Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          gUGoWb1MAvkhSMJYdN+9O0orr1NnZPbxBA030YnTLAI=
Subject key identifier:   21:6D:C9:09:26:A4:B0:D5:FF:A0:19:5A:65:9D:0C:8C:CF:A7:38:C5
Certificate issuer:       /CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
Certificate serial:       13330CCB2158FE34345A7BB68429CC7D021D7939
Authority key identifier: 17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 26 Jun 2025 00:36:40 +0000
ROA not before:           Thu 26 Jun 2025 00:31:40 +0000
ROA not after:            Thu 25 Jun 2026 00:36:40 +0000
asID:                     265919
IP address blocks:        2804:3fd8:7000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:33:0c:cb:21:58:fe:34:34:5a:7b:b6:84:29:cc:7d:02:1d:79:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
        Validity
            Not Before: Jun 26 00:31:40 2025 GMT
            Not After : Jun 25 00:36:40 2026 GMT
        Subject: CN=216DC90926A4B0D5FFA0195A659D0C8CCFA738C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:97:e7:a2:12:1e:73:a3:eb:59:ff:3f:ea:
                    8e:77:70:af:75:3b:a0:8f:79:34:e4:2b:92:b3:a4:
                    bf:cd:a5:a5:33:94:2d:6c:cf:95:07:32:83:f5:93:
                    9f:c9:17:e8:ce:68:5a:b9:d4:10:10:a7:88:4a:ae:
                    6e:19:e8:a0:63:be:86:18:7f:bc:1b:da:0d:34:8c:
                    6b:76:a4:f2:ad:64:00:c1:7b:c0:d6:a3:c1:29:60:
                    c1:b6:c8:56:ec:6f:0f:76:d4:bb:df:f1:48:1c:bd:
                    6c:ad:1e:14:95:bd:e4:11:4a:31:a9:10:cf:d1:63:
                    20:cd:47:09:45:26:37:29:a9:4d:ce:0a:87:a7:e8:
                    df:e3:6c:01:ba:0d:39:ef:e6:e0:39:0b:15:63:cc:
                    05:e4:eb:26:59:58:b6:9b:d5:27:e9:94:84:05:11:
                    90:fc:6d:72:44:db:d7:ff:45:75:29:d1:f3:7f:32:
                    af:14:5c:b2:1e:a1:ad:0e:a7:ec:e7:83:b0:44:0c:
                    77:48:10:a9:69:49:37:d5:8d:c8:12:8c:32:98:16:
                    c8:07:5a:81:54:27:34:7f:0b:ad:e5:29:c9:18:79:
                    cb:d5:d8:69:20:e6:a5:86:8d:d3:09:8a:19:92:71:
                    14:94:1e:b5:60:16:66:8a:01:dd:d6:e7:f8:68:61:
                    c7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6D:C9:09:26:A4:B0:D5:FF:A0:19:5A:65:9D:0C:8C:CF:A7:38:C5
            X509v3 Authority Key Identifier:
                keyid:17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a373030303a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:45:20:94:0d:c2:d1:6d:bb:2e:97:99:04:a7:4e:a6:e4:5b:
         09:19:1a:38:df:7c:56:06:69:71:58:0b:c4:72:26:81:17:e7:
         1c:8c:d2:2b:7d:4d:8f:3f:26:d8:d4:c6:d9:0a:f6:34:70:90:
         10:87:03:a9:b8:9a:34:c3:7c:80:9f:7f:66:71:c6:6e:05:5f:
         39:31:6d:9e:1b:5a:29:d0:fa:d9:71:43:41:58:ac:df:77:11:
         9c:22:15:49:7e:5b:ef:c6:1d:77:f8:7a:b2:23:f2:cf:ee:5f:
         78:34:38:53:b5:4f:0f:46:24:f1:97:b4:3d:78:48:d2:d5:27:
         e7:13:6d:75:d5:86:47:c1:10:81:2b:8e:e8:de:e8:09:b6:2f:
         f0:3e:fb:b6:c8:50:10:29:ac:99:33:c1:24:74:e4:34:49:dc:
         ff:0a:27:43:c8:9f:86:de:51:56:5d:5b:40:17:00:91:cc:f9:
         31:f4:3f:c8:ca:9b:1b:de:5b:6b:c4:62:74:f2:d1:a6:f2:26:
         9d:57:ac:e5:8d:f4:64:72:e4:7a:1c:86:09:65:62:5f:f7:11:
         f0:9d:98:a6:d1:3e:be:48:78:3d:d8:55:47:97:e4:2a:e7:fb:
         3c:b8:8f:cc:dd:77:b3:20:91:0c:07:28:d1:93:b7:c8:d2:46:
         30:d4:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 14:03:44 2025 by rpki-client