Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33332d3333203d3e20323732353831.roa
File:                     323830343a383537383a3a2f33332d3333203d3e20323732353831.roa (raw, json)
Hash identifier:          RKPxE90xeJX3Tr9HwA7KlEeVzghP05bA9MF380RZEjc=
Subject key identifier:   FF:72:4D:A5:F7:76:30:D4:C1:FC:C5:DD:8C:26:8C:85:61:ED:C2:D7
Certificate issuer:       /CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
Certificate serial:       70D796E6B0F1BA4054A5CB929390D487917B8638
Authority key identifier: 0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33332d3333203d3e20323732353831.roa
Signing time:             Wed 18 Jun 2025 17:54:12 +0000
ROA not before:           Wed 18 Jun 2025 17:49:12 +0000
ROA not after:            Wed 17 Jun 2026 17:54:12 +0000
asID:                     272581
IP address blocks:        2804:8578::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl
                          rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 18:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d7:96:e6:b0:f1:ba:40:54:a5:cb:92:93:90:d4:87:91:7b:86:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86
        Validity
            Not Before: Jun 18 17:49:12 2025 GMT
            Not After : Jun 17 17:54:12 2026 GMT
        Subject: CN=FF724DA5F77630D4C1FCC5DD8C268C8561EDC2D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:33:fa:9e:fc:20:7c:94:73:75:99:51:c0:
                    b3:ae:7c:02:3f:c4:83:8c:0f:8b:5b:80:48:e6:d6:
                    74:c7:d5:9d:65:33:68:d2:ae:94:6d:61:c6:9f:de:
                    e7:0c:6d:10:28:08:4d:5b:8b:6a:f8:ef:ac:8b:bd:
                    a3:69:e7:cf:41:91:91:c6:e2:ed:ad:bc:cf:0f:ce:
                    4a:6a:fe:5b:a0:0c:76:a7:42:b3:86:82:cc:16:26:
                    74:8b:44:a9:bf:a9:94:2b:69:02:ea:8a:02:0f:42:
                    91:2c:10:ea:0a:75:d2:4f:0e:4f:0a:ec:25:0d:51:
                    dd:31:80:4f:f3:9c:5e:40:67:5b:49:12:02:12:07:
                    26:80:29:4f:a1:6d:50:77:11:0c:95:37:06:c2:0e:
                    69:c7:52:ef:86:d0:d6:53:63:f6:7c:c3:f7:ab:f5:
                    fa:f5:4c:9e:eb:07:6e:dc:92:ab:91:3e:b2:21:55:
                    ef:4c:33:f6:e8:f9:c9:37:80:f2:ed:59:19:e6:9f:
                    18:20:cc:4f:b6:79:5e:25:57:cf:2b:25:c1:9b:3c:
                    04:de:ac:84:20:2c:5b:e3:c4:93:01:ca:c9:63:3c:
                    5b:eb:21:21:20:98:ea:08:91:33:a0:9c:0a:36:d7:
                    db:f8:81:97:97:16:49:e8:20:0c:a3:d4:aa:fa:75:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:72:4D:A5:F7:76:30:D4:C1:FC:C5:DD:8C:26:8C:85:61:ED:C2:D7
            X509v3 Authority Key Identifier:
                keyid:0F:2A:26:5C:3F:59:E2:EA:13:0A:D2:C2:44:5A:3F:37:EB:9A:EA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F2A265C3F59E2EA130AD2C2445A3F37EB9AEA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcXtVQ4ftLzZvcBM67b7MmSbS7i4nVpJCD5TF9wfA9z/0/323830343a383537383a3a2f33332d3333203d3e20323732353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8578::/33

    Signature Algorithm: sha256WithRSAEncryption
         35:01:9c:fb:6c:0d:64:71:33:94:c9:52:9c:42:f0:1e:2b:d2:
         c9:f0:c3:bf:28:51:6e:2a:d6:ef:df:56:ce:41:61:33:fa:6c:
         74:79:72:88:ae:95:b7:d9:b5:a7:1b:e2:6d:1d:e4:59:09:f9:
         ee:e6:3d:4c:4d:2a:6c:ef:86:12:e5:43:71:ea:4c:58:89:35:
         4f:4d:b5:07:68:c5:98:1b:65:9b:32:31:2d:b6:b6:6d:b0:85:
         2d:9a:67:26:0d:b1:dc:0e:20:c3:33:66:dc:02:08:e1:9b:35:
         09:62:23:a4:26:0a:0d:60:5c:cc:61:83:d6:26:9d:cf:d2:84:
         eb:83:1f:64:a3:41:94:d9:5d:5c:e4:37:8f:b0:03:8e:49:60:
         df:28:e9:aa:3a:0c:83:13:31:0d:85:db:af:d1:2d:3f:13:ca:
         9f:d5:7d:1d:13:59:76:14:28:df:74:c2:b5:7c:5e:33:b9:28:
         4f:2f:90:9d:71:84:3e:9b:2f:e2:59:2f:07:38:bb:7e:32:8e:
         c3:f0:87:cb:b9:32:df:11:9d:3c:62:27:37:73:c5:31:57:c7:
         d5:c5:da:08:83:5e:92:2b:4c:7e:fe:81:42:65:50:e9:e5:49:
         e2:66:c4:fa:14:7b:0b:63:39:32:8f:80:56:91:27:e3:bf:ab:
         5d:ff:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:19:21 2025 by rpki-client