Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a633030303a3a2f33342d3334203d3e20323634303034.roa
File:                     323830343a323933383a633030303a3a2f33342d3334203d3e20323634303034.roa (raw, json)
Hash identifier:          myVn1EAgj9sG6NTG4jFaH66xW+3lwM5+1+tDZfIH1K4=
Subject key identifier:   28:B3:2B:80:1F:60:69:A8:1F:A7:17:F6:27:CB:E4:0B:7E:F0:A0:16
Certificate issuer:       /CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
Certificate serial:       0B8813656FB0C56101319B230A489CA2B05A1713
Authority key identifier: 9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a633030303a3a2f33342d3334203d3e20323634303034.roa
Signing time:             Thu 26 Jun 2025 17:41:20 +0000
ROA not before:           Thu 26 Jun 2025 17:36:20 +0000
ROA not after:            Thu 25 Jun 2026 17:41:20 +0000
asID:                     264004
IP address blocks:        2804:2938:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl
                          rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 11:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:88:13:65:6f:b0:c5:61:01:31:9b:23:0a:48:9c:a2:b0:5a:17:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
        Validity
            Not Before: Jun 26 17:36:20 2025 GMT
            Not After : Jun 25 17:41:20 2026 GMT
        Subject: CN=28B32B801F6069A81FA717F627CBE40B7EF0A016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:2f:8f:0a:42:32:38:60:ca:01:a4:23:f5:
                    10:c7:23:73:10:33:87:4c:43:f1:63:5d:6e:27:bb:
                    71:89:f5:39:8b:de:14:69:a5:de:14:68:45:7d:c6:
                    bd:c7:a1:6d:12:32:42:3e:bc:91:89:2f:3d:b7:c8:
                    29:4d:90:c3:20:7f:c5:36:57:62:0d:c0:a5:9a:e5:
                    02:62:c2:6f:c1:9a:c6:c2:f6:dc:97:f8:f4:72:a1:
                    0b:c6:9b:f4:a8:d0:f8:69:90:07:bf:ae:25:b1:86:
                    5e:4d:4e:29:cd:5f:5b:48:44:fb:01:1e:ac:90:c5:
                    c1:4b:13:cc:f8:02:0b:35:2d:f4:4c:d9:cc:dc:21:
                    37:10:f3:01:42:8e:fc:16:b4:5a:50:5e:fb:b1:e5:
                    b3:9b:78:ca:6e:c1:49:8c:f9:2d:17:dd:e1:fb:1f:
                    22:c2:3d:27:b5:40:3f:d2:a9:ba:41:5b:88:26:f0:
                    06:38:fb:72:21:1d:cc:d9:47:ed:16:79:63:10:77:
                    48:54:67:43:34:18:2f:5a:3e:35:95:5b:e9:d8:76:
                    ab:34:90:36:18:53:81:ff:53:e0:6f:67:71:66:b5:
                    2d:d4:cd:d8:e7:6e:56:d9:5b:84:95:03:dd:c4:b7:
                    93:4b:76:9a:e2:ad:bc:cb:4e:94:10:f9:33:0d:c1:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B3:2B:80:1F:60:69:A8:1F:A7:17:F6:27:CB:E4:0B:7E:F0:A0:16
            X509v3 Authority Key Identifier:
                keyid:9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a633030303a3a2f33342d3334203d3e20323634303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2938:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a8:26:c2:93:14:18:f8:ed:f4:1b:d5:0c:e1:93:01:02:27:2f:
         b7:38:c2:b9:7c:e6:2d:7d:eb:07:a8:4f:65:05:ae:c7:c4:3e:
         c7:7f:08:84:b7:fd:14:bf:89:95:83:2c:8c:cb:e6:97:41:2f:
         d1:68:64:9b:44:f4:46:0f:e8:d0:38:88:6b:27:87:96:24:e5:
         27:c2:54:38:12:c8:b8:b1:e0:23:47:ed:df:6f:9a:40:f8:fd:
         7b:ff:62:0f:2a:a2:5f:49:68:aa:3b:b4:94:8f:28:85:d3:c0:
         65:97:f4:5f:73:96:2f:50:7b:41:da:ad:34:6c:b3:dc:1f:d5:
         d0:0b:b8:c4:7a:03:1d:1d:2b:1e:66:5f:ca:35:b8:69:01:16:
         d8:66:32:ef:b1:d5:f4:0e:b7:d2:4d:41:09:fb:6e:0c:da:6c:
         74:07:0d:75:7b:45:a8:d2:66:fa:ae:5c:a1:fc:35:ea:9b:f5:
         33:4c:69:af:dd:41:8e:a2:5b:b2:2d:1f:a5:f4:34:62:df:d0:
         e2:5b:96:d6:43:11:ca:07:fe:92:fb:be:d3:09:8b:6f:2a:41:
         ca:9f:83:b0:99:ae:67:a1:c4:5f:20:5e:bd:2f:7b:25:38:bc:
         02:69:02:0f:00:c9:89:ab:09:d4:5a:e9:1c:fc:48:d0:3c:1d:
         e4:9d:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:14:03 2025 by rpki-client