Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/323830343a376535303a3a2f33322d313238203d3e20323731363136.roa
File:                     323830343a376535303a3a2f33322d313238203d3e20323731363136.roa (raw, json)
Hash identifier:          MSmcAF5Pr7Z6OmK/0SYrvYrYTjy6XmR4fjJwc6jwjFw=
Subject key identifier:   69:84:4C:E2:63:E1:BF:75:84:99:0B:B2:50:82:DC:B8:D6:2F:4A:FA
Certificate issuer:       /CN=8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA
Certificate serial:       704B88D5DF92EEF7297E7E9075FB9731067F6BA9
Authority key identifier: 8C:6C:46:F6:D7:FA:4B:15:66:FA:D6:07:9B:92:B6:C7:C4:F9:13:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/323830343a376535303a3a2f33322d313238203d3e20323731363136.roa
Signing time:             Wed 11 Jun 2025 21:29:16 +0000
ROA not before:           Wed 11 Jun 2025 21:24:16 +0000
ROA not after:            Wed 10 Jun 2026 21:29:16 +0000
asID:                     271616
IP address blocks:        2804:7e50::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.crl
                          rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 15:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:4b:88:d5:df:92:ee:f7:29:7e:7e:90:75:fb:97:31:06:7f:6b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA
        Validity
            Not Before: Jun 11 21:24:16 2025 GMT
            Not After : Jun 10 21:29:16 2026 GMT
        Subject: CN=69844CE263E1BF7584990BB25082DCB8D62F4AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:df:1f:0b:db:e3:eb:4e:a1:84:c5:4d:41:20:
                    24:e2:ba:01:e2:44:16:49:00:8d:d6:16:13:d9:51:
                    03:b9:23:99:47:59:16:8d:2f:aa:aa:8b:67:87:57:
                    a4:48:01:7b:5b:26:37:54:3b:18:b7:53:ef:63:33:
                    ea:1d:53:0c:2b:af:d3:92:e3:47:6e:66:f0:02:3a:
                    e1:93:e8:d2:9e:e7:01:54:f5:1a:d2:53:92:e3:7d:
                    e5:1f:bd:b4:ef:8f:7a:73:f5:d8:1a:2f:41:f9:af:
                    b2:bb:8d:99:87:17:e3:02:f3:e8:fd:19:f1:71:ec:
                    e0:14:e5:9f:4c:69:29:9e:4c:5e:6e:bf:c6:9b:aa:
                    1e:bd:9b:9e:23:1d:70:01:77:29:6a:32:71:f7:37:
                    e1:35:6c:75:3e:e3:c3:d5:43:b8:1f:6e:05:d2:4c:
                    f5:58:db:00:03:93:6a:0d:c0:0b:a3:03:25:25:85:
                    94:f7:1a:17:c9:7b:47:1a:30:6e:b5:f0:75:33:12:
                    77:47:ae:77:8a:61:73:e7:08:3e:6a:e6:f0:f2:b2:
                    3e:9f:77:63:78:6d:48:62:c9:df:01:03:0e:cf:9d:
                    1d:7c:0d:d0:f2:3d:8e:57:ad:5c:35:d4:00:05:b1:
                    77:45:ef:25:8a:eb:03:f7:6e:be:48:3b:91:56:cb:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:84:4C:E2:63:E1:BF:75:84:99:0B:B2:50:82:DC:B8:D6:2F:4A:FA
            X509v3 Authority Key Identifier:
                keyid:8C:6C:46:F6:D7:FA:4B:15:66:FA:D6:07:9B:92:B6:C7:C4:F9:13:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C6C46F6D7FA4B1566FAD6079B92B6C7C4F913AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8F3TtJRXRKt4VUtVU55hgw4NGRPaG6o4tqmY3GPj3Kiu/0/323830343a376535303a3a2f33322d313238203d3e20323731363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:01:11:b1:fb:43:d8:37:47:27:4a:d5:8a:bb:36:7b:4f:6c:
         6d:96:bb:4e:0d:a9:f7:b9:b0:a6:a9:fc:48:60:c2:aa:e9:e0:
         d6:65:55:b3:37:c2:28:ba:23:1b:ba:b6:a0:4b:b7:b6:57:e4:
         a5:75:45:0c:f6:f5:e1:a9:7c:97:2d:5b:60:74:7a:25:e2:47:
         87:43:83:48:99:ba:6c:3f:4d:31:c4:dd:d9:02:a8:90:bb:f6:
         61:8d:1a:80:57:51:79:98:10:5e:8a:ac:e9:ec:60:36:fa:69:
         06:4a:65:c4:59:9d:f5:48:0f:b0:e5:9a:48:a4:b8:c3:0b:1f:
         64:7b:91:ee:33:7f:ce:2b:1b:c5:44:d3:09:d8:14:5a:98:de:
         0c:c6:43:44:50:6e:46:10:81:52:5c:41:6f:10:9f:cc:b2:3f:
         4d:31:95:c7:ac:25:f5:bf:d8:25:84:6a:fd:08:52:0e:2e:e0:
         80:ae:e8:01:91:10:a2:ca:1e:eb:d2:85:5b:a1:c9:ad:d1:3c:
         5c:2f:1d:43:74:c8:1f:d9:04:90:1c:59:70:6a:42:1f:b3:df:
         ce:67:51:53:39:dc:36:98:c8:43:4b:63:37:2b:3f:b4:38:16:
         45:39:e7:23:59:84:09:e5:0f:4d:7e:f7:3c:4b:2a:58:54:2b:
         68:c6:19:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:48:36 2025 by rpki-client