Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a6431303a3a2f34362d3436203d3e20323634333434.roa
File:                     323830343a323637343a6431303a3a2f34362d3436203d3e20323634333434.roa (raw, json)
Hash identifier:          LhgFQc1E+OrH5p9rVfd6/Cf8660EdOM7rof/OBl5B/I=
Subject key identifier:   28:04:9A:EA:A1:69:97:A1:E7:48:55:7B:2E:15:E0:E1:33:FD:C2:00
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       611589DAA7C232E5A728EF0E38E9252344B82F45
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a6431303a3a2f34362d3436203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:31 +0000
ROA not before:           Tue 03 Jun 2025 16:50:31 +0000
ROA not after:            Tue 02 Jun 2026 16:55:31 +0000
asID:                     264344
IP address blocks:        2804:2674:d10::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 06:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:15:89:da:a7:c2:32:e5:a7:28:ef:0e:38:e9:25:23:44:b8:2f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:31 2025 GMT
            Not After : Jun  2 16:55:31 2026 GMT
        Subject: CN=28049AEAA16997A1E748557B2E15E0E133FDC200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:9f:5f:3b:ed:be:c0:7f:8c:7c:ca:a2:07:
                    2d:08:99:64:74:62:e3:39:7a:49:1f:75:78:cd:15:
                    21:06:cf:37:f6:9d:1b:b4:05:22:69:c8:93:dc:79:
                    fb:6a:04:76:50:68:6e:c8:5f:51:32:f6:99:73:42:
                    b3:a1:dc:c3:8b:f9:93:4b:a3:e9:0a:d6:d9:77:bf:
                    38:ee:3a:c6:a5:fd:42:36:0a:4c:79:0f:be:d1:ca:
                    1f:79:98:63:c5:0f:94:0a:ae:df:7b:f4:41:6d:80:
                    f6:f3:a6:40:a4:ff:df:4b:cf:f9:21:50:e1:7e:9e:
                    05:66:dc:2a:8d:26:8e:ba:a9:25:c4:3d:76:99:e6:
                    66:f6:51:68:ed:81:fc:a4:30:ab:82:b5:39:94:b5:
                    96:49:98:7c:0b:ae:a6:4a:ed:83:49:a4:0b:01:0f:
                    f0:39:ac:a8:b4:3c:63:79:ea:26:ed:e5:d8:6c:60:
                    1d:0f:f1:2d:b5:4b:35:ee:74:09:3c:72:1d:a2:29:
                    b1:be:7d:6c:67:8e:16:e4:57:2f:b3:39:83:18:7c:
                    52:11:dc:b4:66:85:33:b5:b7:9d:68:37:ef:eb:67:
                    ad:0d:97:50:3e:ee:f3:1d:84:d4:50:bd:08:ff:8f:
                    0d:c1:2d:f0:a7:88:78:03:f6:30:79:ec:27:5e:82:
                    26:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:04:9A:EA:A1:69:97:A1:E7:48:55:7B:2E:15:E0:E1:33:FD:C2:00
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a6431303a3a2f34362d3436203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:d10::/46

    Signature Algorithm: sha256WithRSAEncryption
         47:de:f0:47:37:4d:1e:ab:c4:1f:b9:29:30:57:14:05:d4:a0:
         3b:34:5e:3b:4e:b8:d0:97:bc:8d:89:33:8b:b2:6e:43:bc:49:
         8a:10:93:44:36:3f:67:53:ad:9c:7f:38:7d:36:48:ce:b6:20:
         d7:c9:d0:76:ef:f6:2d:31:fc:86:8d:cd:96:e1:a1:43:fc:80:
         4f:7f:f4:b0:6f:62:1b:0d:8f:86:e8:ce:a1:ed:98:0b:1f:e4:
         3a:c8:d3:df:49:6b:a7:8b:0b:5c:ba:54:36:a9:6b:4d:fe:fd:
         1a:71:97:0c:0f:7f:97:f7:3f:d8:b0:d8:d1:67:cc:2c:43:2f:
         14:e6:4a:2a:35:fc:b3:08:37:9b:fc:88:a8:39:79:46:19:d3:
         0b:fb:d4:df:d5:f5:35:be:a1:5a:85:4e:da:e4:d8:63:51:b4:
         94:04:f2:b3:9e:7f:79:07:64:5b:9a:88:3a:94:8f:75:67:48:
         3b:82:60:8d:92:4a:81:35:94:42:cf:7d:93:ab:ee:1f:1e:6d:
         61:23:93:03:c6:cf:a6:e1:e1:53:13:b4:55:1c:c9:55:9f:c9:
         8e:c7:2c:43:e1:12:19:79:af:ca:ed:11:55:81:eb:61:b5:29:
         42:80:a9:e8:1f:e2:27:69:e3:b0:0e:47:d8:1d:05:68:9b:43:
         20:ec:e6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:40:25 2025 by rpki-client