Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/323830343a373431633a3a2f33322d313238203d3e20323730393539.roa
File:                     323830343a373431633a3a2f33322d313238203d3e20323730393539.roa (raw, json)
Hash identifier:          P8k24R3A+sGlUaqCi34mClrlv2Q/e7CGuOsOjHZ7Mc0=
Subject key identifier:   6A:8E:31:78:4F:07:5D:48:A0:5C:05:50:55:A4:15:19:71:71:49:71
Certificate issuer:       /CN=19765B7E797B246EDB361ED3AEECE7B636538C60
Certificate serial:       72045F096DD18A6B80A8B5F4D8C470F067C5E044
Authority key identifier: 19:76:5B:7E:79:7B:24:6E:DB:36:1E:D3:AE:EC:E7:B6:36:53:8C:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19765B7E797B246EDB361ED3AEECE7B636538C60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/323830343a373431633a3a2f33322d313238203d3e20323730393539.roa
Signing time:             Wed 25 Jun 2025 21:39:25 +0000
ROA not before:           Wed 25 Jun 2025 21:34:25 +0000
ROA not after:            Wed 24 Jun 2026 21:39:25 +0000
asID:                     270959
IP address blocks:        2804:741c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/19765B7E797B246EDB361ED3AEECE7B636538C60.crl
                          rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/19765B7E797B246EDB361ED3AEECE7B636538C60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19765B7E797B246EDB361ED3AEECE7B636538C60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 12:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:04:5f:09:6d:d1:8a:6b:80:a8:b5:f4:d8:c4:70:f0:67:c5:e0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19765B7E797B246EDB361ED3AEECE7B636538C60
        Validity
            Not Before: Jun 25 21:34:25 2025 GMT
            Not After : Jun 24 21:39:25 2026 GMT
        Subject: CN=6A8E31784F075D48A05C055055A4151971714971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:13:f1:e2:a9:15:38:d6:af:bb:78:0a:35:
                    cb:4f:86:1f:a1:26:3e:a5:62:06:d8:df:e9:7d:4c:
                    c0:1e:23:bf:f1:18:d7:27:4e:31:85:c2:fc:db:28:
                    0b:2f:95:d8:42:36:99:cb:1e:9e:45:06:e8:7c:7f:
                    35:3a:45:2c:de:bf:b5:91:cf:09:e9:f9:ec:fa:f7:
                    99:ac:02:f2:2c:8b:a3:16:b5:23:65:9a:5f:69:42:
                    05:64:4d:54:c0:b1:ff:8e:e6:35:f5:c3:fd:f5:f1:
                    9b:0e:76:b4:55:b9:4a:1a:81:9a:b2:66:7c:d1:c1:
                    59:72:2b:dd:82:3d:db:31:99:c3:ec:db:b4:76:92:
                    da:8b:b1:99:12:99:e4:0e:78:a2:c8:fc:a8:bc:72:
                    b6:88:c6:c8:4b:39:b0:33:89:5d:8a:62:29:0d:c9:
                    72:38:08:75:a4:76:df:bf:0d:1b:33:4a:df:b1:14:
                    d7:38:f5:3f:f2:26:53:60:a0:34:31:dc:2a:ad:4a:
                    57:e0:7a:24:23:01:20:74:32:f7:d0:50:9f:27:24:
                    16:2d:c8:1f:d9:9a:8e:f4:33:94:6a:29:32:1a:f0:
                    7d:cd:3c:61:95:2f:cd:45:77:58:33:99:df:e8:d8:
                    9e:f0:38:cb:2d:81:72:4f:b5:29:ac:4c:d3:da:3a:
                    e5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8E:31:78:4F:07:5D:48:A0:5C:05:50:55:A4:15:19:71:71:49:71
            X509v3 Authority Key Identifier:
                keyid:19:76:5B:7E:79:7B:24:6E:DB:36:1E:D3:AE:EC:E7:B6:36:53:8C:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/19765B7E797B246EDB361ED3AEECE7B636538C60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19765B7E797B246EDB361ED3AEECE7B636538C60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EzHVyQgdzSNGbfWLWtY1LLgU9kHGn8psmh8NcfUSuaah/0/323830343a373431633a3a2f33322d313238203d3e20323730393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:741c::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:8b:89:bb:69:01:f0:82:d2:52:4d:af:f1:01:6d:ba:52:49:
         01:69:5e:b2:8f:7c:6c:91:d1:40:c3:5d:fa:cb:89:d4:c4:16:
         4d:26:e4:b3:64:95:93:d4:ee:19:9e:02:5e:80:59:5e:fd:6c:
         76:e0:21:fc:8d:20:dd:db:7f:9e:a2:f2:82:59:0f:98:1f:87:
         e8:b2:b6:ad:8a:32:b4:64:59:a1:6b:98:28:70:43:97:89:ef:
         a6:73:1f:0c:01:fa:e3:39:28:cf:48:33:02:69:22:61:4b:02:
         88:da:aa:46:c8:0a:4e:43:a3:68:48:38:da:d0:14:23:2b:94:
         00:18:e6:4a:13:fc:f0:46:55:76:c4:b3:8f:59:2e:88:86:66:
         33:53:f3:48:b0:d6:c2:d1:83:b0:4c:b5:33:fc:fc:2d:24:49:
         c0:9f:fb:e3:be:a3:61:61:89:5a:5c:62:0c:d6:1d:81:ff:80:
         cf:cc:78:8e:c4:f3:55:bc:00:27:43:8c:f8:f6:b8:fd:08:64:
         b9:9f:5d:da:7d:9f:bb:28:c6:59:dd:b2:ae:f8:3e:5d:6d:05:
         81:b3:0d:56:b7:74:60:98:db:cc:cb:7e:48:97:36:af:89:0e:
         ad:48:92:1a:44:14:5c:5b:37:78:cb:19:63:fb:7f:53:df:fe:
         33:1d:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:52:19 2025 by rpki-client