Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33342d3334203d3e20323635323934.roa
File:                     323830343a326461343a3a2f33342d3334203d3e20323635323934.roa (raw, json)
Hash identifier:          hFzTo2aHVOui2+4N3nDWF7PW43Atl8KAUI7ng8tinFE=
Subject key identifier:   A5:4F:C1:B9:D5:F1:D3:9D:4B:83:3E:E4:7E:E7:BA:72:45:22:DB:E3
Certificate issuer:       /CN=C6097CB6BD5F2601D6B32994C5DA4AD5568AB473
Certificate serial:       3D2266E4D847F933136ED2F820BC9EBF08F17EB7
Authority key identifier: C6:09:7C:B6:BD:5F:26:01:D6:B3:29:94:C5:DA:4A:D5:56:8A:B4:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33342d3334203d3e20323635323934.roa
Signing time:             Tue 17 Jun 2025 11:28:07 +0000
ROA not before:           Tue 17 Jun 2025 11:23:07 +0000
ROA not after:            Tue 16 Jun 2026 11:28:07 +0000
asID:                     265294
IP address blocks:        2804:2da4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.crl
                          rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Jun 2025 17:36:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:22:66:e4:d8:47:f9:33:13:6e:d2:f8:20:bc:9e:bf:08:f1:7e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6097CB6BD5F2601D6B32994C5DA4AD5568AB473
        Validity
            Not Before: Jun 17 11:23:07 2025 GMT
            Not After : Jun 16 11:28:07 2026 GMT
        Subject: CN=A54FC1B9D5F1D39D4B833EE47EE7BA724522DBE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:e5:c0:ee:e5:5a:2c:6a:b4:54:23:bb:e9:
                    2f:35:80:f8:20:88:26:96:79:91:b8:f3:e3:23:6f:
                    36:b8:c9:0f:f8:13:3d:f9:d7:06:14:d6:66:91:da:
                    9a:b7:33:17:10:01:2f:c4:b6:dd:75:14:8e:d8:e1:
                    1d:a5:fe:6a:dc:e9:ee:f0:77:86:fa:97:5c:a9:58:
                    56:c3:92:98:71:ea:af:25:64:8a:67:af:c4:f8:43:
                    51:02:3c:62:0c:96:15:d9:4d:32:d6:31:f1:88:f5:
                    a0:b7:87:c4:1e:41:5d:eb:f6:57:05:27:b6:68:b7:
                    f8:66:e1:4b:56:31:ad:c4:b1:50:b2:ae:dc:e9:1c:
                    0c:4b:d9:ff:0d:cd:aa:9c:79:86:b2:66:d9:08:bf:
                    33:2d:f9:0a:9b:34:b2:61:91:29:d8:81:d7:14:7c:
                    f9:9c:10:0f:4c:e6:d2:b9:1e:f7:e5:16:07:2a:35:
                    da:fd:47:92:af:c5:92:96:79:ed:1c:6f:fb:52:dd:
                    33:98:8c:ee:3a:f3:98:9c:6f:50:2b:b0:f4:5c:48:
                    9d:43:7b:ff:7b:d1:34:07:2a:37:a9:05:db:5d:ef:
                    ce:9e:d7:ee:0c:81:cd:ba:d4:0f:4e:aa:db:83:f4:
                    c5:76:68:16:76:90:1d:3f:d6:8c:48:c5:f6:5d:0c:
                    99:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4F:C1:B9:D5:F1:D3:9D:4B:83:3E:E4:7E:E7:BA:72:45:22:DB:E3
            X509v3 Authority Key Identifier:
                keyid:C6:09:7C:B6:BD:5F:26:01:D6:B3:29:94:C5:DA:4A:D5:56:8A:B4:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6097CB6BD5F2601D6B32994C5DA4AD5568AB473.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/0/323830343a326461343a3a2f33342d3334203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2da4::/34

    Signature Algorithm: sha256WithRSAEncryption
         47:1d:80:c9:d2:12:1b:0f:8f:b3:df:a9:d9:0d:84:e5:e0:2e:
         30:94:48:51:27:40:72:34:9d:e4:4d:8f:d9:f4:cb:19:7d:44:
         e2:a7:cf:99:fd:35:ad:de:c1:c6:4b:a1:68:92:8c:c3:3f:fa:
         db:65:3a:77:5d:aa:f4:73:ad:c4:e2:20:4d:b1:02:25:94:a8:
         74:2d:75:81:9d:68:18:3f:81:cd:bb:82:5b:7f:2f:f2:fb:64:
         13:83:3c:a1:4b:eb:69:aa:46:77:bc:4b:b5:9f:18:38:f5:4e:
         80:f7:32:d0:bd:54:9e:94:41:14:5b:91:63:a6:5f:6c:d3:37:
         97:51:de:5e:1c:54:d1:9d:39:e2:02:46:3b:57:34:fa:57:f6:
         89:38:da:d2:d3:c3:bb:59:c3:02:b4:2f:8e:ef:97:c8:81:32:
         31:a6:a8:32:9a:cb:c8:42:ae:cf:70:46:71:dc:06:cc:56:59:
         d0:f5:a7:95:22:3b:04:8d:d7:bb:41:3d:44:a0:4a:ee:11:fa:
         ea:9f:2c:40:7b:e6:b3:b3:59:77:14:5c:23:4d:5e:b2:9a:3e:
         8e:99:13:d9:b5:5b:0d:1b:54:bd:0a:80:91:3d:4e:33:0c:fa:
         a0:88:28:68:ce:12:98:d5:f6:58:9b:29:4e:f7:29:90:c8:ae:
         85:05:ed:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 08:55:14 2025 by rpki-client