Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3334203d3e20323639373132.roa
File:                     323830343a363862633a3a2f33322d3334203d3e20323639373132.roa (raw, json)
Hash identifier:          8RPnTiQ7wXRMCXsqv1axTDou5GdSXQ84NpnMqja7IR4=
Subject key identifier:   F4:FF:6C:E0:49:8F:6D:8E:AE:B1:FB:03:EE:43:E6:F2:26:64:1C:09
Certificate issuer:       /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial:       7845D6022388B9804ECFB1A916256DE7253C96E9
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3334203d3e20323639373132.roa
Signing time:             Mon 30 Jun 2025 13:05:24 +0000
ROA not before:           Mon 30 Jun 2025 13:00:24 +0000
ROA not after:            Mon 29 Jun 2026 13:05:24 +0000
asID:                     269712
IP address blocks:        2804:68bc::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 00:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:45:d6:02:23:88:b9:80:4e:cf:b1:a9:16:25:6d:e7:25:3c:96:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
        Validity
            Not Before: Jun 30 13:00:24 2025 GMT
            Not After : Jun 29 13:05:24 2026 GMT
        Subject: CN=F4FF6CE0498F6D8EAEB1FB03EE43E6F226641C09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8a:c6:4c:18:ae:87:3e:cf:84:bc:62:a5:13:
                    68:55:98:8a:6e:e8:0e:86:3b:a3:b5:12:cb:ca:8f:
                    17:b1:b2:f6:00:ed:2c:61:67:21:6b:dd:cd:de:af:
                    29:8d:9b:f2:a6:e2:2d:46:37:cf:97:44:4e:85:67:
                    02:d0:6f:ef:39:55:b5:1f:cc:b7:f9:37:9c:ef:a8:
                    a2:f7:1a:78:b4:97:b7:95:62:b6:e2:c5:c8:e5:5b:
                    7f:e6:ca:ba:24:53:3d:40:c2:40:80:52:83:20:bf:
                    b5:a9:90:1c:c8:d6:2a:cc:30:3a:93:fb:9e:dc:b0:
                    7f:67:94:d5:df:40:76:7e:9a:6f:d6:5d:dc:18:ce:
                    d7:1c:d9:ab:1d:10:52:6a:5a:9b:31:bf:90:9a:87:
                    c6:b9:1d:58:f6:1c:c5:b6:90:9f:99:79:b8:87:01:
                    88:cb:da:37:49:06:60:f4:81:bc:bb:9e:40:b2:14:
                    6c:d8:ac:1a:d7:bd:2b:9d:94:64:29:b8:b8:38:11:
                    0a:b0:72:ab:b9:3b:06:2f:4b:49:2f:aa:9c:ff:62:
                    77:99:63:c7:b4:f0:f7:d9:86:ae:8f:23:07:17:6e:
                    b7:ef:1e:ca:d3:04:d8:f7:a9:a5:25:b3:76:e7:61:
                    99:24:dd:91:00:0b:cf:bb:5e:65:7e:2f:49:26:e4:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FF:6C:E0:49:8F:6D:8E:AE:B1:FB:03:EE:43:E6:F2:26:64:1C:09
            X509v3 Authority Key Identifier:
                keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/323830343a363862633a3a2f33322d3334203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:17:b3:d5:ef:58:85:63:44:c7:75:01:59:de:b3:16:91:dd:
         52:e9:e7:df:30:23:68:03:f0:e2:6e:93:51:cc:c2:d0:0c:3c:
         1b:e2:4b:29:86:f3:05:a3:aa:8e:10:88:f8:c4:4a:a4:44:af:
         92:8b:2f:17:e5:91:0b:e7:3b:8e:94:bf:5a:05:0c:7d:2b:cf:
         3a:18:6f:18:40:8b:d0:ed:5c:7f:8b:61:9f:44:40:00:ab:cc:
         2a:5f:0a:2c:b3:ed:02:27:26:a7:c2:5f:8f:eb:12:56:44:bf:
         42:a3:49:c9:e1:ca:a2:ff:0e:27:4b:b4:c3:f5:64:1e:cf:3b:
         bb:dc:f4:38:e4:5c:1a:bb:a7:91:7e:eb:4b:3b:19:b9:8c:1a:
         15:d7:18:9a:5b:d8:48:52:c8:23:8a:9c:f5:c9:b9:36:c8:35:
         2b:04:89:1e:78:a5:00:12:57:bb:35:57:b0:ad:ca:28:61:bd:
         5a:65:1a:98:09:ec:15:d4:14:09:bb:b9:b6:3c:d5:b5:31:56:
         db:dc:ef:09:08:12:c5:7e:26:4e:18:6e:b5:7c:0e:3b:b3:7a:
         64:6c:c5:ad:6e:b0:a8:36:2b:05:e0:d2:c0:82:f5:7e:c0:d1:
         85:5d:ad:3e:36:50:7f:31:aa:39:8e:ab:6e:7f:24:73:d6:0b:
         ba:8a:62:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:22:12 2025 by rpki-client