Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/323830343a386466343a3a2f33322d3332203d3e20323733333932.roa
File:                     323830343a386466343a3a2f33322d3332203d3e20323733333932.roa (raw, json)
Hash identifier:          JtxibDxxLbnd8dYoepBlUzOUQsM7m7AkTZUAq3yD2ic=
Subject key identifier:   71:A5:73:54:5A:C7:15:D5:9A:A1:E1:2B:59:B9:14:3F:4B:65:FD:23
Certificate issuer:       /CN=A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F
Certificate serial:       5C85CF5549986107C7F7A7B847A63F5B0D6CA55F
Authority key identifier: A1:76:0A:7E:E0:C2:DE:FB:3E:45:D1:8E:0E:E3:65:B4:CC:94:1E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/323830343a386466343a3a2f33322d3332203d3e20323733333932.roa
Signing time:             Thu 19 Jun 2025 04:32:45 +0000
ROA not before:           Thu 19 Jun 2025 04:27:45 +0000
ROA not after:            Thu 18 Jun 2026 04:32:45 +0000
asID:                     273392
IP address blocks:        2804:8df4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.crl
                          rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 05:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:85:cf:55:49:98:61:07:c7:f7:a7:b8:47:a6:3f:5b:0d:6c:a5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F
        Validity
            Not Before: Jun 19 04:27:45 2025 GMT
            Not After : Jun 18 04:32:45 2026 GMT
        Subject: CN=71A573545AC715D59AA1E12B59B9143F4B65FD23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:61:08:d9:51:fa:70:cb:d1:a2:2f:02:a8:
                    1b:8c:41:14:0b:29:87:a8:48:5b:02:1d:d3:56:bd:
                    43:51:0d:b0:fc:b4:0d:b7:18:d1:f7:6d:ae:db:1a:
                    0d:71:cb:9a:9b:b8:d0:ed:68:24:4f:64:b9:08:5a:
                    b1:10:de:b9:08:f3:36:45:37:23:c8:60:f9:17:16:
                    3f:1d:ef:08:b4:72:81:cc:da:b5:34:a5:66:bd:22:
                    53:30:be:65:0b:31:3a:cf:eb:02:ba:16:bf:38:ee:
                    25:dd:98:a5:14:16:6c:09:14:93:6b:46:09:47:9b:
                    03:b8:cc:b9:49:a1:e4:28:16:2b:13:b0:80:e4:ee:
                    43:60:95:f1:a3:04:de:17:ba:4a:36:26:b2:c9:c6:
                    06:cf:58:b4:d5:93:ff:8a:f6:99:73:98:11:bc:2b:
                    72:9f:45:df:22:c7:8e:14:16:0f:71:a5:bf:1a:a4:
                    95:0a:79:d4:dc:f1:82:dc:56:06:50:17:6b:0d:ad:
                    bc:48:31:80:07:a2:36:44:ed:dc:a4:7a:f5:b2:77:
                    20:c2:07:3f:12:bb:10:88:d4:b3:5e:cd:37:37:53:
                    97:5f:62:7c:bc:d8:0a:f7:d0:0d:b9:2c:c5:df:b4:
                    75:8c:2b:50:68:9c:2f:28:85:db:36:2a:4a:e4:6e:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A5:73:54:5A:C7:15:D5:9A:A1:E1:2B:59:B9:14:3F:4B:65:FD:23
            X509v3 Authority Key Identifier:
                keyid:A1:76:0A:7E:E0:C2:DE:FB:3E:45:D1:8E:0E:E3:65:B4:CC:94:1E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1760A7EE0C2DEFB3E45D18E0EE365B4CC941E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/323830343a386466343a3a2f33322d3332203d3e20323733333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8df4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:3c:79:48:34:3b:6b:e0:4a:83:6e:d4:45:4d:50:a1:c8:47:
         65:2c:96:23:86:26:d4:d9:08:38:47:23:be:2c:9f:8e:55:7b:
         03:e0:bb:69:2a:30:cb:dd:44:94:7d:d1:cb:95:ea:52:14:16:
         9d:fe:fa:95:b0:2c:c8:e7:22:37:20:dc:df:e4:af:45:23:e7:
         74:54:ed:bf:6c:84:04:f6:b7:0a:aa:0f:f1:9f:15:7a:09:43:
         c9:7d:13:3b:fd:e8:87:7a:aa:04:6b:79:c4:5d:77:6a:79:33:
         ad:44:e4:bb:7b:10:ab:6c:e0:ff:4f:5e:f8:a3:15:d9:31:41:
         51:36:0a:8e:c7:9c:75:82:0c:64:55:de:4d:a6:a9:67:28:14:
         01:66:85:ed:74:34:af:e1:6b:14:e1:59:f5:0c:cc:13:1d:a4:
         85:fc:5e:49:4e:48:0c:52:3d:26:1c:8d:36:b8:96:ba:cd:b2:
         63:4f:73:95:29:7e:74:55:00:25:27:d9:7d:a6:bd:7a:43:18:
         83:14:19:df:e2:de:7b:d7:1a:3e:21:02:2a:a6:e6:31:13:0e:
         ed:4f:ad:58:4e:84:52:f0:60:ad:6c:b7:62:35:f4:82:98:9b:
         a9:13:02:a9:45:b1:19:93:83:0b:ba:d5:04:ba:d3:be:53:7c:
         31:5a:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:41:53 2025 by rpki-client