Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33322d3332203d3e20323632343630.roa
File:                     323830343a3462343a3a2f33322d3332203d3e20323632343630.roa (raw, json)
Hash identifier:          /+ktPrmvdVoHSkEkzBWPYUyjnfINerij+99jBhS9wlU=
Subject key identifier:   B1:93:A3:CF:5C:6F:D0:E2:93:E5:2E:37:A6:10:73:3A:1D:76:FB:F2
Certificate issuer:       /CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
Certificate serial:       73462AE4F7E868A8D5D3E1A3F3252514AD213DA0
Authority key identifier: 9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33322d3332203d3e20323632343630.roa
Signing time:             Thu 26 Jun 2025 14:37:47 +0000
ROA not before:           Thu 26 Jun 2025 14:32:47 +0000
ROA not after:            Thu 25 Jun 2026 14:37:47 +0000
asID:                     262460
IP address blocks:        2804:4b4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl
                          rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 00:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:46:2a:e4:f7:e8:68:a8:d5:d3:e1:a3:f3:25:25:14:ad:21:3d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
        Validity
            Not Before: Jun 26 14:32:47 2025 GMT
            Not After : Jun 25 14:37:47 2026 GMT
        Subject: CN=B193A3CF5C6FD0E293E52E37A610733A1D76FBF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:02:e2:2c:70:a4:1a:27:18:54:a2:08:9d:
                    66:78:b6:38:59:33:d4:80:69:97:4e:da:51:ec:24:
                    56:bf:67:fa:fd:e3:ec:d0:76:4c:51:1f:86:f5:ed:
                    f4:77:f8:67:78:17:c0:9d:1e:92:b0:5b:ba:f3:16:
                    76:d8:b4:1c:14:53:a0:bd:50:16:09:5f:5c:eb:a8:
                    94:0d:8c:04:8e:78:72:7c:8c:7c:88:29:c5:9b:42:
                    4c:4b:d0:12:71:0b:a0:6f:68:72:70:fa:61:8c:f4:
                    51:09:53:c0:02:bf:16:4d:1f:23:ef:ba:ba:06:88:
                    04:25:ac:d3:f0:d9:77:8d:f1:d9:bf:06:54:85:31:
                    d8:79:b3:04:c7:72:17:2c:88:d7:64:bb:0e:9b:d7:
                    91:e9:bc:a7:10:2b:9e:2c:b7:33:6d:1a:e3:7e:b0:
                    ba:1f:0b:1b:b0:9e:7d:85:01:fc:21:cc:7f:d5:96:
                    18:48:2c:53:1a:e0:2c:7d:07:08:4a:32:6b:a4:cd:
                    e5:80:6b:26:07:87:7f:53:80:df:7a:54:07:f6:b4:
                    37:b8:fe:b0:3f:aa:02:02:dd:ff:d9:ee:4c:ff:bc:
                    9b:e5:65:f3:7b:c7:91:f5:6b:9f:86:ef:f8:68:85:
                    7b:56:9f:01:33:ac:d2:1c:10:1a:e4:aa:9c:85:34:
                    a6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:93:A3:CF:5C:6F:D0:E2:93:E5:2E:37:A6:10:73:3A:1D:76:FB:F2
            X509v3 Authority Key Identifier:
                keyid:9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33322d3332203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:39:41:35:5f:08:00:21:be:dd:e3:4d:80:e2:b0:d1:fd:6d:
         02:52:8f:78:81:65:3e:e6:5f:9a:a8:0d:28:01:6e:73:78:66:
         f8:45:83:68:3c:bc:e4:31:df:37:90:ab:4f:50:b8:18:0a:32:
         33:7f:e0:44:b7:06:29:7d:f3:b9:c0:f5:97:d7:5c:af:de:0d:
         5c:97:33:c0:8b:79:3c:e5:31:a3:35:4e:99:29:31:35:34:3c:
         33:cf:33:91:ac:64:fa:03:89:13:37:f3:c6:fd:34:e5:80:18:
         4e:f1:bf:0a:ea:cf:fa:c9:ab:1f:53:20:a7:d4:74:5a:43:fa:
         f7:18:d5:48:63:6d:ae:c3:18:b2:39:78:57:54:8e:79:c6:22:
         6f:ed:3e:0c:23:94:d2:21:41:f1:da:9c:05:67:29:f2:a2:4f:
         44:80:13:a1:8f:86:0e:8e:00:dc:cd:4d:39:32:ff:78:47:37:
         03:a0:1c:89:04:39:a7:41:56:b9:23:3e:54:16:48:a6:a9:20:
         9d:90:80:33:cd:80:17:ae:3b:77:5f:7b:da:92:28:f2:a3:48:
         3c:91:1f:d4:de:82:94:fd:89:f1:f7:e5:af:96:61:2e:66:cd:
         15:14:a9:23:6c:31:81:f3:3d:f7:21:d6:ab:15:bd:55:fe:77:
         6d:00:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 04:03:17 2025 by rpki-client