Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          JrNz+SOWot/B1zarWO8FRuPMbC4P8EZV4VqTnJeyGs0=
Subject key identifier:   CC:4E:29:2C:D7:3A:41:C0:C3:10:91:DE:75:71:09:BF:34:AF:55:94
Certificate issuer:       /CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
Certificate serial:       1AE45803C475A41AAD4F876FBCFE4D0E659251A3
Authority key identifier: 17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 26 Jun 2025 00:36:39 +0000
ROA not before:           Thu 26 Jun 2025 00:31:39 +0000
ROA not after:            Thu 25 Jun 2026 00:36:39 +0000
asID:                     265919
IP address blocks:        2804:3fd8:8946::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 06:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e4:58:03:c4:75:a4:1a:ad:4f:87:6f:bc:fe:4d:0e:65:92:51:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
        Validity
            Not Before: Jun 26 00:31:39 2025 GMT
            Not After : Jun 25 00:36:39 2026 GMT
        Subject: CN=CC4E292CD73A41C0C31091DE757109BF34AF5594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:a5:ab:10:70:88:ec:60:e7:65:f1:f0:b7:
                    38:1d:73:a4:88:d8:c1:52:74:77:a2:2b:25:3a:5f:
                    f5:c1:6e:46:ac:e5:fd:f5:d4:39:0b:20:65:ee:ae:
                    24:06:27:cb:3a:b0:55:a0:b5:4d:b6:31:37:f3:2b:
                    56:54:44:36:c7:99:db:51:94:84:bd:ea:f4:a9:75:
                    f3:3c:86:dc:01:8b:12:71:f3:52:34:31:12:47:c3:
                    a2:b1:91:52:e5:ff:c9:8a:71:7e:34:13:32:f7:0b:
                    a4:b4:33:96:1c:48:1a:bd:8c:22:4b:a6:f1:74:00:
                    25:7d:e1:db:e0:6d:22:82:ac:60:2c:97:cf:5a:9b:
                    11:fa:97:f2:0c:fa:ec:46:6e:14:d6:11:63:8c:1a:
                    f2:77:66:e2:39:f7:03:0f:b7:c1:b0:2c:b5:6c:98:
                    11:8c:b3:b2:ca:72:37:96:50:80:4e:1a:a4:c4:98:
                    7c:ca:63:40:6c:df:75:37:34:3f:ad:b3:b2:ae:66:
                    88:ab:59:77:61:06:5f:51:b5:02:fe:54:17:4c:87:
                    d4:33:38:5a:18:e4:3f:d9:17:e2:96:cd:56:31:d9:
                    08:24:4d:82:a0:d8:64:4d:68:e9:d8:ee:74:0e:ea:
                    67:59:ec:07:1a:9d:83:f7:9f:f9:b9:55:7e:96:ee:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4E:29:2C:D7:3A:41:C0:C3:10:91:DE:75:71:09:BF:34:AF:55:94
            X509v3 Authority Key Identifier:
                keyid:17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383934363a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:8946::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:91:f0:5e:69:a8:78:08:94:e6:67:07:58:dd:0b:8a:be:
         40:4d:6b:33:92:60:ac:54:e0:08:9d:b8:d2:4e:e7:ff:00:1b:
         4f:1e:b3:f3:f0:66:89:ae:8e:82:24:11:4a:d0:dc:1f:68:36:
         fc:07:e1:6a:23:a2:cb:15:70:e3:da:54:88:01:4c:fe:d0:3f:
         25:cc:c8:ad:52:c5:98:47:ef:05:44:4e:66:9f:02:99:6e:4a:
         eb:5d:7c:69:2d:6a:bf:85:a9:3b:a3:24:cc:0d:12:f7:b3:3f:
         a0:c5:9a:85:f9:86:0d:55:06:ba:11:16:5e:4b:d3:a3:1d:43:
         0b:23:6d:79:a4:cd:75:42:43:f6:74:06:d1:6f:a6:75:91:30:
         39:6c:76:bf:37:a7:aa:4e:91:77:77:37:ad:44:f1:fe:62:8a:
         83:13:e5:a4:d4:d8:3a:cf:a3:f7:25:a5:54:40:98:ab:60:a5:
         1e:0c:49:6f:9f:3c:95:01:cb:57:d2:de:fa:37:e6:99:ff:3d:
         ac:e2:5d:76:72:c8:0f:2e:a9:73:81:7a:40:1b:ab:0c:78:0d:
         a6:d5:e5:3e:ce:4d:8f:42:d3:48:f8:a2:6f:6c:1c:9d:c7:f1:
         1a:05:aa:31:96:27:f5:7b:02:8d:d1:9b:0b:35:d4:35:7d:14:
         54:4d:0c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 13:57:59 2025 by rpki-client