Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/323830343a346332383a3a2f33322d3438203d3e20323637333533.roa
File:                     323830343a346332383a3a2f33322d3438203d3e20323637333533.roa (raw, json)
Hash identifier:          bmT09xDutoa9PvJahu2aOyeKWMXErbCwcThQLbnkXm0=
Subject key identifier:   B8:4D:43:FE:92:73:51:9C:7D:ED:FF:98:08:79:98:69:4E:22:5E:A3
Certificate issuer:       /CN=04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87
Certificate serial:       59079E29D6D002B6FF27343563167E44702FEF5E
Authority key identifier: 04:82:1F:F7:3B:C7:A0:F4:56:82:3C:5D:FE:BD:A8:BB:8C:25:EB:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/323830343a346332383a3a2f33322d3438203d3e20323637333533.roa
Signing time:             Thu 12 Jun 2025 20:00:36 +0000
ROA not before:           Thu 12 Jun 2025 19:55:36 +0000
ROA not after:            Thu 11 Jun 2026 20:00:36 +0000
asID:                     267353
IP address blocks:        2804:4c28::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.crl
                          rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 07:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:07:9e:29:d6:d0:02:b6:ff:27:34:35:63:16:7e:44:70:2f:ef:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87
        Validity
            Not Before: Jun 12 19:55:36 2025 GMT
            Not After : Jun 11 20:00:36 2026 GMT
        Subject: CN=B84D43FE9273519C7DEDFF98087998694E225EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:28:16:6a:3c:64:53:ff:ae:13:48:d8:1d:56:
                    d0:99:e6:61:d2:ac:16:54:76:fc:42:ef:35:aa:5b:
                    85:0a:0a:b7:76:9c:31:ed:f8:5a:07:1c:11:bf:26:
                    9b:4c:05:0e:f8:c3:a6:d4:6c:be:16:64:6a:9f:36:
                    79:e3:c9:ae:38:8e:6e:58:02:4f:31:b4:c9:aa:01:
                    06:2e:a2:5a:75:4d:87:ea:06:91:07:79:80:f1:f0:
                    1d:fe:54:97:69:19:22:e8:0d:06:ff:8d:82:6c:44:
                    b2:47:c0:6f:5a:de:c0:8b:7e:da:80:aa:f9:d1:8b:
                    f6:c6:d3:89:62:22:d0:69:61:2f:ac:35:80:25:ce:
                    d2:11:bf:e4:76:a4:7e:df:1d:33:b0:c2:4a:9e:42:
                    50:00:6f:d6:2f:5a:ac:e2:d8:23:1c:ea:44:12:81:
                    ce:0c:a0:54:af:6c:bb:07:bc:bf:f8:ae:58:26:6e:
                    ed:8c:cb:09:2d:d6:7d:5d:4b:97:ce:9b:71:bd:b2:
                    ed:f7:be:ac:76:bf:d7:be:e1:44:d8:3b:f8:72:92:
                    a3:89:23:a1:5f:1a:af:33:1e:a0:90:87:96:68:95:
                    d1:19:88:14:f8:f3:9a:31:8a:43:f0:39:82:e8:cc:
                    60:6b:6e:8b:4f:03:91:36:ae:8d:37:6c:7b:9e:06:
                    52:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4D:43:FE:92:73:51:9C:7D:ED:FF:98:08:79:98:69:4E:22:5E:A3
            X509v3 Authority Key Identifier:
                keyid:04:82:1F:F7:3B:C7:A0:F4:56:82:3C:5D:FE:BD:A8:BB:8C:25:EB:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04821FF73BC7A0F456823C5DFEBDA8BB8C25EB87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pzm7LR9aaQbzF5YXtHawvaSnbDfXuhaw9QELutsvc9E/0/323830343a346332383a3a2f33322d3438203d3e20323637333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c28::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:66:16:06:40:ad:0b:34:fc:95:a9:55:c2:a7:fd:79:97:ed:
         3a:1c:83:f5:c3:ae:3d:30:64:af:96:29:cc:c0:76:70:b2:e2:
         ac:e4:8a:96:fe:1c:b9:8a:1b:c1:61:44:51:be:8c:a4:0a:e6:
         6f:5d:8b:fe:65:2c:32:17:60:97:ff:a9:b1:20:46:6f:61:01:
         ac:89:ae:5d:cd:9e:95:43:f3:8f:24:69:74:48:2f:1f:97:13:
         87:2b:e7:d2:ad:9c:aa:04:f7:ce:00:eb:0f:8b:fd:71:85:79:
         fa:63:2d:29:70:3f:33:f1:01:0d:9f:d3:7a:25:aa:7b:82:17:
         c8:68:ab:20:6a:13:b4:87:95:85:76:0b:31:bc:87:a8:38:1e:
         48:26:84:8f:9f:1c:b5:1a:61:20:3c:ca:9e:63:0b:5f:e6:03:
         1e:f1:80:f9:30:25:53:5a:be:81:ab:9f:07:3d:94:76:27:24:
         5d:27:b7:78:d9:c8:71:2a:82:51:8f:51:bd:57:45:70:8d:80:
         e1:c8:9c:e7:c8:76:c4:e2:02:3e:8f:07:b6:1d:b4:f2:5e:30:
         02:b6:2a:bb:34:b0:2b:fb:f5:2a:ec:d5:6c:27:e2:2b:f4:ec:
         c2:e4:bd:f5:11:92:ab:d5:ce:aa:0d:da:ac:66:33:57:eb:76:
         5d:dd:ef:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:58:39 2025 by rpki-client