Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a633030303a3a2f33342d3334203d3e20323636393137.roa
File:                     323830343a343534633a633030303a3a2f33342d3334203d3e20323636393137.roa (raw, json)
Hash identifier:          YkGv8h06NAlIxqEkBEG7bNJiddupFODDS57PDI0Yeno=
Subject key identifier:   4B:3B:A8:51:5C:FE:B7:1D:1D:38:F8:44:6C:C4:E8:67:09:2F:4A:39
Certificate issuer:       /CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
Certificate serial:       6C5E5E574B1801C567B628F57C71430C3D17D7ED
Authority key identifier: D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a633030303a3a2f33342d3334203d3e20323636393137.roa
Signing time:             Tue 08 Jul 2025 15:39:46 +0000
ROA not before:           Tue 08 Jul 2025 15:34:46 +0000
ROA not after:            Tue 07 Jul 2026 15:39:46 +0000
asID:                     266917
IP address blocks:        2804:454c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl
                          rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 12:42:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5e:5e:57:4b:18:01:c5:67:b6:28:f5:7c:71:43:0c:3d:17:d7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2F572ACB12354BDA22E38D3A999DE5A4EE48792
        Validity
            Not Before: Jul  8 15:34:46 2025 GMT
            Not After : Jul  7 15:39:46 2026 GMT
        Subject: CN=4B3BA8515CFEB71D1D38F8446CC4E867092F4A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:72:3b:3c:81:11:e3:c0:b6:51:af:df:03:
                    03:a4:0e:cb:b8:33:e4:31:b0:d7:a8:99:38:2f:71:
                    28:e3:70:3b:29:11:b0:2a:ba:6d:ef:59:4c:51:66:
                    77:26:20:ca:d9:81:5a:65:1a:f5:69:37:82:0c:71:
                    36:86:4d:8e:35:19:3e:21:35:f3:48:aa:2c:35:f3:
                    61:4c:66:91:24:b3:4c:01:e5:72:d1:66:28:fc:6c:
                    c3:12:4b:35:06:d6:29:3c:47:9c:3d:c6:48:b2:b0:
                    78:34:5d:b0:85:59:02:bb:e6:a1:f8:25:a3:c2:8a:
                    6f:d4:60:de:26:95:e4:f6:d4:a1:97:ac:91:36:79:
                    b2:f0:b5:be:f6:bd:64:6e:a2:51:1b:98:6c:6f:59:
                    dd:96:ad:01:bb:88:36:05:8f:4a:a3:da:84:ae:56:
                    2e:d2:25:4c:56:9b:93:c4:05:3b:7e:3c:57:09:79:
                    ee:c4:64:dd:7f:aa:a3:51:9d:3f:95:b6:cc:b9:51:
                    56:46:a5:f0:c8:e4:99:86:fe:87:69:a7:f8:3a:4e:
                    34:c8:a7:dd:fa:eb:3c:35:83:37:d4:77:d0:42:f1:
                    c1:8e:20:b6:40:f2:a7:9a:0a:d4:3f:af:9f:5f:b5:
                    bd:a0:d1:8c:5a:03:f9:08:c5:a0:7b:57:09:1c:cc:
                    2e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3B:A8:51:5C:FE:B7:1D:1D:38:F8:44:6C:C4:E8:67:09:2F:4A:39
            X509v3 Authority Key Identifier:
                keyid:D2:F5:72:AC:B1:23:54:BD:A2:2E:38:D3:A9:99:DE:5A:4E:E4:87:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2F572ACB12354BDA22E38D3A999DE5A4EE48792.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/323830343a343534633a633030303a3a2f33342d3334203d3e20323636393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:454c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         31:89:00:df:4e:9e:db:ee:10:71:3d:db:dd:b3:58:d2:6d:cf:
         d5:fd:d2:b8:c3:3a:cb:a4:11:9c:51:73:40:46:11:8b:d8:2c:
         70:fc:ca:dc:b1:a2:7c:d6:8a:d4:01:e5:b7:f3:18:ad:8a:83:
         d3:8d:fb:82:f5:a6:6b:15:f7:20:9f:25:85:ff:e8:f3:ee:91:
         76:fa:14:4f:d9:0d:9a:dd:6b:97:cf:d3:8b:60:eb:58:d3:95:
         76:c0:50:20:19:bd:b9:b6:f6:16:2e:15:88:1b:75:44:cc:45:
         b4:15:c1:8d:e2:4b:d2:a2:33:be:2d:c2:18:01:ed:5d:5b:08:
         81:06:98:0f:b0:a1:11:b4:4d:d1:e2:f6:5c:e2:e4:2e:18:db:
         fd:92:c8:db:5f:49:69:04:95:02:60:35:6f:16:e6:78:4a:67:
         84:09:fd:db:38:e8:03:f9:62:67:2b:54:f3:ed:37:7d:ee:2d:
         cf:17:14:e3:1b:f5:2f:56:18:c0:78:ca:5c:ae:43:a6:98:fd:
         05:fd:4a:33:85:ab:7b:93:9f:78:1e:00:43:ae:c7:ac:df:0d:
         22:a2:3c:98:78:d1:d7:ea:80:e2:e8:81:40:b5:80:74:54:01:
         39:7a:1f:55:bb:30:a7:bc:4b:2c:30:4f:7d:20:67:d0:9e:27:
         64:46:78:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:34:57 2025 by rpki-client