Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33342d3334203d3e20323732353831.roa
File:                     323830343a383537383a3a2f33342d3334203d3e20323732353831.roa (raw, json)
Hash identifier:          E2xyYaEHLMeZBdx+F6/x1jKYRsRH7ARE4RhPIXD2pz8=
Subject key identifier:   EA:5B:DF:D0:4D:10:E0:29:B3:10:E6:79:DB:46:F2:F0:DC:B2:D2:44
Certificate issuer:       /CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
Certificate serial:       3E63B8A7113173079525C458E54293B5BA08FFE8
Authority key identifier: 0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33342d3334203d3e20323732353831.roa
Signing time:             Wed 18 Jun 2025 17:54:13 +0000
ROA not before:           Wed 18 Jun 2025 17:49:13 +0000
ROA not after:            Wed 17 Jun 2026 17:54:13 +0000
asID:                     272581
IP address blocks:        2804:8578::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 15:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:63:b8:a7:11:31:73:07:95:25:c4:58:e5:42:93:b5:ba:08:ff:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
        Validity
            Not Before: Jun 18 17:49:13 2025 GMT
            Not After : Jun 17 17:54:13 2026 GMT
        Subject: CN=EA5BDFD04D10E029B310E679DB46F2F0DCB2D244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:89:cd:89:e1:ba:99:76:8c:0b:4e:51:df:
                    7f:fe:ec:42:7e:71:50:a6:c2:76:f2:d8:48:a6:30:
                    8e:ff:3d:53:d2:bc:4d:35:0a:8a:23:68:8d:de:c4:
                    34:77:65:42:3d:79:01:e5:61:77:5e:8f:df:7d:a8:
                    a0:bf:41:0f:65:95:63:06:47:d7:4b:e2:1c:6b:6d:
                    d7:0a:d3:86:32:de:75:3d:67:a8:49:a5:cd:ef:0d:
                    10:2f:7f:20:be:e0:16:8d:10:d4:a1:ef:51:0c:b8:
                    13:e1:9b:71:e8:ef:89:4e:09:e2:ef:27:dd:e7:9c:
                    6c:18:72:d9:0b:7d:d3:4d:f2:24:ca:a9:b2:82:3e:
                    10:b3:1c:27:9c:32:01:99:2f:92:52:37:28:91:70:
                    a4:fa:c8:cb:30:00:92:fe:78:50:aa:9d:fa:d9:6d:
                    16:12:40:c5:31:36:d4:1f:3c:9a:46:ce:9d:aa:e3:
                    6d:6d:db:e9:8f:27:67:a7:48:b8:02:3d:ea:f6:63:
                    08:ac:d2:c1:4b:00:14:32:38:f4:2d:3d:00:1e:a2:
                    ea:88:d6:ac:21:b4:f3:97:47:bc:d2:dc:80:79:a1:
                    04:50:8b:d2:3f:09:50:60:08:29:e2:08:71:ff:b7:
                    44:10:e2:1d:d3:e9:0e:f5:2e:f4:3f:68:c6:bd:5a:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5B:DF:D0:4D:10:E0:29:B3:10:E6:79:DB:46:F2:F0:DC:B2:D2:44
            X509v3 Authority Key Identifier:
                keyid:0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33342d3334203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/34

    Signature Algorithm: sha256WithRSAEncryption
         39:22:9a:a4:40:1f:b9:96:77:82:8f:b9:0e:7c:2d:44:2e:c6:
         5c:6c:3b:1b:6c:1d:e0:6d:d2:15:6d:1d:ba:66:f2:77:a2:7a:
         1b:e4:e2:a6:88:b2:14:ab:6c:d4:d1:8d:ab:e0:d1:49:94:af:
         51:ea:81:f7:a9:69:1f:74:2b:5b:df:2a:55:24:db:87:23:b8:
         9d:3b:8d:cd:08:e7:e1:18:20:49:91:25:ba:4c:81:6b:b4:9d:
         aa:87:8d:b9:f7:fa:b9:23:af:db:11:17:ec:c0:c4:e4:eb:c5:
         b6:e1:df:12:1a:d3:3a:13:90:56:e1:dc:c1:d1:10:e7:eb:45:
         50:d1:70:2e:83:53:1a:af:f7:e8:2c:54:49:66:93:8d:0c:fb:
         c9:ae:c4:3f:7e:ca:84:70:1f:45:0e:3a:82:51:2c:fe:08:a7:
         04:59:a3:08:85:cb:07:54:42:95:34:7d:73:5a:33:0c:35:29:
         dd:10:eb:c8:53:af:42:fb:64:48:eb:21:ee:b1:e4:09:0c:33:
         cd:11:6d:4e:49:a9:51:4b:a6:83:80:95:86:a1:de:e2:28:41:
         0a:bc:41:f7:75:2b:7d:70:72:ff:5d:58:af:29:a3:21:4c:29:
         e4:b0:68:01:16:3e:a9:07:c0:7f:3b:b8:e2:cd:00:c8:2b:19:
         01:c9:9f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:46:51 2025 by rpki-client