Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a633030303a3a2f33342d3334203d3e20323636363531.roa
File:                     323830343a336634633a633030303a3a2f33342d3334203d3e20323636363531.roa (raw, json)
Hash identifier:          XkiA6Lokta3U5nObChKRL+1d6EQRWTeW8RsCbBfT3Bc=
Subject key identifier:   94:7F:01:51:03:78:DD:9D:41:2D:53:1D:8A:F5:5F:B9:42:1E:A7:90
Certificate issuer:       /CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
Certificate serial:       7BFA5FE906AF4545C1515CA2F690BCF255164C02
Authority key identifier: 65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a633030303a3a2f33342d3334203d3e20323636363531.roa
Signing time:             Thu 26 Jun 2025 18:20:07 +0000
ROA not before:           Thu 26 Jun 2025 18:15:07 +0000
ROA not after:            Thu 25 Jun 2026 18:20:07 +0000
asID:                     266651
IP address blocks:        2804:3f4c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl
                          rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 15:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:fa:5f:e9:06:af:45:45:c1:51:5c:a2:f6:90:bc:f2:55:16:4c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652B30E6DC4E618B4E74D3B661B8AC39694AFF27
        Validity
            Not Before: Jun 26 18:15:07 2025 GMT
            Not After : Jun 25 18:20:07 2026 GMT
        Subject: CN=947F01510378DD9D412D531D8AF55FB9421EA790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bc:ae:6c:90:3e:3e:45:53:f5:13:1f:65:e9:
                    fc:0d:75:f1:dc:83:bd:e3:ff:e1:27:b0:3f:9a:d9:
                    88:31:1e:ee:6a:89:47:6b:8b:50:87:d7:3e:0a:bc:
                    29:7b:f4:8d:27:48:36:ee:32:57:08:bc:aa:69:5e:
                    33:64:dd:02:d7:cd:76:64:fb:a1:9a:34:23:34:c5:
                    c7:8d:11:9c:8e:2e:a6:cd:5f:81:16:b6:fe:df:17:
                    6f:fb:11:c3:a7:21:ef:c9:e9:4f:9b:c4:73:ac:7b:
                    65:5b:20:a6:de:fc:9d:34:3b:39:c3:d5:4e:cf:b8:
                    c8:88:44:5d:14:c2:51:2e:f6:29:ab:0b:45:bf:4e:
                    80:cd:6c:f5:b9:cc:b1:10:36:ed:72:c7:85:18:a8:
                    84:19:f5:70:98:78:77:9a:e9:4e:a3:72:ea:f3:8f:
                    c5:83:50:b7:5e:32:6e:6b:ad:71:c1:1b:bd:8b:f9:
                    27:be:9b:cc:22:7e:0e:ea:4b:bc:94:e8:cf:35:1d:
                    39:18:39:1a:9e:cc:c0:e8:ea:83:f4:8a:15:a1:a2:
                    81:34:72:8e:c7:14:74:2e:4e:cd:1e:b2:2a:3b:2e:
                    ae:d9:65:fa:b7:b8:36:02:6e:ad:27:d7:9d:3a:3b:
                    f5:22:7e:47:3d:eb:7e:4d:78:1c:fe:96:f2:ba:f3:
                    e4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:7F:01:51:03:78:DD:9D:41:2D:53:1D:8A:F5:5F:B9:42:1E:A7:90
            X509v3 Authority Key Identifier:
                keyid:65:2B:30:E6:DC:4E:61:8B:4E:74:D3:B6:61:B8:AC:39:69:4A:FF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/652B30E6DC4E618B4E74D3B661B8AC39694AFF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpA7E8V1ypmKjGy5gbK8YJMPiwx2mxmT4M7PmLxUiHiP/0/323830343a336634633a633030303a3a2f33342d3334203d3e20323636363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f4c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:6a:c8:cb:1a:12:d5:d4:62:a6:a3:0b:aa:b5:ea:06:5b:6c:
         0e:30:57:55:43:18:42:9b:92:17:ef:35:d4:fa:13:09:ba:17:
         f4:5e:dc:a3:e5:f2:72:38:0d:b6:c1:57:74:35:f5:f6:d4:f1:
         dd:12:f4:98:65:63:9c:6c:ec:af:65:2f:63:64:45:cd:60:d8:
         4a:2a:e9:2f:e2:d2:6c:f1:b0:24:cc:35:cd:c8:14:be:98:2b:
         21:a9:5c:a0:b9:36:26:43:24:8f:79:9d:c4:c5:d6:c4:7b:79:
         c7:49:4b:0f:18:c5:04:4d:c1:87:a1:57:77:da:76:96:65:c4:
         d9:2b:41:30:40:57:0a:8f:f9:d9:75:0b:59:12:79:05:d4:4a:
         2f:b8:99:65:6f:66:dd:89:89:ce:99:37:ae:92:d0:48:4f:b7:
         25:c8:a1:9f:19:95:5e:b6:11:b7:44:ad:3f:f4:03:5d:94:68:
         96:2e:2b:aa:c8:51:85:23:ad:35:66:21:97:72:a3:c5:03:c5:
         9a:2e:1b:7b:b8:e1:4b:9d:0f:62:71:4a:9b:23:7d:c1:fd:3b:
         97:95:2e:1f:40:08:a7:54:54:e8:8c:b0:db:cb:e8:64:50:2d:
         79:1b:05:3d:18:6a:59:94:c9:f2:d7:6c:b8:3c:b0:8e:46:5c:
         0e:0f:d4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:36:55 2025 by rpki-client