Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d313238203d3e20323731303037.roa
File:                     323830343a373464383a3a2f33322d313238203d3e20323731303037.roa (raw, json)
Hash identifier:          hDIDw00mJTSrqiHc/PslIFue8d3JmHcE1sM9WumKks8=
Subject key identifier:   72:CA:83:96:1F:4A:D3:7A:C1:0B:2C:1C:F1:CA:4E:20:4A:80:24:78
Certificate issuer:       /CN=F631D43AC8C89D5AB7DE5D0C8F50A850E6C82090
Certificate serial:       0A2D8B6E7C4AE6BA3E8DF7B3C6D0804C9595AA7F
Authority key identifier: F6:31:D4:3A:C8:C8:9D:5A:B7:DE:5D:0C:8F:50:A8:50:E6:C8:20:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F631D43AC8C89D5AB7DE5D0C8F50A850E6C82090.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d313238203d3e20323731303037.roa
Signing time:             Tue 24 Jun 2025 12:43:02 +0000
ROA not before:           Tue 24 Jun 2025 12:38:02 +0000
ROA not after:            Tue 23 Jun 2026 12:43:02 +0000
asID:                     271007
IP address blocks:        2804:74d8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/F631D43AC8C89D5AB7DE5D0C8F50A850E6C82090.crl
                          rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/F631D43AC8C89D5AB7DE5D0C8F50A850E6C82090.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F631D43AC8C89D5AB7DE5D0C8F50A850E6C82090.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 09:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2d:8b:6e:7c:4a:e6:ba:3e:8d:f7:b3:c6:d0:80:4c:95:95:aa:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F631D43AC8C89D5AB7DE5D0C8F50A850E6C82090
        Validity
            Not Before: Jun 24 12:38:02 2025 GMT
            Not After : Jun 23 12:43:02 2026 GMT
        Subject: CN=72CA83961F4AD37AC10B2C1CF1CA4E204A802478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:9c:31:e1:74:8b:a7:0c:39:8a:8e:9c:d1:
                    df:b5:83:a0:13:c1:cc:bc:e3:be:b4:cc:0c:2f:dc:
                    f8:97:52:2b:4f:30:5d:4b:fb:55:fa:b5:43:87:96:
                    c0:c7:d5:bb:4b:a8:9f:14:90:6d:d8:36:93:c8:70:
                    8b:f8:66:2c:3e:01:78:b3:78:7b:24:1b:51:a3:10:
                    e6:98:6b:a5:bb:60:71:08:81:4a:0b:46:48:de:03:
                    a5:ea:b8:2b:1c:1a:ff:2b:07:0c:d9:f2:2f:8e:6a:
                    82:8f:eb:d7:4a:69:6e:78:6d:96:7f:bc:a4:2c:1b:
                    77:47:bb:42:f1:bb:69:c0:89:76:4b:f9:84:9a:b9:
                    82:b8:b3:36:06:26:5e:14:8d:3a:30:a5:99:f4:ee:
                    51:8d:2a:d5:b0:61:65:cd:fb:f1:95:cc:1d:d4:dc:
                    ac:8c:97:d1:bb:75:94:01:f7:40:e3:06:10:02:7c:
                    19:a1:ee:7d:1d:3b:e7:5a:ce:0b:8a:4c:91:85:7a:
                    da:4e:2f:a9:4d:19:ec:ec:5a:ca:7b:a0:5a:51:67:
                    71:1b:bb:e5:1f:c1:39:0e:88:55:01:36:53:91:d5:
                    d0:9e:b9:5b:88:6f:c2:26:2a:56:7a:ad:0e:da:1c:
                    fd:6e:8d:d4:2c:8d:80:bf:94:03:85:ac:de:75:5e:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CA:83:96:1F:4A:D3:7A:C1:0B:2C:1C:F1:CA:4E:20:4A:80:24:78
            X509v3 Authority Key Identifier:
                keyid:F6:31:D4:3A:C8:C8:9D:5A:B7:DE:5D:0C:8F:50:A8:50:E6:C8:20:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/F631D43AC8C89D5AB7DE5D0C8F50A850E6C82090.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F631D43AC8C89D5AB7DE5D0C8F50A850E6C82090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/323830343a373464383a3a2f33322d313238203d3e20323731303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:b1:d8:8b:62:1b:45:db:7f:43:26:b3:61:55:1c:45:d1:1d:
         aa:32:39:44:14:eb:9e:40:e2:5b:bf:00:ed:87:17:96:fb:73:
         06:f0:0f:ee:bb:41:7b:43:96:33:b4:06:5b:09:9b:a0:7d:9d:
         5d:b4:4f:70:90:eb:86:0b:b5:7d:e9:f8:6c:0e:fb:93:15:89:
         c9:83:6b:56:20:db:b0:bf:a8:31:b2:aa:99:cf:2e:8e:d2:42:
         30:59:40:7b:07:cb:0a:ea:94:f7:85:1b:a6:fc:46:aa:2e:d0:
         f0:7a:79:be:e8:f4:59:af:0c:59:ad:54:82:cf:35:34:b2:ed:
         4b:5d:6e:5d:01:5c:d8:fb:80:6b:10:95:d5:94:ee:48:d9:c0:
         0d:32:43:71:cd:49:c1:43:da:d9:e7:e8:81:2e:d0:d0:0a:1e:
         92:36:7f:6c:68:56:61:a2:23:ed:df:fe:41:15:aa:dc:16:32:
         5a:4e:5c:87:6c:31:03:43:74:f0:14:fb:4a:1d:c2:6b:9d:a8:
         76:4b:cd:f4:05:b8:1f:f1:c4:2b:a9:25:54:2b:98:05:57:af:
         fd:45:bf:1f:af:a2:74:2e:44:e7:36:1e:5a:2d:18:6f:5f:f5:
         1c:de:0b:cc:ac:ac:7c:fc:bb:3a:79:4b:13:51:04:f0:a1:2c:
         f9:0c:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:08:16 2025 by rpki-client