Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/323830343a383165303a3a2f33322d3438203d3e20323732343833.roa
File:                     323830343a383165303a3a2f33322d3438203d3e20323732343833.roa (raw, json)
Hash identifier:          gGpb7QOWhrxLz+03Ox3Po1Me5Z0eXwZv1Sn7CGLLb4c=
Subject key identifier:   73:F5:A9:ED:D0:74:20:5B:C0:5F:28:71:83:7F:80:7F:00:5F:56:37
Certificate issuer:       /CN=5725DFB2DC2786E4FC56BA0C11567032EA389E2B
Certificate serial:       750F562AAD14C3E7A7FC8577BEC16D4ABA24048F
Authority key identifier: 57:25:DF:B2:DC:27:86:E4:FC:56:BA:0C:11:56:70:32:EA:38:9E:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/323830343a383165303a3a2f33322d3438203d3e20323732343833.roa
Signing time:             Fri 27 Jun 2025 14:59:10 +0000
ROA not before:           Fri 27 Jun 2025 14:54:10 +0000
ROA not after:            Fri 26 Jun 2026 14:59:10 +0000
asID:                     272483
IP address blocks:        2804:81e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl
                          rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 18:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0f:56:2a:ad:14:c3:e7:a7:fc:85:77:be:c1:6d:4a:ba:24:04:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5725DFB2DC2786E4FC56BA0C11567032EA389E2B
        Validity
            Not Before: Jun 27 14:54:10 2025 GMT
            Not After : Jun 26 14:59:10 2026 GMT
        Subject: CN=73F5A9EDD074205BC05F2871837F807F005F5637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:c3:dd:ab:0a:75:d5:41:df:cb:a5:ba:a1:
                    93:78:f7:2b:d6:a5:6c:12:54:e1:5f:ed:5c:09:66:
                    73:81:60:2f:b0:ef:74:e5:26:e0:bf:c0:81:c3:7a:
                    dc:81:88:71:8a:30:ab:09:83:3b:b8:11:64:0f:df:
                    10:97:f2:24:7f:44:c4:5f:6e:1c:15:02:41:60:83:
                    bb:3f:93:fc:2b:c3:f8:65:4b:c5:8d:d1:45:5e:e6:
                    d6:be:8f:98:52:21:05:2d:e9:3f:33:fd:10:da:1c:
                    bb:35:84:6c:d8:3e:99:68:1c:a5:58:cf:7e:be:f5:
                    f8:fb:d8:2d:48:dc:24:7a:0e:ec:66:0a:83:a6:a4:
                    75:3f:cd:36:3a:57:e9:c7:e0:33:b5:7c:07:3c:a5:
                    89:c4:4c:5b:bd:96:56:72:ef:2a:fc:2e:57:01:57:
                    eb:29:e7:ed:81:35:4a:b6:79:90:fb:12:4d:86:dd:
                    0f:74:6e:df:37:b6:9b:87:3d:6e:a1:d4:0f:7b:7e:
                    7b:08:25:a7:8f:5c:e2:75:74:27:a8:a0:e3:7f:2f:
                    0f:ae:7e:b5:84:60:9a:b7:69:fe:8e:36:59:24:87:
                    a2:50:2f:25:ee:e0:c8:fc:a0:95:06:82:38:a3:75:
                    38:60:7f:59:4f:04:bf:0a:81:28:48:c2:eb:f6:21:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F5:A9:ED:D0:74:20:5B:C0:5F:28:71:83:7F:80:7F:00:5F:56:37
            X509v3 Authority Key Identifier:
                keyid:57:25:DF:B2:DC:27:86:E4:FC:56:BA:0C:11:56:70:32:EA:38:9E:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5725DFB2DC2786E4FC56BA0C11567032EA389E2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4zYTqwbHakC5AZtfPbq6mEuHuQVuNZFvv77UaaF5EzTR/0/323830343a383165303a3a2f33322d3438203d3e20323732343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:81e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         e1:0d:b2:2e:34:71:bd:2e:cd:39:06:6f:e6:e7:18:08:d0:1e:
         60:b9:aa:3c:c5:e0:08:44:c5:ed:7f:1b:0c:0c:f6:d1:37:88:
         4c:a5:20:88:05:ad:8a:7f:86:b4:dd:dd:f7:a0:9e:ce:c7:ad:
         64:6d:02:03:cd:66:88:fd:9d:0d:f9:6a:f1:bb:c9:76:63:80:
         1b:4e:02:e9:32:55:ea:c6:47:29:1b:a8:59:ed:1c:35:36:19:
         42:2d:0e:08:3b:f7:eb:d1:05:be:94:26:53:64:63:56:0e:81:
         9c:b6:86:39:89:26:c4:b0:a1:2d:11:d6:2d:39:8f:31:dc:bc:
         95:15:5d:32:53:ed:22:51:bd:74:73:2f:25:ed:7d:61:0c:0b:
         e0:48:5c:3c:c2:2e:e8:b9:86:01:5d:37:57:19:f3:16:f0:51:
         58:9a:64:bd:a1:98:fd:26:56:48:4c:3e:7f:ed:f0:54:1e:61:
         bb:8d:53:c4:90:8a:dc:1c:c2:57:77:f4:13:28:63:1d:02:76:
         fa:32:61:6e:71:5d:67:bc:1f:da:7b:06:5d:df:3f:0a:1e:31:
         e4:8f:da:ad:f2:95:36:ab:0d:ba:25:a0:45:2e:40:28:56:5b:
         93:e3:c5:c4:59:84:a9:4b:b4:13:08:51:38:61:05:fc:63:6d:
         42:1e:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:38:41 2025 by rpki-client