Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a3a2f33342d3334203d3e20323632383033.roa
File:                     323830343a3235303a3a2f33342d3334203d3e20323632383033.roa (raw, json)
Hash identifier:          TWu5dg3yZEcurrrUdeXbB+CK7jpFCX3MSRv+rqxxb/Q=
Subject key identifier:   B5:B2:9C:B8:4E:DD:76:7D:6C:CD:5A:9C:F6:12:37:B4:7E:62:F9:20
Certificate issuer:       /CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
Certificate serial:       47902F80683CCAD58DEDE0FBEFF0D436074349F6
Authority key identifier: 6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a3a2f33342d3334203d3e20323632383033.roa
Signing time:             Wed 18 Jun 2025 14:26:23 +0000
ROA not before:           Wed 18 Jun 2025 14:21:23 +0000
ROA not after:            Wed 17 Jun 2026 14:26:23 +0000
asID:                     262803
IP address blocks:        2804:250::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl
                          rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 05:38:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:90:2f:80:68:3c:ca:d5:8d:ed:e0:fb:ef:f0:d4:36:07:43:49:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D48F047E612BDC947C9747FC9B62D281F0796A4
        Validity
            Not Before: Jun 18 14:21:23 2025 GMT
            Not After : Jun 17 14:26:23 2026 GMT
        Subject: CN=B5B29CB84EDD767D6CCD5A9CF61237B47E62F920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:c6:f6:3e:95:29:85:66:0d:40:ed:59:16:
                    21:af:c8:7c:3d:75:c2:93:84:d6:bd:c6:d5:91:dc:
                    5c:d0:02:b8:fa:55:5c:f3:4e:11:01:2c:52:16:85:
                    36:41:b2:61:48:f5:f3:8c:03:57:bb:1f:34:f4:be:
                    a3:d3:a2:0a:92:0d:84:18:92:e7:82:a5:30:04:f9:
                    0b:40:56:5b:1b:31:57:73:48:ea:b8:97:10:9d:c0:
                    ae:63:1f:b8:56:e3:1f:b6:6d:7a:5d:01:0d:e9:d0:
                    20:55:29:fe:9e:e5:99:b6:34:32:45:83:7c:58:7f:
                    2d:8b:83:c6:a4:f7:e7:c2:76:e6:81:ef:92:93:1f:
                    1a:f6:72:b4:78:4a:d6:95:0e:e7:31:93:9a:85:8c:
                    a1:69:e3:76:9c:a8:c2:1a:4d:d1:d4:ec:be:4c:82:
                    2a:85:dd:d4:78:f1:f8:23:2e:56:59:a3:9e:6d:21:
                    80:9b:a5:2b:50:aa:a1:48:25:b7:94:94:22:50:13:
                    49:f5:4e:78:e2:4c:57:62:9b:64:ff:76:1a:ae:0f:
                    3d:12:3f:3b:f3:9d:3a:c1:bf:92:d5:c8:9e:c6:2d:
                    b3:3d:c1:44:5e:b5:ee:a2:66:97:69:c4:f2:6e:3f:
                    bf:01:b0:62:37:25:f0:c0:16:90:c0:e3:00:ce:c5:
                    0a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B2:9C:B8:4E:DD:76:7D:6C:CD:5A:9C:F6:12:37:B4:7E:62:F9:20
            X509v3 Authority Key Identifier:
                keyid:6D:48:F0:47:E6:12:BD:C9:47:C9:74:7F:C9:B6:2D:28:1F:07:96:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/6D48F047E612BDC947C9747FC9B62D281F0796A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D48F047E612BDC947C9747FC9B62D281F0796A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3adakgPdgmE7N8LZtEjBNphfmsqipjgeuSn1dNsGPjPJ/0/323830343a3235303a3a2f33342d3334203d3e20323632383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:250::/34

    Signature Algorithm: sha256WithRSAEncryption
         21:56:67:12:6d:8b:03:f7:1c:83:00:fe:2c:58:c2:0b:74:6a:
         8d:06:de:ba:d6:e2:52:99:bb:bd:2e:b5:71:68:8e:dd:cc:45:
         8c:fd:eb:aa:c3:0a:3c:73:a3:31:8d:31:78:19:fc:85:80:09:
         6b:7b:8d:fc:9b:27:72:9b:43:0a:b0:b2:6d:80:6f:39:2d:78:
         80:d1:12:42:2a:31:5a:14:c4:7e:52:e2:85:64:cc:f7:87:ac:
         fb:17:ee:e1:a9:91:39:4a:86:7b:fd:0e:1f:95:1f:d3:9f:f3:
         c1:21:41:05:33:7e:84:c8:38:56:7c:d0:60:b3:5e:e6:99:0b:
         24:e6:9a:28:eb:80:c4:61:fe:94:d8:61:1e:b6:a5:d5:6d:cd:
         62:0a:d7:c4:d5:e6:e5:d4:62:99:66:34:8d:05:59:3e:c8:3f:
         01:6b:b6:36:d5:d6:81:80:23:a3:bb:08:55:05:a0:97:27:ed:
         d8:a0:93:63:42:85:05:0b:73:35:3b:43:be:9d:da:f9:9f:45:
         c4:07:89:b8:4f:39:d5:f5:f9:0c:80:3d:c9:4c:7c:c6:77:ec:
         9d:ef:ca:43:ee:16:50:06:19:53:76:5a:dd:13:2d:16:47:8b:
         22:d4:76:49:ef:98:81:ef:7f:da:94:22:65:4e:1e:4e:ac:10:
         f9:cd:74:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:35:20 2025 by rpki-client