
                    56:ae:60:89:4b:3e:2a:23:2b:86:1f:2d:00:bd:cd:
                    f1:15:6e:14:72:31:dc:75:15:ff:6e:c8:a5:54:d1:
                    a7:32:22:f6:e3:3a:fb:32:a5:a9:ba:2d:5c:dc:30:
                    4e:dd:8c:e2:49:b8:4a:d8:03:da:74:0c:22:7d:be:
                    ff:c5:d6:9e:9a:e3:86:b0:60:0c:90:c5:d3:57:07:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6F:66:96:44:C7:C8:AB:31:17:11:68:D6:AD:51:8F:77:95:37:D0
            X509v3 Authority Key Identifier:
                keyid:C6:09:7C:B6:BD:5F:26:01:D6:B3:29:94:C5:DA:4A:D5:56:8A:B4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33352d3335203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2da4::/35

    Signature Algorithm: sha256WithRSAEncryption
         73:c3:c5:ce:f8:f0:09:22:7a:46:6d:c7:fe:ab:af:c0:1c:04:
         1b:28:00:32:4e:13:e3:ba:55:9d:27:66:de:c2:24:31:9e:22:
         15:03:c4:08:2e:f5:79:40:8a:9c:b8:79:8a:a5:b5:2c:c1:34:
         64:97:d1:2b:af:4b:7f:63:54:15:3d:44:b3:22:83:47:0d:4f:
         6e:d6:c1:cf:c5:35:25:d5:15:76:e0:f7:2e:d9:e3:83:58:df:
         5f:46:a6:65:80:82:0b:ab:3c:90:fb:3d:27:ef:b7:eb:c1:3e:
         c3:b3:f4:1c:0c:84:50:46:d8:59:be:c5:46:d3:2f:3c:f3:46:
         c8:66:40:38:52:23:65:02:7d:97:65:f0:cc:c6:8d:51:46:16:
         97:d7:0c:bb:f0:be:dd:8d:72:1a:c4:5b:d6:29:b8:bf:83:33:
         99:e1:14:eb:a4:d6:e5:4c:d4:9b:35:ed:56:42:6d:34:a6:5f:
         f3:08:97:9f:f1:ea:16:99:4a:35:7d:ef:c9:a6:f3:ed:7e:39:
         19:1b:7c:8a:ae:86:96:50:26:43:6d:4b:6d:b5:6e:83:a8:57:
         bf:7f:f6:30:38:1f:17:a5:e4:46:e6:71:ec:4d:44:a9:c7:3f:
         e7:2f:6e:68:39:20:55:7d:d0:ea:82:df:c6:be:35:15:5f:06:
         99:87:eb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:35:42 2025 by rpki-client