Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/323830343a336663633a3a2f33322d313238203d3e20323635393135.roa
File:                     323830343a336663633a3a2f33322d313238203d3e20323635393135.roa (raw, json)
Hash identifier:          IqZiGjuwlwLCeDHTutM5pp1/892ZrhTDRe59rjwMYak=
Subject key identifier:   4F:64:FE:34:1F:C3:85:F3:E3:D1:E5:A6:E2:EF:25:FC:EC:96:6B:15
Certificate issuer:       /CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
Certificate serial:       69F7C4FD090CDC33E3661093661930B7FA0856BA
Authority key identifier: 3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/323830343a336663633a3a2f33322d313238203d3e20323635393135.roa
Signing time:             Thu 19 Jun 2025 22:11:20 +0000
ROA not before:           Thu 19 Jun 2025 22:06:20 +0000
ROA not after:            Thu 18 Jun 2026 22:11:20 +0000
asID:                     265915
IP address blocks:        2804:3fcc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl
                          rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 06:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f7:c4:fd:09:0c:dc:33:e3:66:10:93:66:19:30:b7:fa:08:56:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BDCBF73A9FD02DE55ADC9077B216E28EC64592A
        Validity
            Not Before: Jun 19 22:06:20 2025 GMT
            Not After : Jun 18 22:11:20 2026 GMT
        Subject: CN=4F64FE341FC385F3E3D1E5A6E2EF25FCEC966B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f8:b6:94:3c:6e:df:c8:62:3e:d3:7c:fb:80:
                    b6:cb:0f:37:3b:a4:e6:8b:a3:3a:6f:06:26:20:e2:
                    51:6d:30:cb:54:0f:75:c3:23:7f:a6:9d:b4:4f:a2:
                    c4:b5:72:b4:ee:58:7d:c3:35:57:04:ff:d3:75:b0:
                    00:eb:7e:e0:6d:b5:7d:76:04:a6:80:e1:01:c3:18:
                    86:6a:2b:64:ca:5d:67:34:ea:87:85:a5:70:fc:00:
                    b3:ea:1d:60:e4:fb:fd:e4:8e:cf:90:70:03:e5:a3:
                    d1:14:e1:a0:a3:3a:a9:d5:21:17:73:46:5e:65:ac:
                    69:45:7a:78:a6:85:34:4f:b4:03:fc:fe:67:79:d9:
                    af:7d:b0:e1:e6:a6:95:39:a4:01:df:b1:6b:ec:f9:
                    5a:8a:af:98:ba:0b:33:65:a0:b9:5a:bf:aa:51:ea:
                    8a:34:d5:05:21:d8:23:ae:5d:5e:ab:f8:7f:b1:1d:
                    71:5d:68:16:bb:80:19:d8:36:2f:26:f1:5b:59:a9:
                    2d:41:ce:51:86:ba:ca:29:51:55:60:6b:b3:1b:cc:
                    96:a7:b2:cf:99:99:8b:41:c1:c5:ed:3a:31:86:ef:
                    4d:8e:cd:8d:ff:f9:e5:2d:29:ed:d6:8f:14:4f:0b:
                    23:4f:94:b7:15:51:02:cc:7b:88:ad:c6:1f:36:9d:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:64:FE:34:1F:C3:85:F3:E3:D1:E5:A6:E2:EF:25:FC:EC:96:6B:15
            X509v3 Authority Key Identifier:
                keyid:3B:DC:BF:73:A9:FD:02:DE:55:AD:C9:07:7B:21:6E:28:EC:64:59:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BDCBF73A9FD02DE55ADC9077B216E28EC64592A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AB9UTGeXEDaRJELZBnpbSnpABjWivy6CKXwNWEyc7LkQ/0/323830343a336663633a3a2f33322d313238203d3e20323635393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:63:7d:0c:7c:b9:45:79:07:03:57:7a:53:a3:6a:5e:a2:
         f1:0c:80:46:10:1d:ea:f1:b2:67:c7:4e:13:ff:41:b2:b8:51:
         26:d7:20:ac:93:f5:bf:54:3d:cb:e7:a1:79:ac:42:87:e9:ee:
         5b:11:a9:6b:3b:2a:52:ca:72:2e:55:53:26:77:31:a0:1d:33:
         fa:34:d8:66:02:9b:08:ef:16:09:47:d3:37:b9:80:37:77:fa:
         25:e7:ca:7a:f4:b1:0c:91:2c:98:3f:4b:35:62:8d:e8:91:37:
         8b:7b:e6:bf:88:89:03:32:ba:85:82:2b:06:7d:f3:47:c4:64:
         e6:3d:a7:a1:f1:06:7f:63:90:fb:2d:41:47:ac:f6:04:e8:20:
         42:7b:7f:02:1b:a9:ad:e2:e6:cf:92:cc:57:12:e0:7f:68:27:
         35:25:71:1a:7d:21:24:9e:2e:f5:b1:b0:65:c0:50:c1:4b:e7:
         4a:da:65:57:e1:06:f2:d2:01:2a:4e:97:84:8d:10:c8:4b:aa:
         84:eb:23:81:1e:45:4c:13:cf:d2:7c:e4:34:62:be:ab:89:83:
         ae:2f:d9:92:6f:d1:e8:2d:0e:41:8f:72:ee:4a:4c:de:1a:1e:
         79:6f:45:57:1f:d0:3e:79:24:33:46:14:42:81:c3:6a:e1:25:
         6b:1e:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:47:08 2025 by rpki-client