Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa
File:                     323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa (raw, json)
Hash identifier:          8her+PoAT9avPWWQK9qhm9DUMHGf0Ur31Z2fvvlEG+w=
Subject key identifier:   D1:EF:21:86:2A:D2:59:F0:C4:AA:BC:77:86:53:4E:2E:FD:A6:7B:E2
Certificate issuer:       /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial:       6CE55823D43602D22D86E8F27FC261A685E90602
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa
Signing time:             Thu 12 Jun 2025 17:17:44 +0000
ROA not before:           Thu 12 Jun 2025 17:12:44 +0000
ROA not after:            Thu 11 Jun 2026 17:17:44 +0000
asID:                     262978
IP address blocks:        2804:4d44:ada::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
                          rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 23:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e5:58:23:d4:36:02:d2:2d:86:e8:f2:7f:c2:61:a6:85:e9:06:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
        Validity
            Not Before: Jun 12 17:12:44 2025 GMT
            Not After : Jun 11 17:17:44 2026 GMT
        Subject: CN=D1EF21862AD259F0C4AABC7786534E2EFDA67BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:69:f1:da:ad:97:b4:26:38:0f:6d:94:fd:
                    fd:82:8b:ba:f5:f4:7b:95:a8:6e:9a:6c:dc:18:28:
                    6c:32:6c:4f:ec:cb:27:d1:4b:f8:a1:2d:e3:78:0f:
                    7b:82:96:83:1f:0a:41:b7:89:e3:34:81:87:6d:3b:
                    aa:af:f7:c6:92:d3:bf:ef:71:fc:4d:c2:fc:f1:e7:
                    d0:35:aa:12:a3:99:3d:5d:a3:e7:3c:fa:7c:f5:36:
                    cc:bd:ee:00:08:d4:e3:6b:4b:a6:75:32:9a:2b:e3:
                    08:f0:2d:94:b3:5d:fd:9d:4f:25:41:82:ce:1f:e0:
                    5b:c8:70:9e:c0:6a:dd:4c:de:90:49:b6:14:ff:36:
                    de:1b:59:f9:3e:2b:a7:c8:15:bd:f7:1d:a8:46:89:
                    77:2d:d0:93:cb:d0:e3:09:6e:d3:3c:22:87:3b:9f:
                    94:b5:81:f1:29:f1:ac:a1:62:6b:fd:8e:c4:82:cc:
                    76:49:6c:3d:77:24:4e:46:bd:4e:6b:2f:d7:2f:57:
                    d8:30:5e:e1:bb:ce:1e:85:a5:31:b1:f3:87:2f:ad:
                    d3:fc:df:08:f2:ec:48:25:91:0c:c9:4d:1c:e5:69:
                    25:2f:9d:ae:bb:da:1f:bd:4a:ad:e6:c9:4a:79:25:
                    6a:50:11:60:04:e0:aa:c3:f2:6b:00:4c:db:8d:13:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EF:21:86:2A:D2:59:F0:C4:AA:BC:77:86:53:4E:2E:FD:A6:7B:E2
            X509v3 Authority Key Identifier:
                keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/323830343a346434343a6164613a3a2f34382d3438203d3e20323632393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d44:ada::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:42:eb:b7:f6:e6:5d:bf:c5:2b:9c:2c:f3:5a:a3:a4:91:f6:
         02:61:f5:48:4e:80:c1:b2:aa:7f:7e:e5:e2:37:9a:df:36:29:
         c2:f4:86:59:2e:50:94:41:d6:1e:63:85:ce:e2:9d:1e:23:63:
         cb:53:31:8b:0d:c5:9b:3f:1e:d5:29:e5:e3:20:a7:15:05:d0:
         97:11:5d:22:50:33:a6:5e:d6:69:0b:8a:58:57:af:dc:c5:20:
         cf:4c:09:2c:f2:04:68:06:61:7a:b1:e3:a9:01:c1:08:d8:24:
         93:ee:f4:43:31:61:d3:0d:48:01:7d:88:7b:31:ac:2c:9a:19:
         b1:f8:a3:56:b3:42:6e:23:6f:4c:4a:45:f3:64:63:7d:65:df:
         d5:d1:49:f3:42:e5:38:45:0b:5c:6b:b3:78:5e:ef:b3:f5:16:
         83:c1:b9:7b:df:02:d0:42:bf:a8:c9:a4:ab:c0:93:95:f8:23:
         7c:f1:67:50:b7:25:cd:e1:06:67:e6:17:a1:50:1e:dd:b9:8a:
         9f:ab:1e:aa:df:1b:df:71:da:34:7e:cc:7b:f2:af:d4:30:19:
         97:a9:92:02:02:fd:ab:95:f1:90:21:ab:26:9b:ff:e0:2b:c5:
         a1:5c:41:df:97:2d:c1:1f:bf:d6:b1:5d:ad:53:18:27:6e:a0:
         dd:5b:5c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:23:19 2025 by rpki-client