Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa
File:                     323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa (raw, json)
Hash identifier:          c1uYt5fcoKgMc/KghroZTfAZnrmCpo+exnVy7t3s5JM=
Subject key identifier:   60:32:5F:35:4C:F8:25:2D:29:A0:35:7E:B3:7C:BD:FE:65:9D:38:5C
Certificate issuer:       /CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
Certificate serial:       074775B8A63DA2430E4F07F68A9EAB8A29D97E25
Authority key identifier: 0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa
Signing time:             Wed 18 Jun 2025 17:54:14 +0000
ROA not before:           Wed 18 Jun 2025 17:49:14 +0000
ROA not after:            Wed 17 Jun 2026 17:54:14 +0000
asID:                     272581
IP address blocks:        2804:8578:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 16:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:47:75:b8:a6:3d:a2:43:0e:4f:07:f6:8a:9e:ab:8a:29:d9:7e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
        Validity
            Not Before: Jun 18 17:49:14 2025 GMT
            Not After : Jun 17 17:54:14 2026 GMT
        Subject: CN=60325F354CF8252D29A0357EB37CBDFE659D385C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:eb:30:17:23:f6:8c:8e:88:a8:41:31:64:8b:
                    10:3b:89:51:b2:0d:56:20:82:7d:46:19:bf:ec:a5:
                    9a:f9:85:92:b0:7d:d6:1c:f6:c9:19:ab:b7:13:71:
                    26:15:6f:66:f7:ab:e7:d4:a3:4c:bb:47:e0:c9:e7:
                    80:a7:a3:ae:04:c9:7b:7e:5c:a8:cf:cf:79:bc:e9:
                    0b:0d:70:86:c6:90:d0:e8:0c:9b:02:af:66:b4:72:
                    59:8a:d1:87:16:9b:70:3c:21:ac:f9:c2:75:d8:cf:
                    05:0d:ca:bd:49:be:2b:23:6e:ee:03:70:a7:0b:f7:
                    18:e1:44:11:32:21:9d:ff:e4:01:93:ea:c5:63:51:
                    78:74:dc:95:d7:8d:41:af:78:1b:04:b4:40:6d:6a:
                    77:99:81:bb:c8:21:76:bf:7f:52:1b:f8:47:b2:f5:
                    30:19:0d:5f:c1:26:c5:39:80:5e:f9:0a:31:ee:bb:
                    8a:79:1b:f0:f2:1e:5e:22:3c:4a:a1:92:d7:c7:3a:
                    05:9e:cf:3b:1d:ad:ca:d6:63:4f:31:cb:ed:01:6e:
                    40:62:70:96:6a:9f:b4:bc:09:2b:d3:e0:26:ba:33:
                    4d:b4:0a:27:19:2a:3a:7f:47:7a:0d:74:91:c5:f7:
                    f0:7e:ca:36:27:7a:84:de:d1:37:cb:e8:66:df:a6:
                    22:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:32:5F:35:4C:F8:25:2D:29:A0:35:7E:B3:7C:BD:FE:65:9D:38:5C
            X509v3 Authority Key Identifier:
                keyid:0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a633030303a3a2f33342d3334203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:a0:d1:32:6a:a7:af:d5:d7:62:b1:e4:bc:55:e6:87:44:92:
         d0:4f:fa:db:4c:15:e1:a9:a9:6f:46:62:58:20:a9:a1:91:7f:
         5e:8c:30:e0:7c:26:e1:15:c0:b5:28:57:6a:20:3c:ac:1d:53:
         2d:e1:54:79:78:7a:3d:df:29:3e:cb:f5:a5:47:7c:84:bb:77:
         ce:21:38:6b:a6:de:47:fb:cb:eb:16:2b:c2:95:47:87:63:03:
         f7:b4:cf:84:d9:da:04:b6:39:46:07:bd:bb:c7:0e:4f:b8:64:
         b2:41:7d:9c:96:9a:79:14:e3:ae:6a:8a:95:98:43:6f:7d:b2:
         9c:2b:92:2b:b2:96:01:f8:cb:84:05:16:5b:ae:81:49:66:b4:
         09:a0:00:46:66:4c:e6:b4:56:35:3c:d9:c3:ef:67:72:b1:5f:
         0d:7e:a4:a1:c4:37:e2:ae:f4:d9:03:4a:32:84:b8:15:a4:4f:
         e3:41:88:1f:b9:ae:53:9a:6f:a3:11:ec:1f:fe:9c:6e:3c:cb:
         2f:bf:dd:59:08:66:2b:92:97:38:c1:4c:48:cb:c6:6f:8e:ca:
         fb:32:8d:f9:e0:ef:b9:8d:ca:6e:41:89:50:7c:35:c8:89:85:
         c4:64:d8:f5:91:e4:bf:5a:31:c9:00:65:73:3b:fa:bb:c6:27:
         9e:ef:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:52:48 2025 by rpki-client