Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa
File:                     323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa (raw, json)
Hash identifier:          otq5PhBQqkT30qfj543CQsaFGD99/aCO6F25Vi4A5HA=
Subject key identifier:   72:59:2F:DD:C5:FD:BC:F4:6B:FD:A4:A9:55:75:A3:17:06:13:52:25
Certificate issuer:       /CN=1EC4A5745561FAC5CF8B803011305131CF20490C
Certificate serial:       7BD38F58684DA89D44F208C50D892ACF3D9AE223
Authority key identifier: 1E:C4:A5:74:55:61:FA:C5:CF:8B:80:30:11:30:51:31:CF:20:49:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC4A5745561FAC5CF8B803011305131CF20490C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa
Signing time:             Fri 27 Jun 2025 19:59:36 +0000
ROA not before:           Fri 27 Jun 2025 19:54:36 +0000
ROA not after:            Fri 26 Jun 2026 19:59:36 +0000
asID:                     267469
IP address blocks:        2804:41f8:f310::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/1EC4A5745561FAC5CF8B803011305131CF20490C.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/1EC4A5745561FAC5CF8B803011305131CF20490C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC4A5745561FAC5CF8B803011305131CF20490C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 02 Jul 2025 15:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d3:8f:58:68:4d:a8:9d:44:f2:08:c5:0d:89:2a:cf:3d:9a:e2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC4A5745561FAC5CF8B803011305131CF20490C
        Validity
            Not Before: Jun 27 19:54:36 2025 GMT
            Not After : Jun 26 19:59:36 2026 GMT
        Subject: CN=72592FDDC5FDBCF46BFDA4A95575A31706135225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f7:cf:f7:e9:c0:6a:a0:86:c4:0b:c6:bf:ff:
                    3e:40:7d:3b:a3:32:6e:6c:22:ba:35:68:5a:da:1f:
                    dc:4d:8f:e4:60:a2:5f:92:a8:58:60:ea:d7:c7:f0:
                    20:da:30:c6:68:dd:59:2f:18:56:f3:17:f4:01:50:
                    31:29:f5:ee:94:a3:ba:0c:b7:37:5f:fd:77:d8:33:
                    d7:40:85:34:29:ea:b5:66:49:8e:2b:4d:4b:6b:88:
                    66:dd:6f:56:6f:48:95:dc:a1:91:86:aa:14:71:7f:
                    93:8c:14:96:5b:27:b4:34:ce:6a:30:43:12:a0:d9:
                    fc:fa:a0:80:d2:e7:05:bb:62:67:84:64:1a:78:b2:
                    8d:44:47:f8:4c:2c:69:f9:84:56:ad:47:3c:dd:95:
                    0d:a3:65:95:b8:2f:17:7b:7c:a6:4d:b2:93:9a:91:
                    13:80:7a:f0:79:37:f2:1c:39:2a:73:80:a2:20:68:
                    92:cc:96:1c:36:7d:1f:eb:85:9b:84:fb:13:e4:27:
                    a3:a3:29:a6:ee:3a:42:c7:01:67:20:0d:7a:04:9d:
                    73:af:2c:c6:66:a9:09:42:a6:fa:72:f0:29:e5:54:
                    eb:5b:fb:6f:33:21:d6:62:77:2d:5e:ec:92:5c:7b:
                    b1:99:42:2f:58:b1:0f:ab:74:17:60:80:2f:ae:99:
                    73:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:59:2F:DD:C5:FD:BC:F4:6B:FD:A4:A9:55:75:A3:17:06:13:52:25
            X509v3 Authority Key Identifier:
                keyid:1E:C4:A5:74:55:61:FA:C5:CF:8B:80:30:11:30:51:31:CF:20:49:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/1EC4A5745561FAC5CF8B803011305131CF20490C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC4A5745561FAC5CF8B803011305131CF20490C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663331303a3a2f34342d3434203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41f8:f310::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:dd:95:45:3c:69:ed:ad:2d:c2:e6:9e:0c:e3:b9:c5:3d:82:
         16:9b:ca:93:a1:3a:94:fe:d6:ac:c1:02:d4:2d:91:5f:a0:48:
         72:48:36:b6:65:a0:7e:ba:12:f3:2c:57:13:6b:63:bc:2f:5c:
         51:25:a1:c0:f2:e1:65:4d:d0:18:7b:e3:10:ad:30:40:5d:78:
         e4:0e:d3:9a:cf:d2:ac:46:0c:40:74:8b:5a:b3:38:37:d2:45:
         b3:08:c7:a5:05:bf:06:f7:b1:a9:1c:3f:b9:a9:12:9b:bc:80:
         60:a9:f1:e0:e1:dc:86:a6:65:27:cc:ca:2d:3a:bf:6a:fc:c6:
         53:d1:9e:15:10:35:b0:97:78:54:6a:c7:56:ed:e5:a9:6a:10:
         ba:3c:97:69:06:c3:07:d2:76:c2:0f:6f:f1:f3:8f:79:2a:28:
         8a:7e:52:b2:37:8c:4d:10:d0:b6:4c:21:23:d6:61:fc:cb:6b:
         22:da:1a:e5:cc:bc:74:36:88:f2:2b:f3:e7:39:fc:99:10:90:
         64:c6:cb:02:32:5f:cf:77:e5:39:9d:96:2b:58:7f:0f:63:f8:
         c6:8c:d7:0b:45:ad:b6:44:17:a3:b5:d9:55:f0:6b:f5:05:56:
         e0:ee:d2:45:9e:fd:ce:66:c2:cf:f6:24:4b:3a:9b:72:e4:b1:
         68:12:00:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:18:01 2025 by rpki-client