Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a383030303a3a2f33342d3334203d3e20323730343039.roa
File:                     323830343a366239343a383030303a3a2f33342d3334203d3e20323730343039.roa (raw, json)
Hash identifier:          OdA49Uw33eTOBeUItn5tq0LkmyZD45bJzCWEJfz2ZtE=
Subject key identifier:   CB:1E:50:55:25:C8:BC:23:C0:3A:9C:51:2D:05:35:0C:D4:95:8D:59
Certificate issuer:       /CN=11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4
Certificate serial:       64A3511C8C243C22CD04B90F0E21164F87E94886
Authority key identifier: 11:FE:E7:71:12:2E:6B:8B:AB:9E:5B:C2:56:6A:C9:18:DC:99:FA:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a383030303a3a2f33342d3334203d3e20323730343039.roa
Signing time:             Mon 16 Jun 2025 17:06:57 +0000
ROA not before:           Mon 16 Jun 2025 17:01:57 +0000
ROA not after:            Mon 15 Jun 2026 17:06:57 +0000
asID:                     270409
IP address blocks:        2804:6b94:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.crl
                          rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 00:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a3:51:1c:8c:24:3c:22:cd:04:b9:0f:0e:21:16:4f:87:e9:48:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4
        Validity
            Not Before: Jun 16 17:01:57 2025 GMT
            Not After : Jun 15 17:06:57 2026 GMT
        Subject: CN=CB1E505525C8BC23C03A9C512D05350CD4958D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:5e:81:ee:b0:52:81:58:4c:15:1c:ff:20:
                    a5:55:6e:98:1b:3b:a1:92:52:52:e6:ac:19:c9:ba:
                    d4:5f:d3:4a:5d:21:8b:83:1f:a5:96:ca:44:eb:1a:
                    4b:bc:31:a9:36:35:f5:21:bc:07:ad:90:5d:a0:51:
                    2e:85:f2:6a:e9:e2:f4:aa:ea:04:38:6e:a8:f4:44:
                    b1:b0:c3:4a:65:a9:44:3f:96:dc:b4:af:86:6d:aa:
                    d9:ef:1c:74:d1:1d:28:3d:bf:fa:53:e1:5b:1f:88:
                    93:91:69:3f:30:2e:40:7b:b4:76:c7:e4:16:b4:36:
                    fd:c5:b9:e0:4f:ce:66:44:46:f7:38:fd:b9:ed:29:
                    46:15:3a:c8:33:34:e2:8f:d2:96:da:0b:e4:e5:7e:
                    81:d4:2d:54:a3:eb:18:d8:7d:6a:5f:67:de:6b:27:
                    8a:86:cd:28:c1:fb:9e:69:9a:06:26:d1:44:2b:aa:
                    aa:bf:c8:1a:08:c5:a4:0c:3e:d1:84:86:07:b1:d6:
                    85:3d:2a:6a:b2:a6:f6:45:4d:4e:8d:43:18:df:e3:
                    13:36:44:c0:2b:b7:04:dc:7a:58:e6:bb:b8:fe:79:
                    f6:07:11:26:48:13:91:45:45:40:27:22:69:a3:48:
                    3e:4f:10:8d:7b:16:d5:91:14:4e:3f:37:3d:33:11:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1E:50:55:25:C8:BC:23:C0:3A:9C:51:2D:05:35:0C:D4:95:8D:59
            X509v3 Authority Key Identifier:
                keyid:11:FE:E7:71:12:2E:6B:8B:AB:9E:5B:C2:56:6A:C9:18:DC:99:FA:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11FEE771122E6B8BAB9E5BC2566AC918DC99FAF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/323830343a366239343a383030303a3a2f33342d3334203d3e20323730343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b94:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:40:45:79:3b:45:e3:f7:d2:bb:79:28:04:ae:45:a1:b0:79:
         f6:77:11:a9:84:6a:da:c7:3a:94:41:aa:42:1f:2a:3c:f5:03:
         c2:9b:a0:3f:c7:4f:3a:5f:99:1f:75:4a:61:8a:e4:8c:32:9c:
         2b:df:86:3f:be:d6:ee:90:42:6e:02:e2:64:11:5f:28:99:4d:
         22:d7:c2:4d:1f:db:cf:3c:9c:1b:20:1f:f4:a9:e3:da:1f:e2:
         8b:c7:5a:16:8e:34:15:9e:64:b0:79:e9:31:ca:d3:14:cf:4c:
         ea:c3:00:43:39:ff:7e:5b:f7:12:23:f7:18:c5:58:c4:18:30:
         16:f5:b2:60:7b:ba:66:6f:05:06:1b:9d:d8:58:4d:7d:13:fc:
         aa:52:cc:24:fa:0f:46:87:cc:30:71:26:51:4b:b7:cd:e5:21:
         d6:06:64:aa:c9:8e:45:2d:a5:9d:18:a4:2e:a5:3a:a2:5a:27:
         3c:b2:93:d1:62:f2:de:d6:93:ba:2b:b7:41:32:97:a7:64:58:
         91:a7:c7:aa:f0:e9:f4:76:6f:1d:ea:4e:4e:61:a1:c7:d0:f4:
         7f:06:6e:c9:41:21:d6:f4:8b:c4:21:58:4a:a2:8e:55:b3:36:
         ed:d0:53:47:47:31:17:6d:68:83:e6:d8:05:05:1d:e8:00:d0:
         bc:61:e4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:02:17 2025 by rpki-client