Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a383030303a3a2f33342d3334203d3e20323636333032.roa
File:                     323830343a333562383a383030303a3a2f33342d3334203d3e20323636333032.roa (raw, json)
Hash identifier:          SaMZsSZmF2sFw6NjtKbOiRfcdiTCngy3TsC5Ea3NrGw=
Subject key identifier:   31:16:C5:85:72:8A:D5:4C:F7:9F:89:34:F7:65:8C:49:AC:D9:74:94
Certificate issuer:       /CN=180D5A022BF9B64C2D3DB9A99B100E4173AF515C
Certificate serial:       1BB16C3BE1FE455E3A0ABAE0243AD1471DB26B91
Authority key identifier: 18:0D:5A:02:2B:F9:B6:4C:2D:3D:B9:A9:9B:10:0E:41:73:AF:51:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a383030303a3a2f33342d3334203d3e20323636333032.roa
Signing time:             Tue 08 Jul 2025 13:58:14 +0000
ROA not before:           Tue 08 Jul 2025 13:53:14 +0000
ROA not after:            Tue 07 Jul 2026 13:58:14 +0000
asID:                     266302
IP address blocks:        2804:35b8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.crl
                          rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b1:6c:3b:e1:fe:45:5e:3a:0a:ba:e0:24:3a:d1:47:1d:b2:6b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=180D5A022BF9B64C2D3DB9A99B100E4173AF515C
        Validity
            Not Before: Jul  8 13:53:14 2025 GMT
            Not After : Jul  7 13:58:14 2026 GMT
        Subject: CN=3116C585728AD54CF79F8934F7658C49ACD97494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:31:22:0c:71:bd:0e:76:06:1a:c3:10:2f:66:
                    e5:7e:07:33:57:28:15:57:41:da:33:a9:5a:0c:ef:
                    8d:02:b0:e3:c2:8b:d2:56:09:a8:3a:07:18:15:17:
                    7c:0b:08:61:40:7c:a7:ec:81:64:12:19:40:8b:ed:
                    e0:4f:de:17:3c:0b:15:ea:df:f4:4b:25:fa:f2:fc:
                    15:e1:bb:fc:01:a3:bb:28:ec:ea:40:0b:bd:a7:26:
                    3c:4d:d0:a4:6b:68:91:73:c5:ef:44:65:16:c9:d6:
                    b0:de:56:6e:20:e8:07:0b:98:7a:5a:cd:51:58:63:
                    e5:8a:f0:18:ab:50:a2:af:c1:e4:d4:4b:46:9a:34:
                    56:94:38:1a:9f:00:5a:a4:13:b1:d2:70:d0:d9:f9:
                    21:7c:ff:bc:ca:eb:62:0e:1e:e5:fc:45:0f:dd:31:
                    40:cf:84:52:d2:dc:24:09:97:64:a3:90:c6:a3:f9:
                    8a:bd:8d:45:e8:80:ea:e2:ce:33:fc:95:b2:83:c5:
                    f4:b3:f2:f8:e4:78:91:35:4e:43:84:8c:3e:b6:bb:
                    c5:68:d4:c2:0c:22:91:cd:63:72:ed:9b:fc:59:7f:
                    66:73:9b:b4:d2:b8:01:6c:8a:f3:8f:4c:7b:e1:59:
                    08:24:c5:fe:d2:32:4e:6d:ac:f1:05:1e:52:7c:ef:
                    48:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:16:C5:85:72:8A:D5:4C:F7:9F:89:34:F7:65:8C:49:AC:D9:74:94
            X509v3 Authority Key Identifier:
                keyid:18:0D:5A:02:2B:F9:B6:4C:2D:3D:B9:A9:9B:10:0E:41:73:AF:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a383030303a3a2f33342d3334203d3e20323636333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35b8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:16:3d:85:6a:97:42:4f:64:4c:1f:e7:3e:09:98:b9:1e:
         1f:89:11:e1:89:60:c3:2e:43:95:32:eb:88:87:2e:a0:28:61:
         e3:2f:96:80:6c:b6:36:2c:4a:b1:ad:f7:42:13:46:6b:6c:be:
         03:3f:12:cb:e3:9b:4e:65:e9:17:5c:48:e2:43:d5:2d:d9:00:
         e0:f6:21:d3:f1:3d:7b:0f:a5:15:47:21:f5:e7:62:bf:a9:69:
         4d:46:bb:ad:ca:b4:76:0c:81:b3:23:a8:bf:f6:d4:09:f6:63:
         ec:c6:f7:37:fb:4f:03:cf:3e:22:06:5d:b5:57:83:83:17:64:
         44:25:42:85:87:06:5a:09:86:d9:63:54:00:0e:44:ea:87:7d:
         6b:f4:31:5d:60:87:b0:8a:57:32:b9:55:1d:54:d6:5c:5a:54:
         14:df:85:e4:a7:fd:47:21:89:90:ec:32:c5:f0:dc:8c:f9:52:
         c5:01:17:ab:f5:d5:7e:df:0c:17:16:bd:c5:d7:24:c0:85:41:
         66:8f:3e:2e:70:4c:bd:f1:1e:41:33:f3:37:8a:07:a4:b9:27:
         aa:e0:0b:d6:71:cb:de:eb:ac:56:e4:8d:7a:f4:52:83:f4:80:
         8b:9e:13:1d:05:b0:c8:24:f7:45:d7:75:08:b7:38:ce:48:b9:
         5d:5f:09:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:19:02 2025 by rpki-client