Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/323830343a353236383a3a2f33322d3438203d3e20323638353136.roa
File:                     323830343a353236383a3a2f33322d3438203d3e20323638353136.roa (raw, json)
Hash identifier:          8QOlSjfuJRl30r06YBWusf/3oPvo5AmKedFn4TThCKY=
Subject key identifier:   9F:CA:9D:6F:62:6C:F3:8F:CD:B1:D1:93:3F:AE:A8:D6:CA:26:88:75
Certificate issuer:       /CN=BC779DF721B6D7336A615134C72893A4896EDE08
Certificate serial:       73F11B6B364A2DD66BC0224A84ADC30B884EE668
Authority key identifier: BC:77:9D:F7:21:B6:D7:33:6A:61:51:34:C7:28:93:A4:89:6E:DE:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/323830343a353236383a3a2f33322d3438203d3e20323638353136.roa
Signing time:             Fri 06 Jun 2025 16:58:12 +0000
ROA not before:           Fri 06 Jun 2025 16:53:12 +0000
ROA not after:            Fri 05 Jun 2026 16:58:12 +0000
asID:                     268516
IP address blocks:        2804:5268::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.crl
                          rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 12:10:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f1:1b:6b:36:4a:2d:d6:6b:c0:22:4a:84:ad:c3:0b:88:4e:e6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC779DF721B6D7336A615134C72893A4896EDE08
        Validity
            Not Before: Jun  6 16:53:12 2025 GMT
            Not After : Jun  5 16:58:12 2026 GMT
        Subject: CN=9FCA9D6F626CF38FCDB1D1933FAEA8D6CA268875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:59:46:0e:9f:85:2f:31:6f:1d:10:24:08:
                    78:7b:c4:18:d7:ed:57:73:fe:03:3a:51:28:a0:40:
                    de:85:1c:4e:73:e3:04:51:f9:6f:5d:95:62:21:2d:
                    12:00:fe:6d:b7:a3:e4:bd:83:42:97:6f:72:04:97:
                    6a:7c:7c:56:6d:8e:f2:87:ef:09:2f:d2:c2:e4:6d:
                    fb:50:95:c8:6b:77:ee:01:fc:41:da:c1:7e:1c:36:
                    56:80:05:f6:80:e2:2b:61:a0:4e:59:9e:30:04:24:
                    49:18:b8:87:56:e4:9d:04:7c:ce:bd:f2:46:19:36:
                    f1:d7:07:24:0a:98:32:64:1e:57:a4:07:54:16:75:
                    de:f4:cc:31:35:c3:67:30:52:c7:94:86:d2:c3:66:
                    95:a7:19:f0:dc:4d:a6:9c:e0:17:ac:b1:77:c8:0c:
                    67:3e:38:33:ef:94:cc:52:a8:6b:94:8a:21:c1:42:
                    0a:74:69:6d:6c:dd:6a:7f:3c:c5:c6:ae:72:3e:46:
                    b0:75:f2:e8:b3:58:9b:71:78:a6:5b:25:5f:71:1f:
                    b2:96:11:42:25:d7:08:b0:79:87:8a:49:38:03:96:
                    6a:83:aa:2d:e9:25:5c:54:34:dd:9f:bc:ba:d0:de:
                    e3:aa:7e:47:4e:76:6e:3f:81:91:02:38:66:d6:12:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CA:9D:6F:62:6C:F3:8F:CD:B1:D1:93:3F:AE:A8:D6:CA:26:88:75
            X509v3 Authority Key Identifier:
                keyid:BC:77:9D:F7:21:B6:D7:33:6A:61:51:34:C7:28:93:A4:89:6E:DE:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/BC779DF721B6D7336A615134C72893A4896EDE08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC779DF721B6D7336A615134C72893A4896EDE08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hGepubiKTY8FpZPgxh3TNvMNFnU5AWjPg4tQLb3QXbH/0/323830343a353236383a3a2f33322d3438203d3e20323638353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5268::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:78:af:fd:85:c0:74:fc:63:41:1a:6d:02:7c:a3:78:a6:e3:
         af:76:d8:b7:56:92:15:ba:f5:9b:c7:09:de:45:c7:98:9b:4c:
         db:44:53:3e:41:f1:b4:e0:42:f5:9c:6b:ec:a6:98:27:05:40:
         ea:25:7b:b3:08:3a:64:53:7a:3e:ae:a8:2b:3c:22:97:38:dc:
         24:6c:b2:65:fd:e6:ff:28:76:36:7e:e7:da:e2:60:7a:c9:de:
         17:32:cd:73:df:86:1c:56:a2:cf:c2:0f:b1:de:2b:d7:8d:72:
         79:e0:db:74:85:c3:26:6b:bd:b0:c8:2b:21:f3:fc:de:eb:c0:
         3c:1e:48:20:1b:9e:6d:4c:c9:f4:cc:19:b7:99:9d:0f:5c:a6:
         39:64:fc:e2:39:c9:ad:96:ee:c3:dd:68:a1:a5:29:dc:8c:46:
         e4:75:55:94:f4:ae:49:31:85:26:cc:be:41:82:d4:3e:9c:be:
         44:09:92:c9:da:3d:4b:91:c1:8b:da:dc:f2:ab:3e:4a:2e:53:
         61:55:9a:51:2a:be:4a:d3:f3:d9:09:84:7a:75:c7:10:15:04:
         33:83:cc:52:2f:3f:6b:c9:4b:0e:14:32:5c:86:2d:b1:c2:f1:
         4b:c5:a0:1e:5d:93:ae:c4:5a:62:67:33:5d:07:e0:a7:fa:fb:
         e0:14:cd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:05:38 2025 by rpki-client