Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3332203d3e20323637343639.roa
File:                     323830343a343166383a3a2f33322d3332203d3e20323637343639.roa (raw, json)
Hash identifier:          oZpBT6UGDa+rZyK+8JP+r3vxbjAo2uGOWOoOl8EiNIs=
Subject key identifier:   F2:02:9A:DE:21:17:58:E7:4A:32:1B:D9:DD:86:14:01:C1:C7:EE:34
Certificate issuer:       /CN=1EC4A5745561FAC5CF8B803011305131CF20490C
Certificate serial:       6FAC1F5E63337D2B56E1117E6E4AEC3BFE93897E
Authority key identifier: 1E:C4:A5:74:55:61:FA:C5:CF:8B:80:30:11:30:51:31:CF:20:49:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC4A5745561FAC5CF8B803011305131CF20490C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3332203d3e20323637343639.roa
Signing time:             Fri 27 Jun 2025 19:59:15 +0000
ROA not before:           Fri 27 Jun 2025 19:54:15 +0000
ROA not after:            Fri 26 Jun 2026 19:59:15 +0000
asID:                     267469
IP address blocks:        2804:41f8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/1EC4A5745561FAC5CF8B803011305131CF20490C.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/1EC4A5745561FAC5CF8B803011305131CF20490C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC4A5745561FAC5CF8B803011305131CF20490C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 08:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ac:1f:5e:63:33:7d:2b:56:e1:11:7e:6e:4a:ec:3b:fe:93:89:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC4A5745561FAC5CF8B803011305131CF20490C
        Validity
            Not Before: Jun 27 19:54:15 2025 GMT
            Not After : Jun 26 19:59:15 2026 GMT
        Subject: CN=F2029ADE211758E74A321BD9DD861401C1C7EE34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ec:71:31:98:a9:65:78:f1:8d:60:3d:03:24:
                    62:11:7d:47:11:16:62:f2:91:2c:9d:da:05:72:0b:
                    cd:0d:79:d1:c3:33:99:fe:29:af:c6:0f:ca:fc:7d:
                    aa:b0:c7:d0:61:9c:a9:c5:dd:d1:9c:ef:07:08:14:
                    37:92:7d:c0:bd:f3:ba:12:5e:37:73:d4:6c:3e:0e:
                    9e:af:e1:a2:07:25:59:4c:ba:29:bd:0e:44:37:2e:
                    89:e9:0f:0d:8c:62:b1:a8:48:59:61:96:be:56:2b:
                    05:90:b2:64:47:f7:9b:6b:ec:9f:8d:ce:f2:9b:02:
                    d2:05:bc:bb:ac:f8:dc:22:2d:f8:19:b8:a3:92:75:
                    ea:54:d7:ae:c8:21:30:26:a7:a7:32:61:18:7b:09:
                    c0:4e:84:cf:26:ce:74:e1:06:90:6d:39:5e:20:03:
                    60:fe:c2:34:54:13:41:ee:0f:a7:aa:50:f1:a6:96:
                    07:05:ba:07:1f:89:02:a1:83:0b:0b:11:fc:c3:a9:
                    fb:c6:1b:cf:2e:89:97:65:b4:1b:94:61:a7:4b:10:
                    d7:25:fd:47:94:52:bc:ee:e3:73:36:23:95:54:40:
                    30:63:87:a5:15:0f:17:45:2d:cb:6a:75:f9:79:9b:
                    d1:67:ca:a5:49:bb:89:0e:eb:4c:ba:37:cb:cf:d6:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:02:9A:DE:21:17:58:E7:4A:32:1B:D9:DD:86:14:01:C1:C7:EE:34
            X509v3 Authority Key Identifier:
                keyid:1E:C4:A5:74:55:61:FA:C5:CF:8B:80:30:11:30:51:31:CF:20:49:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/1EC4A5745561FAC5CF8B803011305131CF20490C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC4A5745561FAC5CF8B803011305131CF20490C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a3a2f33322d3332203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:bc:60:47:38:31:8e:2e:6d:ba:78:12:6d:8e:7c:1f:89:bf:
         d9:84:e1:b6:6e:ee:52:28:2c:16:62:7a:b3:5c:57:c9:2f:da:
         33:c5:9b:85:79:f2:2c:32:23:4a:80:f8:78:be:b9:a2:2e:95:
         d0:b0:31:35:49:62:ad:83:c4:c3:8d:45:97:fc:e8:de:07:be:
         92:b6:26:dd:45:2f:35:b5:c9:89:b7:57:12:6f:d3:89:4b:5b:
         91:6c:4a:38:07:08:61:a9:35:41:22:15:2e:0b:1e:21:82:7f:
         16:9e:31:43:c2:06:f4:93:1d:77:5f:ce:3c:e2:30:4b:b1:d5:
         52:af:3c:d7:04:7c:f8:26:ac:2f:50:6a:d0:a3:62:be:33:b2:
         74:bd:b2:cb:9d:04:61:81:b6:c6:01:f4:c4:45:88:14:12:13:
         b3:fc:e9:3f:fc:bd:5c:6e:ee:3d:94:08:67:2c:88:98:0c:ad:
         3b:46:c7:f6:bc:85:ee:c8:33:55:21:70:b0:90:2f:87:f3:10:
         32:86:26:57:d7:06:61:03:09:e4:20:ca:d9:f7:f8:4b:13:e6:
         25:fa:4c:49:a2:70:4a:c3:85:92:10:54:6e:31:74:d0:aa:b5:
         90:79:69:de:f4:4a:c3:69:07:f3:73:d4:6c:86:70:76:b8:b2:
         73:45:30:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:03:00 2025 by rpki-client