Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3330303a3a2f34302d3430203d3e20323633383636.roa
File:                     323830343a323666343a3330303a3a2f34302d3430203d3e20323633383636.roa (raw, json)
Hash identifier:          X4kh4drmLwLmuXbrivUg38riLU8Amz4pb6tSrSYLQpA=
Subject key identifier:   E6:38:B7:73:9A:3D:24:91:17:E9:A7:A0:6B:5F:96:45:4F:30:D6:F2
Certificate issuer:       /CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
Certificate serial:       1CEE3A70799AE81F5A98BE96EFC0CFC099104A6E
Authority key identifier: 0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3330303a3a2f34302d3430203d3e20323633383636.roa
Signing time:             Wed 18 Jun 2025 20:22:44 +0000
ROA not before:           Wed 18 Jun 2025 20:17:44 +0000
ROA not after:            Wed 17 Jun 2026 20:22:44 +0000
asID:                     263866
IP address blocks:        2804:26f4:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl
                          rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 09:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ee:3a:70:79:9a:e8:1f:5a:98:be:96:ef:c0:cf:c0:99:10:4a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
        Validity
            Not Before: Jun 18 20:17:44 2025 GMT
            Not After : Jun 17 20:22:44 2026 GMT
        Subject: CN=E638B7739A3D249117E9A7A06B5F96454F30D6F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:de:91:75:83:3b:27:79:ae:4a:8d:ef:92:3b:
                    89:4c:e2:95:dd:25:35:f8:f1:25:54:aa:f4:2f:3f:
                    ca:a6:08:08:da:a1:e9:50:96:ad:60:ed:4a:90:a2:
                    b3:19:ca:dd:cb:b4:8a:d6:79:6c:75:0a:1c:39:d7:
                    5f:5d:d9:24:d8:9d:62:07:d1:c4:fe:cc:1c:e8:53:
                    e8:de:07:53:35:58:dd:da:a2:0c:a6:e0:6f:cd:2e:
                    17:38:a6:55:98:64:31:6c:8a:06:3d:4d:d0:52:2a:
                    b4:33:d6:6f:74:cf:f4:b9:b6:8c:66:df:05:35:0e:
                    52:54:c7:7b:e4:e7:51:47:7c:39:f8:64:45:07:b9:
                    2d:14:a8:73:44:a4:22:60:4f:17:f6:bf:d1:ee:9f:
                    30:c8:f4:2d:98:24:b4:cc:23:04:f8:2f:35:42:91:
                    1e:d4:59:07:02:a2:d6:86:17:f5:32:ac:84:64:7b:
                    a0:66:d3:9c:91:3b:7c:7b:43:52:15:96:41:b1:40:
                    56:31:cb:b2:ad:0f:fc:77:d6:5b:ab:03:bd:67:44:
                    0a:bc:96:71:ec:20:b4:c0:da:5d:b8:b8:aa:2f:eb:
                    79:f7:65:42:ba:41:5f:22:c5:0c:56:b3:f3:3d:00:
                    ff:7b:10:12:c7:cd:03:53:ac:dc:97:99:c3:43:2c:
                    50:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:38:B7:73:9A:3D:24:91:17:E9:A7:A0:6B:5F:96:45:4F:30:D6:F2
            X509v3 Authority Key Identifier:
                keyid:0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3330303a3a2f34302d3430203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26f4:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:57:17:e7:cb:47:4f:10:74:2e:a3:04:ea:2e:0b:6e:5d:5d:
         58:74:50:02:35:79:90:73:07:31:b9:29:f1:6b:94:00:81:99:
         da:7a:6d:ce:33:be:2e:2b:33:cb:50:70:c3:9c:d1:d3:ef:5c:
         4c:9f:ac:00:e2:58:8e:14:f6:da:8c:22:54:10:a8:ac:26:58:
         53:04:aa:35:df:e5:d5:32:3b:81:a5:29:71:47:37:b7:0d:05:
         6b:e0:31:79:73:2f:17:87:81:c3:6c:59:98:52:ae:12:35:8a:
         b9:67:e6:d6:ec:9a:c3:81:b8:33:3a:89:23:a4:bb:54:5b:3f:
         fb:7b:ea:0b:36:d5:c2:4d:de:91:9c:b1:ea:f6:5c:5c:ac:f4:
         44:50:a4:c3:21:8d:b9:b8:bf:c1:98:f5:8c:67:f4:20:a4:c0:
         50:81:21:81:3f:d0:7e:9f:a8:2e:47:d4:a6:39:61:e1:a6:7f:
         e1:c8:11:cc:2c:42:5d:a7:2d:22:63:0f:3d:0b:af:a6:dd:28:
         d6:e1:32:eb:a0:61:ef:44:a2:5c:5a:1c:0c:4f:35:89:0c:78:
         42:6d:60:45:68:48:a7:12:f9:1f:b8:f4:4b:18:3a:a7:35:af:
         9f:96:90:50:fa:90:12:29:aa:08:ac:a1:27:fa:f5:6e:44:e4:
         67:a2:c5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:23:45 2025 by rpki-client