Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CAjE4goeX9hwZuK8e9WfkZp9YsSrFTxUm6f3NhVA2qgh/0/323830343a366263303a3a2f33322d3438203d3e20323730343233.roa
File:                     323830343a366263303a3a2f33322d3438203d3e20323730343233.roa (raw, json)
Hash identifier:          fN4JHT6wxISFwwhpFuwiAO+T2cvOqElVA+8txPTzmvY=
Subject key identifier:   E8:DC:11:C7:03:A9:75:AA:06:71:9E:1D:43:25:D4:3D:B2:C3:B3:94
Certificate issuer:       /CN=6DC05CC70919B453A21745728A6D4E3D67FC8148
Certificate serial:       0FF1830ADD856BB63A0F03BD41C2872135CF5F98
Authority key identifier: 6D:C0:5C:C7:09:19:B4:53:A2:17:45:72:8A:6D:4E:3D:67:FC:81:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DC05CC70919B453A21745728A6D4E3D67FC8148.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAjE4goeX9hwZuK8e9WfkZp9YsSrFTxUm6f3NhVA2qgh/0/323830343a366263303a3a2f33322d3438203d3e20323730343233.roa
Signing time:             Tue 17 Jun 2025 19:44:58 +0000
ROA not before:           Tue 17 Jun 2025 19:39:58 +0000
ROA not after:            Tue 16 Jun 2026 19:44:58 +0000
asID:                     270423
IP address blocks:        2804:6bc0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAjE4goeX9hwZuK8e9WfkZp9YsSrFTxUm6f3NhVA2qgh/0/6DC05CC70919B453A21745728A6D4E3D67FC8148.crl
                          rsync://rpki-repo.registro.br/repo/CAjE4goeX9hwZuK8e9WfkZp9YsSrFTxUm6f3NhVA2qgh/0/6DC05CC70919B453A21745728A6D4E3D67FC8148.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DC05CC70919B453A21745728A6D4E3D67FC8148.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 19:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f1:83:0a:dd:85:6b:b6:3a:0f:03:bd:41:c2:87:21:35:cf:5f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DC05CC70919B453A21745728A6D4E3D67FC8148
        Validity
            Not Before: Jun 17 19:39:58 2025 GMT
            Not After : Jun 16 19:44:58 2026 GMT
        Subject: CN=E8DC11C703A975AA06719E1D4325D43DB2C3B394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e6:05:ab:6d:06:97:08:3d:47:96:cb:44:21:
                    68:af:53:2b:96:2b:8e:1a:a9:cb:b0:e1:bf:01:17:
                    c7:e3:75:c3:1d:5c:67:ce:e6:b1:b8:80:3e:91:1d:
                    59:3a:63:a4:0c:ff:78:68:a4:fc:4c:84:42:3c:49:
                    a2:b4:fc:8f:9c:a7:f8:c0:44:04:ad:36:90:1b:c6:
                    38:6e:4c:ab:68:99:aa:98:73:5b:b1:4e:68:22:99:
                    02:84:0c:18:fe:2e:41:80:7b:e8:59:f2:72:da:79:
                    44:5b:2c:fa:7d:90:4e:d6:fe:b2:23:4d:52:8d:46:
                    d8:ac:16:9e:c2:ce:d9:eb:03:91:58:db:d2:c5:ac:
                    6c:67:65:e4:7c:0d:f6:bb:f0:4d:a1:8b:7f:39:7d:
                    c7:72:6f:23:e9:15:5f:35:6d:96:43:ae:35:b0:58:
                    07:cd:3f:76:1e:46:92:53:00:5b:da:0c:5c:1a:64:
                    57:0c:32:65:bc:54:9d:26:5c:8e:ad:fd:2c:02:32:
                    22:d5:d2:45:c0:69:43:72:ed:f4:24:ca:5f:62:4a:
                    80:48:f6:47:62:42:ba:0f:f2:88:74:e3:a4:ef:34:
                    44:5b:b3:1d:01:17:fd:c9:57:7d:d3:33:4d:0a:24:
                    0d:d4:b8:8e:db:2c:e0:b6:fe:3b:5a:e5:f4:c4:3a:
                    aa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DC:11:C7:03:A9:75:AA:06:71:9E:1D:43:25:D4:3D:B2:C3:B3:94
            X509v3 Authority Key Identifier:
                keyid:6D:C0:5C:C7:09:19:B4:53:A2:17:45:72:8A:6D:4E:3D:67:FC:81:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAjE4goeX9hwZuK8e9WfkZp9YsSrFTxUm6f3NhVA2qgh/0/6DC05CC70919B453A21745728A6D4E3D67FC8148.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6DC05CC70919B453A21745728A6D4E3D67FC8148.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAjE4goeX9hwZuK8e9WfkZp9YsSrFTxUm6f3NhVA2qgh/0/323830343a366263303a3a2f33322d3438203d3e20323730343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:87:31:e1:f3:1b:12:c4:be:9f:ba:89:a0:d9:86:d5:7f:f7:
         03:02:e5:8b:34:48:71:c1:16:50:06:11:e9:f2:13:22:a3:b7:
         95:9c:3b:d0:e9:4f:a1:82:10:75:63:9b:48:f1:12:4c:17:8a:
         6d:54:9d:8e:6f:70:d4:24:d0:13:0e:fa:5d:32:88:2b:c4:f8:
         2d:05:40:88:9d:26:81:fb:3b:06:b0:e5:75:af:85:08:a9:59:
         3d:51:13:ce:cb:60:89:aa:03:83:1a:a2:65:c1:c8:50:01:55:
         b4:0b:f0:dc:d3:46:53:54:1b:9a:06:23:e8:33:ab:7a:91:37:
         6a:57:d3:59:19:c9:f1:43:9b:7a:23:69:a0:d6:db:13:d6:f1:
         5c:17:e4:e5:5f:38:13:44:34:50:5b:b8:f4:b0:e4:c9:af:b3:
         72:4e:99:8d:4e:6a:4f:3d:e2:29:61:34:07:8c:86:14:74:65:
         27:e6:c4:0f:a4:ee:5b:f0:1e:87:53:01:cc:ef:f7:38:cf:75:
         3c:7a:43:ac:5e:39:97:dd:40:ef:16:f1:18:1c:b1:56:f6:76:
         c0:3a:5a:29:36:e3:cf:55:c8:c6:d0:6a:e0:83:8f:00:9b:44:
         bf:f3:5e:98:67:c2:4b:8c:72:0e:01:cc:f7:04:9e:7a:e7:b1:
         7a:ed:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:57:57 2025 by rpki-client