Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a3a2f33322d313238203d3e20323638353738.roa
File:                     323830343a353335383a3a2f33322d313238203d3e20323638353738.roa (raw, json)
Hash identifier:          LkxR+PfMgVbN1MGOUQ7bQJFksWIeMPvyt35MoKyrjBQ=
Subject key identifier:   77:C7:95:63:0A:49:3F:52:1E:79:44:B5:7B:23:C7:7A:BE:F7:B2:ED
Certificate issuer:       /CN=AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624
Certificate serial:       694DEB61C683F0993D8BD3A83772472576DC6C08
Authority key identifier: AC:5B:09:55:2A:68:EA:DD:67:DD:35:DE:88:EC:BD:0C:5D:B9:D6:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a3a2f33322d313238203d3e20323638353738.roa
Signing time:             Tue 10 Jun 2025 20:41:49 +0000
ROA not before:           Tue 10 Jun 2025 20:36:49 +0000
ROA not after:            Tue 09 Jun 2026 20:41:49 +0000
asID:                     268578
IP address blocks:        2804:5358::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.crl
                          rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 00:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4d:eb:61:c6:83:f0:99:3d:8b:d3:a8:37:72:47:25:76:dc:6c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624
        Validity
            Not Before: Jun 10 20:36:49 2025 GMT
            Not After : Jun  9 20:41:49 2026 GMT
        Subject: CN=77C795630A493F521E7944B57B23C77ABEF7B2ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:77:54:dc:b5:ac:d4:f9:2b:d6:c5:1e:e3:03:
                    36:ce:95:d4:04:01:7b:d2:66:72:73:e4:b8:f3:80:
                    ec:10:01:1e:fe:c1:2c:e5:a1:62:9a:ef:f5:e9:76:
                    4a:ee:88:f6:67:46:31:11:c0:58:59:f5:48:a1:d1:
                    f1:64:e9:2c:b1:7f:3b:76:fd:9f:4b:19:2a:b7:34:
                    9e:12:71:eb:8d:b7:da:17:f2:23:2f:fc:e5:61:03:
                    7a:65:46:14:ca:44:70:11:d7:89:03:10:f8:18:f9:
                    e6:37:93:e9:da:08:6a:2a:49:23:7e:b6:df:04:63:
                    d8:1f:5d:5e:d6:4f:6b:b9:a6:af:7c:49:7d:7a:15:
                    8f:71:2a:ae:88:ff:83:1f:7f:a6:7b:8c:15:9e:b2:
                    0d:fa:2c:54:6f:fd:c8:55:5d:f8:b4:74:b0:48:a0:
                    eb:39:5f:bd:6e:71:11:81:d0:90:e5:e1:3a:51:93:
                    bc:8a:91:7b:fd:b0:6c:d7:89:7c:e5:bb:50:db:32:
                    99:5d:b4:00:01:44:8e:14:ff:6d:7a:01:98:cf:06:
                    77:b7:06:87:6d:4c:de:07:c9:c0:ea:3e:1f:37:e1:
                    3b:12:09:04:dd:04:5c:ee:e1:bf:56:12:91:5f:26:
                    43:20:73:7f:b6:e6:78:3a:83:c8:b4:09:f5:41:63:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C7:95:63:0A:49:3F:52:1E:79:44:B5:7B:23:C7:7A:BE:F7:B2:ED
            X509v3 Authority Key Identifier:
                keyid:AC:5B:09:55:2A:68:EA:DD:67:DD:35:DE:88:EC:BD:0C:5D:B9:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC5B09552A68EADD67DD35DE88ECBD0C5DB9D624.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/95KpoW3AqtVcr5LzK7SnfqU6MxXbV22RRLohig9dPfZK/0/323830343a353335383a3a2f33322d313238203d3e20323638353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5358::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:b2:9c:04:e6:f6:3d:3e:dc:3c:a0:b7:50:f1:45:76:d9:a2:
         63:21:ea:8a:e1:3b:b7:5e:7b:03:d5:19:2c:9f:c5:25:99:10:
         15:99:ee:f3:10:49:f1:65:6d:d8:45:26:dc:ae:fd:ee:c8:39:
         bd:77:87:3c:f2:ed:10:bb:8e:e1:f9:5e:2c:20:44:77:fd:c5:
         7c:bb:de:36:97:63:2e:ed:ef:61:fd:52:d7:ca:85:b7:69:3d:
         e9:99:31:f7:88:b8:dc:49:f6:72:ed:ec:f5:35:e4:25:1c:d7:
         9e:02:44:31:43:87:68:97:be:68:c8:2b:e0:80:22:4f:c9:72:
         5e:64:66:35:c6:63:f3:79:d9:f5:9b:3b:af:99:ad:35:87:07:
         7a:c1:fc:99:54:dd:21:66:a1:69:39:ac:06:28:ad:78:6c:61:
         b7:45:b5:3b:56:1e:96:e7:6d:48:72:30:5e:b7:58:67:8f:61:
         aa:bd:91:36:81:eb:d4:bc:c5:97:d4:4b:69:d6:18:b5:7e:9f:
         33:59:c1:e3:ac:37:9d:9a:eb:ad:f5:15:31:8e:eb:a3:44:7e:
         f8:e5:60:ed:42:14:7f:73:2e:98:5b:ca:0f:1b:8c:8a:54:d3:
         8c:c8:c6:31:0b:63:17:30:3c:d7:97:0b:12:a8:b1:db:65:0f:
         1b:54:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 00:29:57 2025 by rpki-client