Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a3a2f33322d3332203d3e20323639353237.roa
File:                     323830343a363630303a3a2f33322d3332203d3e20323639353237.roa (raw, json)
Hash identifier:          6zRZc6yOaztxunSOj9phf3pmmoEln1e654d5xy3YhhI=
Subject key identifier:   44:54:A4:27:34:5A:31:30:A4:89:6C:6E:E4:E9:35:6A:9D:33:52:1E
Certificate issuer:       /CN=76B0EA57E03504BE922FDE919983808A4300E231
Certificate serial:       2574FA1200730BF9E4960DFC9B62B0AABC39B557
Authority key identifier: 76:B0:EA:57:E0:35:04:BE:92:2F:DE:91:99:83:80:8A:43:00:E2:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B0EA57E03504BE922FDE919983808A4300E231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a3a2f33322d3332203d3e20323639353237.roa
Signing time:             Mon 19 May 2025 19:38:01 +0000
ROA not before:           Mon 19 May 2025 19:33:01 +0000
ROA not after:            Mon 18 May 2026 19:38:01 +0000
asID:                     269527
IP address blocks:        2804:6600::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.crl
                          rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B0EA57E03504BE922FDE919983808A4300E231.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 16:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:74:fa:12:00:73:0b:f9:e4:96:0d:fc:9b:62:b0:aa:bc:39:b5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76B0EA57E03504BE922FDE919983808A4300E231
        Validity
            Not Before: May 19 19:33:01 2025 GMT
            Not After : May 18 19:38:01 2026 GMT
        Subject: CN=4454A427345A3130A4896C6EE4E9356A9D33521E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:e2:08:8a:c3:5a:21:db:c5:f5:57:46:c8:
                    dc:f5:9a:75:e9:8f:39:7c:4a:6b:a6:fe:e0:11:71:
                    99:16:08:19:86:c3:16:ff:f8:6e:c3:33:75:a6:e0:
                    28:d8:ef:8c:92:7c:bb:1e:02:17:30:db:ed:a7:38:
                    40:31:71:ec:d6:4b:34:c4:50:d5:11:e8:fc:4c:30:
                    c2:5c:84:05:e6:a0:23:e0:b7:d8:61:a4:31:e0:a7:
                    40:fc:88:7d:0b:62:4c:92:19:0e:78:7f:a6:72:8d:
                    f9:ea:2e:b9:88:3a:68:e8:73:70:fe:be:e6:b9:2e:
                    94:fa:9f:57:49:aa:be:a3:2a:f2:2a:66:90:a3:4e:
                    58:7a:9a:37:8a:34:81:b6:06:35:3f:27:8d:e3:ae:
                    62:f6:f8:9a:8d:5c:fb:99:1d:f4:c4:96:85:e1:26:
                    2f:05:50:2a:ae:77:34:56:f8:df:91:45:76:1b:f5:
                    7f:73:78:93:38:c3:11:a5:fb:96:6b:00:5d:ee:3e:
                    d9:4b:d9:49:00:9e:68:6b:dc:25:ce:30:01:00:7a:
                    f4:b0:b5:ba:0f:d1:12:2d:6f:c1:c5:be:0a:82:6b:
                    5b:60:e1:f1:07:42:90:ff:e3:98:d8:b2:78:e9:6e:
                    a8:37:53:3b:25:07:1f:5f:79:d8:7d:63:52:b3:50:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:54:A4:27:34:5A:31:30:A4:89:6C:6E:E4:E9:35:6A:9D:33:52:1E
            X509v3 Authority Key Identifier:
                keyid:76:B0:EA:57:E0:35:04:BE:92:2F:DE:91:99:83:80:8A:43:00:E2:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B0EA57E03504BE922FDE919983808A4300E231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a3a2f33322d3332203d3e20323639353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6600::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:f4:b1:ee:21:59:d4:e1:91:44:e5:61:7e:3d:9a:bf:d0:97:
         b8:d1:78:33:88:e2:39:aa:8b:6e:03:22:3f:eb:75:13:0e:b6:
         b1:3e:a1:46:d2:6d:91:35:a6:8c:2d:1a:da:76:fd:ee:84:2c:
         4b:19:86:5b:39:59:d6:a3:72:ba:bb:6e:95:de:dc:c6:6e:90:
         ff:46:b0:1a:a2:1b:a9:61:8f:5f:95:ce:5a:09:ab:ff:1d:0a:
         f5:38:65:5d:78:c1:c3:6f:d5:4c:44:61:42:13:04:35:54:09:
         65:69:b3:e4:f5:45:de:31:e6:f4:9e:81:2c:37:8a:ec:fb:8c:
         53:5d:62:81:7c:10:3f:be:ef:87:21:e2:cd:22:cd:a6:54:b2:
         42:7c:3d:10:f1:4b:e3:80:bf:f8:c9:84:87:f8:3f:2b:98:d6:
         22:7d:24:3f:85:69:f0:fa:f6:4f:28:be:4b:62:df:10:db:ab:
         35:35:f1:09:d4:c0:4b:2d:96:21:29:8b:83:2d:f8:b8:37:e6:
         8c:6c:4d:d5:42:69:42:e1:d0:e0:a5:a1:15:b1:94:27:cd:a0:
         c0:b3:ec:b2:e6:cf:7a:c5:b5:c4:23:31:20:a7:73:60:02:88:
         f7:7f:6a:a3:1a:1e:98:57:b7:df:f6:88:4d:df:fe:59:88:96:
         2f:0b:e4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:44:43 2025 by rpki-client