Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/323830343a313566303a3a2f33322d3438203d3e20323633343139.roa
File:                     323830343a313566303a3a2f33322d3438203d3e20323633343139.roa (raw, json)
Hash identifier:          /QXUyOaCXcCHzdPGyvXW4DwkJ+vHltr5OMuOpdVJ344=
Subject key identifier:   47:53:1B:A6:31:17:50:6F:5C:23:43:D6:9E:78:5F:F2:9D:BE:EF:33
Certificate issuer:       /CN=694E467AB1724A6A93118B4CF4A776D05EEBCCE0
Certificate serial:       2734B6136B1C14CAC0588EAFE17191CE033FDAA3
Authority key identifier: 69:4E:46:7A:B1:72:4A:6A:93:11:8B:4C:F4:A7:76:D0:5E:EB:CC:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/323830343a313566303a3a2f33322d3438203d3e20323633343139.roa
Signing time:             Wed 07 May 2025 19:31:23 +0000
ROA not before:           Wed 07 May 2025 19:26:23 +0000
ROA not after:            Wed 06 May 2026 19:31:23 +0000
asID:                     263419
IP address blocks:        2804:15f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl
                          rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 23:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:34:b6:13:6b:1c:14:ca:c0:58:8e:af:e1:71:91:ce:03:3f:da:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694E467AB1724A6A93118B4CF4A776D05EEBCCE0
        Validity
            Not Before: May  7 19:26:23 2025 GMT
            Not After : May  6 19:31:23 2026 GMT
        Subject: CN=47531BA63117506F5C2343D69E785FF29DBEEF33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:f7:ec:5f:90:ff:03:44:0e:3c:d7:42:49:
                    1b:87:08:ed:fa:44:4b:7f:8d:39:76:a3:1c:4f:f7:
                    69:97:e5:d0:d9:34:58:52:f8:1d:88:85:60:59:6a:
                    0a:46:89:e5:4e:d7:84:0b:b3:15:c8:b8:19:af:01:
                    ab:7a:d7:ea:d6:9c:aa:3b:52:45:fd:69:0e:3c:00:
                    3c:a0:da:e2:49:d2:ed:fa:c7:aa:76:2b:44:6e:df:
                    f3:8c:1d:89:66:6a:ea:34:cb:12:75:f2:e6:9c:45:
                    bc:d5:0d:07:2c:df:fd:a1:cf:f8:38:a5:82:1d:c5:
                    95:68:5c:5f:dd:9f:70:54:f2:e1:92:3a:19:de:94:
                    0a:63:46:c8:fc:aa:a0:48:ed:f2:9a:54:98:02:1d:
                    bf:98:7f:89:b0:0e:7e:49:b1:fc:16:c3:59:92:74:
                    11:4f:f0:e3:23:ee:e8:2f:75:30:b1:68:38:3b:64:
                    3f:5b:9e:e0:15:c9:25:f2:78:3d:1f:d6:28:41:e8:
                    8e:63:70:83:f7:1f:50:d4:46:25:28:a7:ca:2f:b1:
                    85:6a:a2:a4:e7:81:4e:ee:b0:ff:11:5c:35:9a:a9:
                    d4:11:d3:f2:9e:41:19:0c:b5:b5:ae:64:3b:9a:a2:
                    18:e5:a7:5b:89:c4:34:43:0e:7d:4b:9d:4c:e1:8f:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:53:1B:A6:31:17:50:6F:5C:23:43:D6:9E:78:5F:F2:9D:BE:EF:33
            X509v3 Authority Key Identifier:
                keyid:69:4E:46:7A:B1:72:4A:6A:93:11:8B:4C:F4:A7:76:D0:5E:EB:CC:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/694E467AB1724A6A93118B4CF4A776D05EEBCCE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCCDwR8oBTpt1Z5gcN6KJh4roWhQEabfGxH47TmfLvRV/0/323830343a313566303a3a2f33322d3438203d3e20323633343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:29:21:64:52:6d:84:b0:3a:59:51:b4:6c:ad:c3:58:e8:32:
         88:53:ea:a1:b9:86:c6:5a:67:78:91:c0:1b:8e:38:cc:7a:9a:
         d4:8d:e2:19:88:3e:04:25:b7:67:88:1a:64:c1:ba:a6:7b:d5:
         0e:9e:6f:b7:91:d6:ec:a5:3f:87:d6:22:76:46:f2:78:5a:36:
         90:97:e5:b3:3b:de:a1:85:18:c9:d0:54:ea:e5:0d:13:3a:cb:
         23:20:a9:5b:3b:b4:6f:65:9d:74:c2:ba:3a:66:17:6c:9a:52:
         b2:40:da:22:62:27:1b:65:d4:c8:8c:be:12:2f:23:3c:c2:e5:
         6b:34:25:38:56:b5:ca:c3:6d:75:57:73:c8:fb:b8:3f:e8:f1:
         70:03:ea:e4:cd:ef:c2:2a:f3:46:b1:1d:be:64:4f:c8:3e:55:
         1c:33:ee:f5:55:21:29:26:b0:10:99:f4:01:05:62:50:dd:6b:
         de:1a:01:05:b7:87:78:bf:a8:62:dd:4a:0c:81:fa:18:50:05:
         9f:9d:8f:90:53:ba:a6:c8:16:11:aa:05:fb:25:b2:2e:46:05:
         18:f8:10:1e:ab:36:2a:5b:c0:20:d5:9e:9c:8a:64:b7:68:d5:
         8e:d2:47:d1:62:b6:22:f2:3e:59:c2:86:a9:1d:3e:39:c5:90:
         61:e3:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:36:05 2025 by rpki-client