Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3430303a3a2f34382d3438203d3e20323633383636.roa
File:                     323830343a323666343a3430303a3a2f34382d3438203d3e20323633383636.roa (raw, json)
Hash identifier:          9htBVB8rW+gCF63MViR2ARO5ONBFhZ3ITxUsdQadab0=
Subject key identifier:   57:3A:04:A6:F9:E6:9A:82:93:47:F7:15:5B:01:12:42:6D:22:0B:06
Certificate issuer:       /CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
Certificate serial:       2C5E08548D8AA48349C17EC134D112BE8DA2F9CD
Authority key identifier: 0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3430303a3a2f34382d3438203d3e20323633383636.roa
Signing time:             Wed 18 Jun 2025 20:22:50 +0000
ROA not before:           Wed 18 Jun 2025 20:17:50 +0000
ROA not after:            Wed 17 Jun 2026 20:22:50 +0000
asID:                     263866
IP address blocks:        2804:26f4:400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl
                          rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 09:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5e:08:54:8d:8a:a4:83:49:c1:7e:c1:34:d1:12:be:8d:a2:f9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3D646783321347829AF3DBE2CF61D9810C07DF
        Validity
            Not Before: Jun 18 20:17:50 2025 GMT
            Not After : Jun 17 20:22:50 2026 GMT
        Subject: CN=573A04A6F9E69A829347F7155B0112426D220B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:ee:2a:fe:3b:c4:50:da:b3:86:ad:2c:74:
                    f8:af:98:6e:63:ab:21:32:b0:12:0d:0b:51:fb:55:
                    31:c8:ab:c5:11:d8:bf:6b:c2:37:9a:7b:8e:d5:8d:
                    26:6e:fa:8d:c8:3c:38:b1:49:19:d5:e3:fd:5f:e7:
                    98:f4:2e:0d:fc:66:45:08:28:cd:fb:fd:49:87:f5:
                    57:e8:72:6a:f3:7f:11:43:86:76:ff:37:af:2a:ba:
                    52:cd:9a:c0:2a:3a:b8:77:0a:36:e3:b9:91:b0:29:
                    b4:e1:f1:58:e1:39:c8:e1:e6:5c:f4:2b:ba:69:a1:
                    a2:66:43:98:27:e4:a3:4d:26:ed:c6:a0:72:1c:20:
                    47:bc:e6:6f:77:00:80:1c:ee:83:fb:6b:21:25:93:
                    16:c0:31:e0:34:d2:fb:0c:0c:ef:7d:63:50:fd:b6:
                    6d:be:b5:3f:06:a8:42:d6:dc:a5:54:fe:3a:3e:45:
                    82:82:d7:94:b5:58:09:92:16:c7:ea:f6:c2:26:b0:
                    0b:24:76:9c:4f:c2:99:bd:a6:4d:db:fb:f3:22:72:
                    58:93:59:8b:52:aa:8d:bb:73:ec:89:3d:76:c7:a5:
                    d2:2a:5f:ad:b3:35:9c:b1:32:24:9a:39:86:7c:dc:
                    65:86:aa:fc:c0:6a:6a:f7:9b:7f:40:f2:7c:df:1c:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3A:04:A6:F9:E6:9A:82:93:47:F7:15:5B:01:12:42:6D:22:0B:06
            X509v3 Authority Key Identifier:
                keyid:0D:3D:64:67:83:32:13:47:82:9A:F3:DB:E2:CF:61:D9:81:0C:07:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/0D3D646783321347829AF3DBE2CF61D9810C07DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D3D646783321347829AF3DBE2CF61D9810C07DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3430303a3a2f34382d3438203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26f4:400::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:29:fd:a9:9f:63:ee:67:43:50:05:54:de:31:ba:6b:9a:9c:
         0a:4f:20:2d:02:49:ef:9e:98:0d:10:96:ed:04:db:48:71:56:
         81:58:a4:f6:0c:38:93:e4:d8:12:7b:d7:31:dc:52:32:e2:58:
         78:d2:86:b8:88:c2:17:8c:eb:ba:63:88:a4:21:b2:69:45:9c:
         d9:c2:13:9c:8b:ac:49:0a:fd:fe:ab:33:3b:2d:8d:43:1e:61:
         98:2e:50:99:a7:87:07:4c:7f:b3:21:df:9c:58:3a:eb:1d:6a:
         55:91:98:a3:89:36:1f:86:96:c0:4a:0e:aa:63:8f:e2:9a:0e:
         0b:c5:88:65:ce:bb:01:36:6b:7f:81:b0:d5:dc:65:9d:8d:64:
         53:f3:a9:36:e4:70:fe:cf:4d:07:d8:62:9c:5f:95:e4:ab:7e:
         e0:62:8e:50:0d:59:c2:ea:cc:8b:16:3f:4a:24:99:6d:3c:a4:
         fe:9f:bc:57:f6:44:29:71:73:e1:82:e1:d5:21:9b:01:85:b7:
         51:e9:80:97:3c:70:62:a0:5b:a5:f9:e4:75:4f:5d:d0:9d:20:
         46:ca:20:c9:30:fb:25:7e:e3:ab:a9:b8:53:b7:c0:81:f1:21:
         5e:c7:3f:ac:15:f9:0d:3a:eb:ad:59:27:cf:ea:1b:ec:99:5f:
         f2:8b:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:53:38 2025 by rpki-client