Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa
File:                     323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa (raw, json)
Hash identifier:          x0c53G6wS19veWxAUqMY57bBWpAyEqUbguqKbHuzXEQ=
Subject key identifier:   7E:2B:59:33:42:35:82:B8:22:19:46:31:8A:5D:30:02:6A:40:84:08
Certificate issuer:       /CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
Certificate serial:       4A5E7C47E87FBBD159511E3F7D527724C2DDED28
Authority key identifier: 0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa
Signing time:             Wed 18 Jun 2025 17:54:13 +0000
ROA not before:           Wed 18 Jun 2025 17:49:13 +0000
ROA not after:            Wed 17 Jun 2026 17:54:13 +0000
asID:                     272581
IP address blocks:        2804:8578:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 17:43:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5e:7c:47:e8:7f:bb:d1:59:51:1e:3f:7d:52:77:24:c2:dd:ed:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
        Validity
            Not Before: Jun 18 17:49:13 2025 GMT
            Not After : Jun 17 17:54:13 2026 GMT
        Subject: CN=7E2B5933423582B8221946318A5D30026A408408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0d:5e:89:20:55:d6:4b:b4:21:1d:cd:03:49:
                    c2:ef:d3:15:8d:fa:a1:6c:9f:ab:f2:0c:d0:91:4a:
                    49:7b:88:20:43:b7:6d:c2:81:00:2a:c2:aa:66:79:
                    07:64:06:20:54:81:45:c2:29:9b:36:f2:9f:8f:8f:
                    88:c9:b3:72:b5:e9:50:15:e5:ae:15:a9:0d:49:7f:
                    74:c5:35:69:ba:4e:67:20:7b:64:9e:59:c0:9f:ef:
                    48:8b:0b:de:6e:d9:de:47:2b:e9:15:a4:b1:0e:d9:
                    ac:8a:0b:e3:b1:5f:83:89:0f:f0:51:a1:82:5d:f8:
                    7a:9c:86:ee:1d:57:73:0d:f2:8f:20:9f:31:6c:9a:
                    8a:df:32:aa:46:1f:e8:e5:57:a0:26:1b:b9:99:5d:
                    54:52:72:b3:c7:cc:07:55:f4:90:81:56:b2:71:fe:
                    61:51:f8:c6:45:c7:0e:79:d3:71:5e:47:e2:3b:ef:
                    ca:e4:b0:a8:52:f4:72:8f:86:9e:14:ac:80:c0:ee:
                    ae:4a:39:9a:23:22:af:47:17:a5:ba:14:fa:96:98:
                    a9:f1:e4:e4:5d:d2:99:52:f7:7c:37:16:23:66:f3:
                    80:41:d5:ea:ae:e7:c4:84:de:b0:d2:32:f6:06:7e:
                    08:f8:ed:6d:bc:43:b2:3e:4c:78:6d:71:0b:42:38:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2B:59:33:42:35:82:B8:22:19:46:31:8A:5D:30:02:6A:40:84:08
            X509v3 Authority Key Identifier:
                keyid:0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a383030303a3a2f33332d3333203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         c9:02:07:e9:0e:0e:f1:6f:18:b6:12:94:9d:7e:87:09:4e:4b:
         a9:b6:30:79:85:7e:55:6a:a9:cd:13:5c:df:fa:25:69:2c:61:
         4c:0b:92:f6:e3:73:0e:1a:56:df:d2:5f:78:a2:eb:76:9b:f9:
         c2:8b:8d:55:95:70:ff:b7:92:9d:19:82:32:4b:f7:4a:a5:fe:
         80:60:b1:38:95:6a:27:b4:b3:f2:0a:fb:06:87:c9:6d:ec:4e:
         bc:da:5d:8c:00:54:a2:d0:e2:a6:8d:4e:80:f3:49:33:7a:7b:
         35:de:08:eb:25:3d:6c:23:c7:e5:32:9c:d7:26:81:72:46:bb:
         d3:b3:ca:92:04:7a:09:a4:3a:ec:a1:63:50:40:5a:65:89:bc:
         fc:38:27:8a:76:02:90:00:5a:1d:78:79:af:c1:5f:7e:6e:41:
         32:04:27:84:3f:1a:37:e3:4a:58:59:fc:ea:2f:3b:b6:14:3d:
         3b:b9:b5:5f:87:bf:b5:52:37:71:24:1c:e3:03:64:59:0b:81:
         01:5e:4b:4c:dd:4a:79:bc:e2:b3:ad:76:e3:ed:30:0b:6a:2d:
         4b:91:87:4b:85:ef:0b:20:ce:1c:81:28:72:cf:82:63:9f:b9:
         83:1d:d6:4c:42:33:51:de:80:da:8a:8a:b6:b5:88:9a:73:91:
         59:e7:da:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:46:04 2025 by rpki-client