Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/323830343a386165303a3a2f33322d3335203d3e203631363130.roa
File:                     323830343a386165303a3a2f33322d3335203d3e203631363130.roa (raw, json)
Hash identifier:          AwoMQtgyt/kdLsTphXgJ7AVOtMROCNU/HFZAamrJt6U=
Subject key identifier:   14:E1:96:0C:19:C5:2A:FE:34:54:0F:33:12:BB:31:42:2C:00:55:75
Certificate issuer:       /CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
Certificate serial:       0444C83A303CE0F3A81C992959D2A53C179D372C
Authority key identifier: 4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/323830343a386165303a3a2f33322d3335203d3e203631363130.roa
Signing time:             Sun 22 Jun 2025 22:02:02 +0000
ROA not before:           Sun 22 Jun 2025 21:57:02 +0000
ROA not after:            Sun 21 Jun 2026 22:02:02 +0000
asID:                     61610
IP address blocks:        2804:8ae0::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl
                          rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 04:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:44:c8:3a:30:3c:e0:f3:a8:1c:99:29:59:d2:a5:3c:17:9d:37:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD
        Validity
            Not Before: Jun 22 21:57:02 2025 GMT
            Not After : Jun 21 22:02:02 2026 GMT
        Subject: CN=14E1960C19C52AFE34540F3312BB31422C005575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:a2:c3:c3:8a:8b:24:d8:91:2c:7b:ed:8c:
                    c5:2e:57:14:87:c6:bf:26:e3:51:d8:96:32:a0:6a:
                    2d:ca:4a:9c:e5:e6:a7:85:eb:0e:da:06:a6:a0:33:
                    8b:51:02:22:b5:ba:00:6d:28:1e:6c:6c:82:78:d2:
                    fd:0f:27:fb:ce:f4:59:34:d0:79:1d:f6:46:8d:61:
                    99:4b:49:70:2e:f1:4f:86:d6:90:dd:88:d2:6f:83:
                    77:8f:62:ee:58:83:80:2f:e9:45:71:9e:ff:64:04:
                    56:47:38:9e:30:1c:45:e9:34:13:82:13:2a:a5:2a:
                    6e:3c:81:05:f1:7b:36:d6:c4:8c:68:de:50:28:f0:
                    b2:ae:02:9f:60:e7:09:bc:d8:b2:ff:c9:ea:4e:d7:
                    9b:57:6d:3e:42:e5:44:ce:ca:22:2b:02:6d:83:1f:
                    d0:6a:35:38:9b:1c:87:ca:e4:0a:0f:06:fc:56:7c:
                    df:2d:58:a8:06:18:6e:97:d2:68:a3:f1:4f:03:58:
                    b6:49:cd:54:45:4f:ad:c1:ff:0c:cd:c8:bb:11:e2:
                    a1:13:04:26:df:bf:6d:69:cb:34:2e:cc:fe:a1:72:
                    96:71:b8:f6:cd:00:5f:1a:62:93:b5:8c:1f:44:4a:
                    3f:9a:27:78:26:7e:2c:2b:ae:e6:38:31:07:14:ed:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E1:96:0C:19:C5:2A:FE:34:54:0F:33:12:BB:31:42:2C:00:55:75
            X509v3 Authority Key Identifier:
                keyid:4B:3F:BC:1F:37:21:B6:D1:1E:11:B1:D8:79:FC:6A:C8:99:4D:7D:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3FBC1F3721B6D11E11B1D879FC6AC8994D7DDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85tAm5nyLLvSrUdgRt44TPY5vR9qTbyzFMRDUaTVNuFW/0/323830343a386165303a3a2f33322d3335203d3e203631363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         dd:26:69:2b:62:bb:7a:5d:d0:fd:59:6f:64:37:e4:f9:57:26:
         49:32:a0:03:4f:6a:b5:00:0d:f9:de:db:3f:cf:7d:1c:d2:90:
         e0:19:7b:2e:9d:6b:a7:57:f0:64:82:77:06:84:fb:09:7c:89:
         16:3f:46:6b:54:42:c6:40:cb:a9:de:52:51:af:6d:e5:03:7f:
         06:95:e6:0e:2f:1e:ec:84:43:f6:ff:c1:26:44:7f:a1:8a:24:
         3e:e5:78:0a:41:6a:b1:d9:e7:cb:ad:8b:6d:8a:e6:40:97:a2:
         6b:74:52:c1:e4:4b:42:25:15:56:c9:bc:35:50:61:f3:a6:a7:
         9f:43:ed:e2:e2:f6:d5:03:02:ae:9c:f2:12:c4:99:dc:18:7d:
         5d:7d:ce:33:f1:0d:3e:c9:10:e6:83:6e:e6:f0:5b:72:a0:15:
         f9:40:1d:1e:94:61:b4:a4:58:dc:88:f6:04:3b:3a:64:29:9e:
         cc:36:13:46:ab:e1:90:b0:eb:17:b6:6d:31:5f:96:51:d1:58:
         92:92:9d:8e:c5:00:54:b8:80:25:d9:4d:ed:03:f1:05:a5:62:
         6d:90:98:38:ab:af:70:9e:78:6f:b4:c1:90:9a:b0:21:16:8d:
         16:02:79:19:ce:36:2a:bf:9d:c6:cf:09:63:ea:10:8f:0d:35:
         e0:58:52:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 12:04:48 2025 by rpki-client