Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a3a2f33332d3333203d3e20323639353237.roa
File:                     323830343a363630303a3a2f33332d3333203d3e20323639353237.roa (raw, json)
Hash identifier:          WvtwU5j1W69bqQbFTbfMTpAhQH8UdHvjU4MrL7Ywix8=
Subject key identifier:   C4:9D:5E:8F:BD:15:1D:50:D3:D7:62:6A:55:E1:83:8E:DD:53:FF:C1
Certificate issuer:       /CN=76B0EA57E03504BE922FDE919983808A4300E231
Certificate serial:       56EF7835DA74E526CCC518C56D09EBA36EA5C573
Authority key identifier: 76:B0:EA:57:E0:35:04:BE:92:2F:DE:91:99:83:80:8A:43:00:E2:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B0EA57E03504BE922FDE919983808A4300E231.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a3a2f33332d3333203d3e20323639353237.roa
Signing time:             Mon 19 May 2025 19:38:01 +0000
ROA not before:           Mon 19 May 2025 19:33:01 +0000
ROA not after:            Mon 18 May 2026 19:38:01 +0000
asID:                     269527
IP address blocks:        2804:6600::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.crl
                          rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B0EA57E03504BE922FDE919983808A4300E231.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 16:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ef:78:35:da:74:e5:26:cc:c5:18:c5:6d:09:eb:a3:6e:a5:c5:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76B0EA57E03504BE922FDE919983808A4300E231
        Validity
            Not Before: May 19 19:33:01 2025 GMT
            Not After : May 18 19:38:01 2026 GMT
        Subject: CN=C49D5E8FBD151D50D3D7626A55E1838EDD53FFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:36:75:9f:fd:e9:31:2d:ea:ee:4d:2d:2e:
                    c8:a5:13:1b:db:7f:99:c3:fb:3e:a2:6d:ba:be:19:
                    a2:42:cb:86:aa:d3:53:e4:c5:9c:fe:67:ea:28:d6:
                    d0:1c:a8:6f:6f:0a:51:52:76:8a:51:9f:c5:56:c9:
                    af:12:97:d4:56:2d:8c:36:fa:48:f1:c2:04:47:d8:
                    88:09:19:64:d3:1c:12:fc:a2:48:df:d6:c7:5f:5f:
                    00:d9:57:d5:52:f1:ab:c3:94:73:ea:85:4f:05:b1:
                    8d:b8:22:a9:d3:ee:31:4b:35:50:2f:72:c3:51:70:
                    93:34:4a:cc:ff:07:75:46:96:a6:aa:ae:e3:da:c0:
                    36:e6:c8:7e:8e:76:37:fb:bf:ad:9a:62:7e:e0:64:
                    c5:54:29:26:6d:d8:86:cc:66:29:08:68:4d:06:a2:
                    cf:76:4f:76:13:7f:37:bf:5e:e3:c4:7c:56:7a:30:
                    22:f7:9c:c6:9f:41:a1:a2:55:91:7a:1d:e9:ef:76:
                    79:06:14:0f:50:8b:d3:f8:4b:bf:e0:4e:4f:f7:a3:
                    60:fd:d8:57:47:20:ca:3c:6c:ad:55:a5:76:0a:45:
                    3d:7f:b4:4b:11:0f:5d:e8:94:d2:8e:7c:2d:14:fa:
                    ff:6b:fe:32:52:47:bc:3a:7e:23:79:71:91:93:d7:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9D:5E:8F:BD:15:1D:50:D3:D7:62:6A:55:E1:83:8E:DD:53:FF:C1
            X509v3 Authority Key Identifier:
                keyid:76:B0:EA:57:E0:35:04:BE:92:2F:DE:91:99:83:80:8A:43:00:E2:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/76B0EA57E03504BE922FDE919983808A4300E231.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76B0EA57E03504BE922FDE919983808A4300E231.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/323830343a363630303a3a2f33332d3333203d3e20323639353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6600::/33

    Signature Algorithm: sha256WithRSAEncryption
         4f:78:cc:79:49:d4:87:34:70:31:72:95:44:0e:ce:2a:21:c6:
         8f:c1:27:fa:d5:40:f9:9b:6e:b3:5c:97:00:c7:3c:c2:eb:c6:
         6a:ff:11:16:95:52:84:5c:08:91:dc:cf:cd:d4:eb:9a:c7:23:
         82:2e:44:52:bc:ed:97:79:01:37:08:79:a8:60:ad:d1:6e:9b:
         cc:c9:dc:e7:4d:b4:c3:ed:01:1d:16:97:63:85:52:40:c9:14:
         04:5c:56:42:2a:fc:6f:84:8c:2f:80:5d:84:5c:93:a0:91:3a:
         01:a7:26:ef:11:3e:16:b7:57:3a:5d:3e:e0:de:89:06:4a:e5:
         4f:81:15:bb:92:f2:ac:c1:c5:b5:9c:73:ee:a5:ca:41:c9:30:
         b4:e8:ab:95:5b:2c:d1:5f:a8:ad:04:00:12:4b:ec:bc:f2:27:
         04:1f:3c:92:f5:d6:f1:3b:05:a4:09:42:9b:74:27:8c:85:e6:
         3e:3d:21:95:59:43:6b:5a:88:cd:1f:b3:cf:49:a8:5e:1e:a1:
         90:14:04:12:fd:29:7b:56:48:c4:e9:c6:72:7d:50:60:27:da:
         8b:87:b8:e1:e3:6f:ee:e5:02:22:78:cf:a0:4b:2f:5a:65:e4:
         35:af:9b:e0:1c:13:4d:ad:c4:b9:22:44:2b:b1:5e:7a:c2:f6:
         ca:00:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:49:39 2025 by rpki-client