Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343030303a3a2f33372d3337203d3e20323632373239.roa
File:                     323830343a313664383a343030303a3a2f33372d3337203d3e20323632373239.roa (raw, json)
Hash identifier:          K97Fkb1mQqajmvqua74F0g6jGwq/lPt8By3UMB+BKJs=
Subject key identifier:   7E:64:DA:92:82:F6:0A:CF:94:FC:AE:96:D7:43:F0:2B:BE:C7:F3:32
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       0650FD87656317E25230AF16B5B2062CE618ECDF
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343030303a3a2f33372d3337203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:45 +0000
ROA not before:           Mon 16 Jun 2025 14:05:45 +0000
ROA not after:            Mon 15 Jun 2026 14:10:45 +0000
asID:                     262729
IP address blocks:        2804:16d8:4000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 17:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:50:fd:87:65:63:17:e2:52:30:af:16:b5:b2:06:2c:e6:18:ec:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:45 2025 GMT
            Not After : Jun 15 14:10:45 2026 GMT
        Subject: CN=7E64DA9282F60ACF94FCAE96D743F02BBEC7F332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:00:41:ff:de:00:95:89:e9:15:b4:76:c0:
                    66:a5:18:27:d5:24:09:85:ae:08:7e:25:e8:e8:77:
                    ef:09:dc:ae:70:c3:c1:c8:5c:49:49:0f:0a:b7:b7:
                    f5:d1:21:cc:0b:90:4f:20:ac:02:fe:bc:52:2e:03:
                    60:54:b9:b2:ba:21:8e:97:11:df:6e:b0:10:c9:cb:
                    45:58:d2:97:8f:2c:3e:0d:53:99:97:f7:6c:f6:81:
                    e5:00:99:bb:a5:88:69:11:6b:27:a9:ec:c4:bf:6d:
                    b2:21:5b:84:94:b4:fc:4b:3f:1a:c4:40:56:3f:79:
                    38:87:0e:62:5f:d2:df:40:c4:eb:7c:b4:5a:45:3b:
                    bc:a8:f9:81:2c:ab:ab:5d:fe:60:70:09:85:3b:fe:
                    b7:14:34:d5:a6:a1:41:2f:a1:19:c6:fd:ea:e8:f9:
                    a0:54:e5:1f:26:23:8c:90:7d:a5:c1:1d:55:f6:f9:
                    0f:cd:9f:70:ed:45:34:07:bc:01:92:2c:63:c6:11:
                    22:e9:ee:a0:d1:5f:6d:24:c6:d3:0b:8a:a8:07:33:
                    42:7b:64:eb:46:f6:58:89:a5:4e:52:0c:1e:b5:63:
                    c0:bb:23:d9:15:22:90:bd:dc:37:f8:29:4d:db:af:
                    bb:bd:c3:16:07:59:91:0d:7c:a0:7b:ed:12:a8:fa:
                    7e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:64:DA:92:82:F6:0A:CF:94:FC:AE:96:D7:43:F0:2B:BE:C7:F3:32
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a343030303a3a2f33372d3337203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8:4000::/37

    Signature Algorithm: sha256WithRSAEncryption
         32:34:dc:4c:ba:02:4d:26:3c:a9:03:1a:16:fd:42:9c:4f:c3:
         25:81:07:23:f0:11:9d:6c:ae:14:16:4b:3a:1f:32:8b:8f:0b:
         8b:cf:9e:d9:51:4c:78:8e:fa:20:d5:8b:10:34:53:4c:65:ee:
         7f:1e:bb:e1:c0:aa:3a:a3:83:de:27:3b:f2:9c:57:cd:e4:d5:
         19:7b:01:2b:b9:97:81:ef:10:68:ea:c6:21:9d:73:26:ae:bf:
         9b:d7:bf:55:a9:fe:f1:ab:14:69:ca:1f:15:2b:eb:eb:90:de:
         23:0b:3b:dc:2a:ed:50:3c:4d:83:29:c9:27:ee:c8:d2:cc:9a:
         33:96:93:b4:75:cb:ad:58:54:55:9b:d0:cd:d9:97:2f:20:24:
         24:9d:e1:77:20:b3:4a:55:11:8a:eb:90:46:c5:e0:28:1d:2c:
         61:b0:7f:8f:cf:63:cd:03:7c:18:3b:fa:a5:84:ce:57:e9:ed:
         c0:ac:dc:d3:51:ea:b9:1b:f6:52:ad:f7:86:20:aa:1b:26:96:
         e3:9b:b4:c1:43:ae:ca:e2:4f:7f:cc:36:9f:6a:5d:ed:b2:07:
         76:4b:3b:69:08:05:c9:e7:a8:86:3e:23:57:37:f1:2c:e0:54:
         1f:88:de:f7:8f:6b:16:d5:be:36:90:cd:62:5b:cc:0f:c3:b1:
         04:12:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 06:47:23 2025 by rpki-client