Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/323830343a346335343a3a2f33322d3438203d3e20323637333634.roa
File:                     323830343a346335343a3a2f33322d3438203d3e20323637333634.roa (raw, json)
Hash identifier:          RFw4SXYPm8A4RpAamhJJBm3+4/akxYBByBLAvdr7TLA=
Subject key identifier:   95:F0:6F:D8:23:38:09:82:BC:0A:55:83:A4:56:DF:B6:1B:C3:B5:09
Certificate issuer:       /CN=53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1
Certificate serial:       5B39625662CB70FF2017BDBEEE27743569BFAC12
Authority key identifier: 53:C6:B1:16:4D:F9:B5:BD:D6:7C:3C:D4:64:EC:ED:88:4B:C0:FB:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/323830343a346335343a3a2f33322d3438203d3e20323637333634.roa
Signing time:             Mon 30 Jun 2025 18:33:02 +0000
ROA not before:           Mon 30 Jun 2025 18:28:02 +0000
ROA not after:            Mon 29 Jun 2026 18:33:02 +0000
asID:                     267364
IP address blocks:        2804:4c54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.crl
                          rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 10:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:39:62:56:62:cb:70:ff:20:17:bd:be:ee:27:74:35:69:bf:ac:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1
        Validity
            Not Before: Jun 30 18:28:02 2025 GMT
            Not After : Jun 29 18:33:02 2026 GMT
        Subject: CN=95F06FD823380982BC0A5583A456DFB61BC3B509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:f2:6f:d0:d9:2f:16:4d:91:a4:d0:98:06:
                    1c:5f:92:d3:aa:55:5d:3f:99:f1:4d:8a:39:30:f1:
                    c6:02:73:45:9a:b7:b7:39:8f:10:08:74:18:8f:8a:
                    ac:c9:a8:68:62:f0:20:4c:d8:d2:2e:5a:fd:00:a9:
                    a7:44:4a:f1:87:0a:42:c2:30:08:a7:6f:fb:02:f7:
                    99:da:b7:5d:e0:ea:06:e4:df:a4:f7:78:83:8a:a8:
                    fd:70:b6:41:9a:46:44:a2:9b:34:5c:e5:45:26:30:
                    e0:04:cf:a7:65:62:68:fd:fa:cd:f8:42:38:7d:97:
                    87:c2:e6:46:42:24:b0:44:4c:62:6b:5d:c6:b5:2e:
                    ac:bc:7c:c3:1a:59:ab:0f:f2:54:1e:29:44:39:30:
                    a8:8c:36:fe:05:e7:27:2c:23:91:9a:ea:b3:18:43:
                    f4:2f:75:66:39:23:f9:3f:af:d5:f6:dd:01:5d:e8:
                    60:77:63:a2:3d:ab:cc:84:68:e1:7d:9e:8a:a3:ec:
                    c6:b7:fb:9c:58:f6:15:35:7e:d7:c1:57:d6:cb:af:
                    0d:cf:b8:e5:b3:2f:ea:1f:ec:0c:13:8d:9c:4f:4e:
                    01:73:8f:fc:3f:55:b6:21:d6:1f:7e:46:4a:a4:9f:
                    59:14:57:9a:3e:f4:ea:a7:f4:d8:8d:67:b7:06:ea:
                    9c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F0:6F:D8:23:38:09:82:BC:0A:55:83:A4:56:DF:B6:1B:C3:B5:09
            X509v3 Authority Key Identifier:
                keyid:53:C6:B1:16:4D:F9:B5:BD:D6:7C:3C:D4:64:EC:ED:88:4B:C0:FB:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53C6B1164DF9B5BDD67C3CD464ECED884BC0FBB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vVpExCMgJDg9rQ1VCRsTNYhM9MmC7fyQy9mhd3HbfC9/0/323830343a346335343a3a2f33322d3438203d3e20323637333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c54::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:04:1f:ff:f6:b4:22:e7:ab:15:7f:24:8a:b5:b3:aa:6f:6c:
         95:f0:af:56:2a:fe:64:d9:7c:8c:68:7b:f2:e0:09:fd:6f:0e:
         ff:66:d3:b5:f3:f8:a6:cc:77:39:48:c3:74:a9:d4:a8:0b:38:
         b0:d6:ad:1d:37:a3:75:b7:d7:0b:53:ab:dd:3e:1f:54:0c:44:
         2f:9a:67:a0:d9:5c:40:10:83:be:c4:88:98:9c:e3:e8:ea:cd:
         98:15:6d:a2:cb:41:b6:dc:e9:d7:e1:8d:84:b0:8b:ee:0a:ed:
         b5:98:33:49:b1:60:04:5f:88:74:4c:cc:9b:56:ed:d1:92:20:
         cd:22:4c:d3:5b:a1:70:64:32:54:79:40:a1:e8:27:01:ff:f9:
         04:64:ba:e1:0e:5f:21:d2:45:fe:fa:0e:bf:68:1f:f8:98:db:
         23:0a:a1:27:60:f8:66:fa:49:c4:ea:de:69:f0:6a:f6:a7:80:
         70:8c:54:2d:91:6e:6f:b3:ff:1f:47:a2:81:96:2e:bc:df:9a:
         4a:6e:18:a4:f2:bc:79:52:d1:c8:86:a2:5a:f2:6c:28:6b:84:
         52:89:1a:2a:71:3f:4d:c2:f5:45:5f:ff:21:cc:0a:51:f2:22:
         59:1b:4e:80:d7:06:2c:ec:6e:c5:7b:b3:ae:1c:a0:18:8c:49:
         2b:d5:ea:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:58:34 2025 by rpki-client