Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/323830343a316461383a3a2f33322d3332203d3e20323634333834.roa
File:                     323830343a316461383a3a2f33322d3332203d3e20323634333834.roa (raw, json)
Hash identifier:          8UZvrXQXf+S/unJDDfbY8zsDOa8PxwcIUpDqVcIzLms=
Subject key identifier:   75:D1:91:EB:DF:54:7A:61:EE:C6:60:D8:35:F2:E9:BE:80:E6:B9:A8
Certificate issuer:       /CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB
Certificate serial:       1E4EB5AEBA5C7789714C3C150D6BF9293E2DCD45
Authority key identifier: 2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/323830343a316461383a3a2f33322d3332203d3e20323634333834.roa
Signing time:             Fri 27 Jun 2025 14:09:13 +0000
ROA not before:           Fri 27 Jun 2025 14:04:13 +0000
ROA not after:            Fri 26 Jun 2026 14:09:13 +0000
asID:                     264384
IP address blocks:        2804:1da8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl
                          rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 22:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4e:b5:ae:ba:5c:77:89:71:4c:3c:15:0d:6b:f9:29:3e:2d:cd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB
        Validity
            Not Before: Jun 27 14:04:13 2025 GMT
            Not After : Jun 26 14:09:13 2026 GMT
        Subject: CN=75D191EBDF547A61EEC660D835F2E9BE80E6B9A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:7e:5f:70:64:c5:e5:3d:13:93:34:a4:a0:
                    bd:65:76:d2:05:42:1f:f9:1f:e9:59:76:04:bb:66:
                    1a:cc:aa:f8:5c:d0:12:96:cc:05:fc:c5:3e:f2:71:
                    e6:1f:68:2a:be:82:bd:8b:9c:be:e3:4d:ef:8e:f7:
                    d7:9d:32:c7:90:98:fe:97:e8:3d:a1:25:30:46:95:
                    a8:dd:fe:e4:cb:5e:7e:02:a8:c2:33:0c:c3:09:e6:
                    80:e0:e4:94:f2:37:a1:13:26:90:22:3d:d6:d7:08:
                    80:18:30:54:88:39:85:15:5d:02:aa:e0:fd:bb:7e:
                    47:b3:a5:9c:d1:8f:07:82:77:16:f3:f0:6a:dd:28:
                    58:8d:01:d4:18:61:c5:ff:b3:3c:b2:0d:7d:db:6c:
                    72:dd:5a:74:c6:4b:27:16:e7:46:32:8e:7e:b6:79:
                    2e:09:0e:72:1f:a3:95:5b:4f:6a:af:50:d1:71:39:
                    9e:52:b5:fb:24:4f:cd:b2:34:ae:36:de:76:f7:43:
                    f6:b2:a3:5d:9e:be:45:b4:f3:e9:35:f8:b0:77:eb:
                    fe:22:bd:2b:86:86:26:bb:f1:80:02:d2:12:14:0b:
                    bd:46:5e:65:da:e6:0a:68:79:32:30:b2:df:b2:15:
                    e0:2c:87:4d:a5:96:2e:e9:8c:97:54:ce:65:e0:34:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D1:91:EB:DF:54:7A:61:EE:C6:60:D8:35:F2:E9:BE:80:E6:B9:A8
            X509v3 Authority Key Identifier:
                keyid:2B:9D:F2:4F:92:F5:79:58:C1:0E:33:57:6E:A0:A0:7B:E1:DC:A8:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B9DF24F92F57958C10E33576EA0A07BE1DCA8FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/323830343a316461383a3a2f33322d3332203d3e20323634333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1da8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:84:e8:32:51:fa:75:8d:da:f5:b2:f6:7b:bf:01:da:90:0d:
         41:6b:5c:8e:6e:85:98:dd:a0:a1:0f:3c:72:e0:f1:85:9c:27:
         fa:3a:9c:5e:28:d9:3d:20:24:e0:e7:e6:5f:fc:d8:3a:41:76:
         05:d5:56:91:69:9d:fa:c3:f4:13:41:5e:37:91:63:7e:ac:ff:
         7e:40:c0:c6:82:d3:50:d3:ac:41:94:fc:df:0b:e5:9e:78:ea:
         5b:20:a8:da:ea:53:5f:81:7e:54:f0:8e:93:b8:e7:cd:20:5d:
         9b:3f:25:a5:da:c1:11:53:01:aa:6e:35:94:75:21:f6:a8:67:
         ab:80:1d:07:06:c0:00:40:e1:7a:92:eb:22:bc:de:2e:40:e5:
         d1:32:85:6a:e6:f4:f5:9b:98:b7:eb:f1:fa:15:d1:f9:70:b8:
         ba:e2:64:eb:7d:16:69:aa:11:34:6f:01:98:d3:7b:06:50:38:
         80:11:73:23:ad:3f:6d:d1:22:cc:3c:9f:8c:c6:30:f6:cd:21:
         78:94:ea:41:58:4a:b4:a3:b7:8d:da:ba:dc:0c:2a:a0:fe:f4:
         8e:85:00:2b:a4:3f:78:f3:51:fd:55:9d:68:b9:53:de:2b:97:
         17:ce:e8:c4:ec:b1:f1:96:9a:87:4d:57:c4:84:41:0b:04:86:
         32:88:b7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:23:25 2025 by rpki-client