Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/323830343a333530343a3a2f33322d3438203d3e20323635343935.roa
File:                     323830343a333530343a3a2f33322d3438203d3e20323635343935.roa (raw, json)
Hash identifier:          xPit/ZQNECO3/S60A/GMFle/emKlFZOBkLj2OTOFhkE=
Subject key identifier:   09:0A:E0:81:FF:EA:49:D6:DB:B3:BE:82:E9:C6:33:1F:2C:D2:87:EB
Certificate issuer:       /CN=B48FB69D109B757E2D156676A89BE567826A35D5
Certificate serial:       5FD0E49A70904A5A800D79A8D5F74EFFE9D64256
Authority key identifier: B4:8F:B6:9D:10:9B:75:7E:2D:15:66:76:A8:9B:E5:67:82:6A:35:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48FB69D109B757E2D156676A89BE567826A35D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/323830343a333530343a3a2f33322d3438203d3e20323635343935.roa
Signing time:             Thu 05 Jun 2025 00:40:26 +0000
ROA not before:           Thu 05 Jun 2025 00:35:26 +0000
ROA not after:            Thu 04 Jun 2026 00:40:26 +0000
asID:                     265495
IP address blocks:        2804:3504::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/B48FB69D109B757E2D156676A89BE567826A35D5.crl
                          rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/B48FB69D109B757E2D156676A89BE567826A35D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48FB69D109B757E2D156676A89BE567826A35D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 14:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d0:e4:9a:70:90:4a:5a:80:0d:79:a8:d5:f7:4e:ff:e9:d6:42:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48FB69D109B757E2D156676A89BE567826A35D5
        Validity
            Not Before: Jun  5 00:35:26 2025 GMT
            Not After : Jun  4 00:40:26 2026 GMT
        Subject: CN=090AE081FFEA49D6DBB3BE82E9C6331F2CD287EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d9:da:d4:15:d9:83:46:3a:c0:fd:ab:af:a2:
                    49:b2:69:49:72:7b:0b:0b:eb:07:1b:5b:20:59:07:
                    77:1f:95:b1:c7:a9:95:08:cc:e2:7e:fa:fc:9f:57:
                    20:bf:6d:9e:9b:16:4c:fd:64:d1:29:93:a9:92:0b:
                    41:76:f5:9d:7f:eb:29:12:23:65:e3:08:84:d9:3b:
                    e3:1f:16:73:2c:80:18:f3:42:c3:1d:fc:56:94:a7:
                    69:67:ff:ba:f2:d5:b2:29:fe:6e:74:20:fd:88:17:
                    51:74:f5:c8:27:c2:8c:74:52:bb:8f:83:76:03:43:
                    9b:46:a1:74:b5:bd:58:f8:0c:d9:64:7d:9d:e5:1b:
                    f8:b3:9f:61:10:b0:c5:5f:ec:e0:ed:b1:ca:1a:20:
                    71:8a:1d:02:72:77:90:ed:d6:8e:52:90:c4:8c:d9:
                    84:e2:3d:ea:3b:f2:54:12:38:3e:90:cd:ff:20:2c:
                    d0:6a:67:21:44:33:f3:ba:c5:b2:57:58:85:50:ee:
                    51:f4:52:a6:b3:ad:bb:d6:1d:0b:78:48:31:bc:7d:
                    20:f6:cf:78:35:cd:bc:9c:1c:a0:eb:82:0b:7c:41:
                    b4:cf:87:8c:5f:58:88:47:ed:cf:50:eb:e5:74:cb:
                    ca:23:5c:3e:c6:03:1a:3e:d4:2c:5b:22:89:59:ad:
                    7c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0A:E0:81:FF:EA:49:D6:DB:B3:BE:82:E9:C6:33:1F:2C:D2:87:EB
            X509v3 Authority Key Identifier:
                keyid:B4:8F:B6:9D:10:9B:75:7E:2D:15:66:76:A8:9B:E5:67:82:6A:35:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/B48FB69D109B757E2D156676A89BE567826A35D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48FB69D109B757E2D156676A89BE567826A35D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZhDRDQGaeu7Ge1UqVGNAeYFjZWA3MDaAiSfK46GHFH9/1/323830343a333530343a3a2f33322d3438203d3e20323635343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3504::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:b1:50:db:6e:d6:ef:f1:77:5d:7c:18:d2:c9:4a:24:58:72:
         7c:a2:c4:23:0a:8b:3f:66:fa:0a:02:80:42:3f:29:ca:de:05:
         53:3e:dc:c8:9e:f3:c2:18:52:15:d0:1b:66:8c:f1:fa:c4:c7:
         a3:2c:68:9f:e7:2d:f3:64:78:a0:3f:d7:b9:f1:3a:48:d1:6e:
         1e:9e:a0:f2:a7:b9:4d:b8:c9:41:5b:90:49:5b:28:6d:9d:92:
         99:ba:99:27:12:c8:3a:cf:ac:9b:85:a1:8d:96:e0:c4:8a:c4:
         2d:57:37:4b:ca:5d:29:1e:91:b7:b4:c6:ad:cf:3f:f2:38:a6:
         08:63:56:76:7f:66:cb:22:11:29:d6:53:3e:fe:4d:98:a5:50:
         00:9f:27:8c:21:d8:64:9e:a7:b9:52:58:e7:16:1c:ba:49:94:
         f4:fc:88:63:ac:03:6f:cb:11:3e:64:4f:46:5a:6d:99:4b:77:
         52:a0:7b:6c:c3:4c:49:ec:94:52:59:cf:66:4f:ec:f1:fc:d6:
         a6:be:84:4b:98:98:81:d3:be:d7:b5:85:f8:05:34:27:20:16:
         b1:b1:04:c9:52:46:41:78:f7:e8:0f:64:ad:09:f4:04:e1:40:
         63:ba:ba:bb:41:ed:54:9a:1f:77:c1:c8:49:0e:f2:23:30:e1:
         eb:5a:96:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:20:00 2025 by rpki-client