Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33332d3333203d3e20323632343630.roa
File:                     323830343a3462343a3a2f33332d3333203d3e20323632343630.roa (raw, json)
Hash identifier:          X1ikfsHERqUTCtrP271TE6evoEHftgRuG4PT/GcjwlM=
Subject key identifier:   9F:E3:D3:09:CF:7A:23:D1:A2:B7:25:5F:C1:0D:6C:E6:3A:12:F8:08
Certificate issuer:       /CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
Certificate serial:       56733F0BBC3BCF5AA20EAC849090BD5BBB660932
Authority key identifier: 9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33332d3333203d3e20323632343630.roa
Signing time:             Thu 26 Jun 2025 14:37:46 +0000
ROA not before:           Thu 26 Jun 2025 14:32:46 +0000
ROA not after:            Thu 25 Jun 2026 14:37:46 +0000
asID:                     262460
IP address blocks:        2804:4b4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl
                          rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 03:25:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:73:3f:0b:bc:3b:cf:5a:a2:0e:ac:84:90:90:bd:5b:bb:66:09:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F9264BED48A2C59AB950B4AF92F9DFDE272F864
        Validity
            Not Before: Jun 26 14:32:46 2025 GMT
            Not After : Jun 25 14:37:46 2026 GMT
        Subject: CN=9FE3D309CF7A23D1A2B7255FC10D6CE63A12F808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d8:14:b8:85:dd:a0:ac:af:e9:69:e4:01:3a:
                    d3:13:dc:21:c4:49:04:fc:05:18:3b:06:e9:06:8d:
                    83:11:7b:36:96:ef:94:6b:c0:99:c4:b1:75:94:ed:
                    dd:67:da:89:a3:04:41:ca:be:74:b0:0f:8e:fd:e0:
                    d3:aa:54:c8:e8:c3:76:6b:33:0a:0b:a3:ac:5a:7f:
                    32:fd:ac:8d:45:e7:54:5c:bf:dc:aa:31:63:c1:37:
                    a8:80:3e:da:c7:81:bb:c9:dd:51:2f:c2:b9:54:80:
                    5c:dd:b9:f2:29:52:56:7c:07:01:87:6a:07:7a:7e:
                    2b:78:c2:df:d7:d2:ca:8c:6c:18:2f:2e:15:fc:fc:
                    b4:40:19:a2:89:25:03:db:05:50:02:b0:f6:cb:30:
                    eb:24:a2:0a:00:ce:5c:ed:e6:95:82:ff:97:74:32:
                    5d:28:8b:95:57:f9:db:36:9b:1b:34:8e:de:a3:f4:
                    96:67:38:02:3f:cd:cd:31:c6:23:e8:0e:66:31:af:
                    de:04:bf:d2:77:54:38:63:d7:a2:d2:ee:9e:07:27:
                    00:92:69:1b:dd:01:66:54:36:9e:eb:62:31:97:e0:
                    b0:63:00:45:66:36:79:d0:f1:b5:e6:47:52:02:10:
                    d0:dc:b1:6b:af:f9:0c:6a:00:fc:29:9f:82:5a:89:
                    a5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E3:D3:09:CF:7A:23:D1:A2:B7:25:5F:C1:0D:6C:E6:3A:12:F8:08
            X509v3 Authority Key Identifier:
                keyid:9F:92:64:BE:D4:8A:2C:59:AB:95:0B:4A:F9:2F:9D:FD:E2:72:F8:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F9264BED48A2C59AB950B4AF92F9DFDE272F864.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33332d3333203d3e20323632343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b4::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:83:59:ef:80:34:8c:63:ad:62:c4:1a:cb:1f:6e:0b:26:0f:
         1f:f0:4a:2b:20:45:8e:84:41:9b:85:a5:4e:10:5e:5e:9d:5d:
         11:31:d4:d6:d8:ca:52:bf:bc:a9:63:7b:a4:01:06:04:1b:97:
         97:b7:01:a2:eb:8f:d6:6d:83:83:e4:ab:b4:98:77:20:4d:80:
         8d:41:ef:90:6d:ce:b4:4b:59:1d:57:20:54:d1:1c:e0:87:6d:
         c2:a2:64:dd:e4:82:4e:51:6c:49:f9:75:0a:09:2b:07:ed:63:
         bb:83:7e:be:40:86:08:62:73:be:43:16:a1:96:95:cb:b7:0e:
         76:ed:98:86:17:f4:be:a2:a3:69:77:01:10:2a:ab:cf:6f:c3:
         5c:3a:58:ce:b6:d2:91:dc:75:56:7b:04:5e:d0:bc:e6:f3:ee:
         4b:97:84:e5:e9:ea:78:55:69:83:0f:f8:0d:eb:9d:e6:49:42:
         ca:4e:cd:56:a1:8b:d1:ff:e0:95:ac:ce:70:6d:d1:bb:1b:5a:
         b3:5d:b4:df:3f:f5:04:ea:cd:7c:ba:c4:c1:46:44:e6:1b:c6:
         82:92:c8:ff:90:36:34:48:f4:e9:97:49:a2:46:72:2a:b4:c6:
         c2:b1:7c:78:9b:d0:45:cb:f1:18:ca:9d:83:3f:ab:83:fd:5e:
         c1:87:60:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 11:36:17 2025 by rpki-client