Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a383030303a3a2f33342d3334203d3e20323634303034.roa
File:                     323830343a323933383a383030303a3a2f33342d3334203d3e20323634303034.roa (raw, json)
Hash identifier:          mCj3ujOl+nEB54+t06tAYyogUrFDIGzMOHlru86erRw=
Subject key identifier:   3B:90:52:0B:1B:08:57:39:4D:54:F4:55:24:CF:5A:2A:35:EB:5E:DF
Certificate issuer:       /CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
Certificate serial:       5250CFBDB8B0C82DE00012CE3822942D103DFCE7
Authority key identifier: 9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a383030303a3a2f33342d3334203d3e20323634303034.roa
Signing time:             Thu 26 Jun 2025 17:41:20 +0000
ROA not before:           Thu 26 Jun 2025 17:36:20 +0000
ROA not after:            Thu 25 Jun 2026 17:41:20 +0000
asID:                     264004
IP address blocks:        2804:2938:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl
                          rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 04:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:50:cf:bd:b8:b0:c8:2d:e0:00:12:ce:38:22:94:2d:10:3d:fc:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
        Validity
            Not Before: Jun 26 17:36:20 2025 GMT
            Not After : Jun 25 17:41:20 2026 GMT
        Subject: CN=3B90520B1B0857394D54F45524CF5A2A35EB5EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:68:2a:87:4e:28:b9:0e:7d:10:ba:19:7e:
                    7b:65:41:ef:03:b5:9e:3b:8f:bf:ab:d8:b4:e0:65:
                    c5:7a:17:db:48:9a:77:bb:c6:2f:51:06:53:79:f8:
                    37:0e:e3:b2:fa:e8:32:c5:22:54:36:61:f5:4f:e2:
                    c8:63:e7:df:f3:2a:b5:84:02:74:37:3a:3b:ee:f2:
                    c8:81:63:e0:92:8e:3a:4e:b8:48:2a:f2:7a:47:db:
                    52:91:5d:13:80:9f:8d:8d:e0:96:9c:96:09:c9:bb:
                    4b:6b:59:58:db:25:b6:e3:90:79:4e:fb:77:02:56:
                    ea:06:ce:1f:c8:9a:2e:68:eb:ae:be:2b:37:2a:0f:
                    d1:5d:d6:c9:18:72:55:43:0e:d7:41:72:92:fa:97:
                    5e:a5:2e:f9:e8:e3:cf:ea:c4:e1:6b:d8:86:b0:c1:
                    e4:f2:9e:be:35:a6:c7:0e:4f:13:dc:9a:dd:5e:9e:
                    a8:ce:eb:0b:87:12:f0:34:a6:06:50:d9:06:27:10:
                    34:ea:f2:36:5b:46:92:41:27:a4:58:d0:7d:83:d6:
                    24:d4:48:08:08:01:9f:97:4a:4f:79:d7:58:35:3c:
                    ad:27:51:a7:4a:d5:d4:92:a1:4f:ca:60:a3:1d:f9:
                    e9:57:92:cc:54:cf:2b:28:cb:60:a1:81:85:49:8a:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:90:52:0B:1B:08:57:39:4D:54:F4:55:24:CF:5A:2A:35:EB:5E:DF
            X509v3 Authority Key Identifier:
                keyid:9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a383030303a3a2f33342d3334203d3e20323634303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2938:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         32:f7:ed:8e:0e:8e:37:40:8c:d4:df:33:6d:05:78:12:1d:11:
         ce:6b:87:71:f4:f3:df:13:e6:38:29:09:9f:84:35:ac:1e:a3:
         f5:16:67:e2:9a:e4:e5:08:3c:c6:da:99:df:c6:17:f4:8c:18:
         52:80:1a:1c:18:31:88:41:23:28:89:1d:63:32:7c:08:3d:b4:
         43:2f:83:f6:24:48:43:b6:30:6c:15:ab:81:5d:81:bb:58:46:
         21:55:3b:d9:61:c8:19:d5:b4:f4:bb:95:b6:15:d8:31:88:40:
         0d:b2:57:2f:25:04:f4:97:7c:27:1f:9c:f5:82:03:c6:91:79:
         01:06:bf:fb:b4:43:4e:1a:14:92:20:8c:95:ad:be:4e:73:44:
         ad:67:c5:32:df:ee:c8:7c:d1:bb:62:8e:fb:4d:8b:9d:a9:71:
         0a:5f:ea:ec:3b:6b:24:e9:fc:57:58:90:67:e6:eb:04:61:5e:
         f7:78:cb:60:ad:3e:d9:78:ee:42:2a:6b:4c:22:42:a7:b5:63:
         2b:23:06:12:61:ac:cc:98:d6:90:88:97:55:de:0a:1a:a9:b3:
         13:1a:8b:ed:70:27:47:64:cd:bc:5a:58:c7:79:ae:f4:57:fc:
         71:36:28:02:bd:04:98:65:24:2d:8a:ce:49:72:73:d0:dd:67:
         ad:d5:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:22:57 2025 by rpki-client