Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343430303a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a343430303a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          rBkzkNG+Bfks03lEkee9FpBuV4R7BkkaAMRvW/4IE5A=
Subject key identifier:   62:DA:27:20:E4:B0:66:D6:B2:64:59:C5:1F:88:D7:81:24:1B:EC:FD
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       37224D2052B4F42AD853C51F498744FB4B3514
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343430303a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:31 +0000
ROA not before:           Tue 03 Jun 2025 16:50:31 +0000
ROA not after:            Tue 02 Jun 2026 16:55:31 +0000
asID:                     264344
IP address blocks:        2804:2674:4400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 06:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:22:4d:20:52:b4:f4:2a:d8:53:c5:1f:49:87:44:fb:4b:35:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:31 2025 GMT
            Not After : Jun  2 16:55:31 2026 GMT
        Subject: CN=62DA2720E4B066D6B26459C51F88D781241BECFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1b:43:20:a0:e6:e1:af:e7:e0:23:26:de:15:
                    cd:80:68:f7:36:4d:51:73:29:64:34:91:a2:0d:38:
                    4b:84:84:e3:89:ee:c1:cf:0a:d5:0f:50:73:4d:7e:
                    6f:93:d6:06:90:86:33:5c:8a:0c:9b:04:b6:e3:5b:
                    ea:90:1d:4b:1c:48:2a:5f:6b:3c:99:bb:ec:69:4c:
                    f2:51:e5:f9:25:a1:fb:6e:1f:0a:ee:0b:94:4f:70:
                    00:7d:7c:fc:6b:cc:d3:0e:32:7b:64:7e:19:be:4e:
                    b4:2d:77:11:2b:2a:57:90:ec:61:1f:36:7e:98:4f:
                    7a:6a:14:c6:14:e3:b6:96:d6:6d:88:d7:c1:85:b3:
                    b6:9d:46:60:f4:7b:78:52:65:42:57:f1:21:97:a1:
                    9a:e1:b2:28:ae:07:f1:51:43:24:8b:87:c7:74:ef:
                    21:68:5d:c5:3e:71:b7:08:1a:78:ea:72:7b:85:84:
                    ed:78:1d:08:ca:94:70:0c:b0:32:c7:fa:d0:d2:c4:
                    d5:62:60:f8:c3:a6:53:42:4e:dd:2a:a2:bf:b6:84:
                    11:e3:08:9f:e9:f7:aa:f0:ec:d4:6b:68:70:04:b9:
                    a1:25:1a:21:d4:58:38:25:cd:80:2b:8b:e8:12:65:
                    0f:d3:f7:dd:82:74:a6:d5:3a:af:d5:0e:64:7b:25:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DA:27:20:E4:B0:66:D6:B2:64:59:C5:1F:88:D7:81:24:1B:EC:FD
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343430303a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4400::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:8b:de:8d:18:cd:16:04:8c:48:a2:30:40:26:af:f1:a5:52:
         dc:0c:70:9d:07:dc:63:e3:75:20:bf:f5:d9:9f:53:f1:ac:93:
         44:65:ef:6e:12:50:8f:3e:2e:2f:c6:40:02:3e:05:da:0e:45:
         29:cb:bd:73:25:0f:6b:ef:e0:c3:93:c9:18:bf:f9:83:71:d0:
         c5:02:41:0b:65:84:76:fd:0f:45:d9:a2:a1:00:39:2e:15:59:
         d8:79:56:ea:9e:66:3e:61:3a:51:b8:dd:0b:7a:ad:77:ea:ac:
         2f:59:03:3a:43:91:4b:6d:00:d2:51:00:82:1e:2f:b7:8a:ed:
         6e:71:7a:f6:4e:1d:8f:68:3a:5e:f1:11:af:17:42:15:bf:74:
         04:94:c5:19:b2:eb:10:28:3a:f0:c2:1b:be:e1:3a:b1:b3:3d:
         60:f5:e8:16:e4:88:0b:dc:63:7b:b6:ee:ba:7f:4c:8c:3a:1f:
         fb:a2:20:43:3f:6b:c8:c7:c3:a1:36:92:a3:48:df:85:c4:58:
         ae:31:25:ce:c2:86:82:48:85:86:e1:f1:3f:80:9e:13:05:4e:
         d0:f3:d8:be:01:a7:c0:66:be:15:f6:6c:a0:55:3a:e9:92:08:
         15:13:84:bc:db:ea:08:7b:f1:26:bf:53:b6:f6:67:90:1f:63:
         0b:bf:16:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:40:21 2025 by rpki-client