Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a663830303a3a2f34302d3430203d3e20323635353030.roa
File:                     323830343a333531383a663830303a3a2f34302d3430203d3e20323635353030.roa (raw, json)
Hash identifier:          tjP2H2l345pLnhzlMw5hoopylKddZgRHSJ8vukuk3R4=
Subject key identifier:   2B:DF:3D:E9:6B:4F:6F:E9:FF:C4:D5:78:C6:18:D6:C9:CE:65:B7:4E
Certificate issuer:       /CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
Certificate serial:       0748373DA8BD97CF66A2534EF51F448DB2AE507A
Authority key identifier: 11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a663830303a3a2f34302d3430203d3e20323635353030.roa
Signing time:             Wed 25 Jun 2025 22:55:39 +0000
ROA not before:           Wed 25 Jun 2025 22:50:39 +0000
ROA not after:            Wed 24 Jun 2026 22:55:39 +0000
asID:                     265500
IP address blocks:        2804:3518:f800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 07:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:48:37:3d:a8:bd:97:cf:66:a2:53:4e:f5:1f:44:8d:b2:ae:50:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111517C0C6C887A92A115B4EF5EE97035B4AB21F
        Validity
            Not Before: Jun 25 22:50:39 2025 GMT
            Not After : Jun 24 22:55:39 2026 GMT
        Subject: CN=2BDF3DE96B4F6FE9FFC4D578C618D6C9CE65B74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:cb:68:e6:fc:58:38:37:29:e9:9d:a3:4a:
                    23:d1:55:d0:79:f0:c6:68:a4:fd:f7:b3:91:1e:c7:
                    c6:be:6c:75:80:18:51:70:c0:3e:24:e8:8e:a6:b3:
                    2d:a1:94:58:af:46:34:95:15:f8:3c:2d:23:ce:61:
                    15:78:73:24:62:a8:78:9a:39:57:26:13:7e:28:3b:
                    ff:25:a3:2d:d4:d0:68:b5:8e:ef:14:31:c1:69:0a:
                    47:a8:ba:0c:1e:8b:b4:fe:55:c3:eb:96:d4:d8:7e:
                    1f:c1:c4:73:d9:78:16:f5:aa:b8:62:0a:9e:9a:29:
                    c3:98:01:bb:12:47:2a:4e:eb:c6:c8:84:db:eb:58:
                    a7:c5:ed:1b:1f:7b:35:83:06:f1:96:03:ff:ce:fd:
                    df:0e:b0:3d:f1:98:b2:f7:39:3b:7f:15:c2:e6:e0:
                    00:2f:a2:be:e4:4a:1f:74:52:66:8c:61:6f:af:9d:
                    86:7c:b0:1e:f2:a5:f9:e8:d1:2b:e3:27:39:9a:cc:
                    6f:d0:4d:f1:49:3e:36:7a:ae:7f:87:19:96:30:75:
                    09:dd:5f:11:41:60:4e:7a:d4:c8:50:6a:55:8f:9a:
                    68:34:b4:08:e0:0b:14:cd:25:36:c7:e0:63:a9:b5:
                    70:fd:07:7b:1d:54:b3:ce:c5:da:2d:e2:a0:ee:bb:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DF:3D:E9:6B:4F:6F:E9:FF:C4:D5:78:C6:18:D6:C9:CE:65:B7:4E
            X509v3 Authority Key Identifier:
                keyid:11:15:17:C0:C6:C8:87:A9:2A:11:5B:4E:F5:EE:97:03:5B:4A:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/111517C0C6C887A92A115B4EF5EE97035B4AB21F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/111517C0C6C887A92A115B4EF5EE97035B4AB21F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/323830343a333531383a663830303a3a2f34302d3430203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3518:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:ce:50:43:95:26:06:a7:e7:02:51:28:e0:13:fc:38:48:d7:
         d4:99:e4:89:f3:e2:d5:00:b6:f7:88:94:4b:17:ce:b1:4e:85:
         16:db:b4:40:9b:da:9c:08:d8:d2:d2:86:b5:2e:fd:b4:c3:8f:
         9a:98:99:a1:ec:aa:58:30:e8:f7:bc:b8:7b:32:94:9d:df:85:
         d5:e6:18:c8:13:ba:78:db:58:0e:ba:c7:63:13:d0:35:4d:20:
         78:b3:6e:22:7e:50:a0:93:df:3a:e3:77:eb:4c:6c:d6:8d:e5:
         87:c8:ef:8a:43:27:fd:90:48:5e:1c:30:21:d2:2e:9a:3f:64:
         cd:42:da:f2:95:12:da:f4:39:2a:5a:6d:d7:46:f6:9b:6e:5a:
         7c:54:86:67:89:1f:83:45:1a:52:fb:aa:41:96:f3:6a:a0:f1:
         f8:a1:94:22:65:38:fb:68:c3:11:1f:80:34:34:07:fe:9a:05:
         af:b0:04:af:97:c8:2e:06:09:0b:71:eb:ac:ca:c6:96:a8:57:
         45:2c:e6:a9:26:83:f4:b5:52:4e:f0:f4:f2:fb:e7:33:e8:ad:
         1b:90:01:4d:eb:fb:03:2f:a5:38:53:2e:36:da:d8:de:30:2a:
         da:f3:c0:ec:9c:54:87:25:ca:6c:3e:da:23:55:1a:23:de:29:
         12:c8:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:18:02 2025 by rpki-client