Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          ixLQVYY0o5/2IoiJVy2tlI9R5yjhwWt7DBFhYIDFclg=
Subject key identifier:   98:C6:97:16:0B:5C:DC:E6:3D:C9:DB:E8:E5:03:C3:8A:EA:C3:F3:16
Certificate issuer:       /CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
Certificate serial:       38E7502E413E1500B796BE9FC00328506DFBA9FE
Authority key identifier: 17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 26 Jun 2025 00:36:40 +0000
ROA not before:           Thu 26 Jun 2025 00:31:40 +0000
ROA not after:            Thu 25 Jun 2026 00:36:40 +0000
asID:                     265919
IP address blocks:        2804:3fd8:185::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 14:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e7:50:2e:41:3e:15:00:b7:96:be:9f:c0:03:28:50:6d:fb:a9:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
        Validity
            Not Before: Jun 26 00:31:40 2025 GMT
            Not After : Jun 25 00:36:40 2026 GMT
        Subject: CN=98C697160B5CDCE63DC9DBE8E503C38AEAC3F316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:98:03:6b:79:ed:45:02:27:59:48:34:fc:
                    67:92:17:24:12:3f:b4:af:d7:c4:a2:6c:20:83:64:
                    bc:3e:97:c4:8a:1e:f8:20:97:77:00:96:52:ff:55:
                    a3:72:73:b2:75:a0:f8:61:c9:8f:ac:20:fc:c9:25:
                    b9:56:d7:77:bd:2b:76:a3:72:57:5b:08:be:a6:81:
                    2b:1f:fc:29:8f:3a:21:15:63:fe:5c:b3:88:9b:b1:
                    19:f9:3a:06:81:07:7a:dd:68:07:5e:2e:96:24:e5:
                    43:22:a7:2c:41:c0:d2:9d:a3:2a:e1:85:c0:f5:77:
                    cd:89:41:53:ff:ab:61:10:4e:ef:1e:83:02:44:5c:
                    53:52:50:93:ae:ce:b1:1f:84:79:23:c6:d4:98:17:
                    93:5a:81:67:8f:42:99:bb:0e:c2:1e:45:c2:d9:f1:
                    df:98:38:07:43:db:7e:5e:12:50:49:91:aa:f0:0e:
                    c7:c1:d3:37:92:4b:2a:e0:9c:be:1c:2a:61:3a:6c:
                    1f:01:f2:99:4e:2f:0e:54:83:de:cd:b1:5e:9f:b7:
                    68:dd:13:eb:d4:55:ea:a7:2c:8f:d8:fd:d7:52:be:
                    24:2f:e3:66:c1:6e:53:65:5e:ee:c5:22:b3:4c:42:
                    1d:94:1e:17:f1:f4:32:43:b7:48:f5:8e:54:0f:14:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C6:97:16:0B:5C:DC:E6:3D:C9:DB:E8:E5:03:C3:8A:EA:C3:F3:16
            X509v3 Authority Key Identifier:
                keyid:17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3138353a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:185::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:0d:37:45:b4:d5:9e:fb:a7:06:77:76:53:a4:32:be:11:8c:
         a8:24:42:80:63:98:dc:84:36:70:74:6b:b0:f4:6d:21:ea:25:
         e0:38:4b:c9:a6:a0:18:1b:0f:94:7c:88:90:31:66:f7:8b:2c:
         28:7f:3f:24:ae:d0:68:80:fa:9e:a8:ca:00:ed:e6:2e:fd:e0:
         68:a1:7c:de:f8:96:2b:2f:32:96:8f:44:0a:85:26:b0:64:43:
         e4:2c:0a:76:e9:d1:7c:26:55:a2:6d:53:cf:d7:d4:5f:70:42:
         7b:7a:55:d6:0e:66:6d:7b:59:a6:00:60:3e:d4:65:dc:8a:eb:
         cd:0a:18:63:45:37:25:ed:a2:bc:45:3e:8b:c3:3b:40:28:65:
         d9:53:7d:73:2c:60:9c:31:37:35:3c:81:77:59:fc:73:a8:44:
         3a:11:b4:06:37:34:5e:5e:17:94:0f:6e:db:c2:5f:36:14:c4:
         f0:cb:ec:3b:8c:59:ab:b2:d3:86:56:55:d0:1a:58:be:c0:ef:
         76:82:76:77:1d:5a:6f:68:0d:7b:61:07:12:90:ca:4c:0f:14:
         5d:24:10:4e:fc:81:bd:68:35:cf:11:28:ff:8c:d1:b4:b8:a7:
         25:d5:5d:59:8d:90:4a:a4:7f:2f:80:8f:33:22:10:4d:51:3f:
         bc:43:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:01:37 2025 by rpki-client