Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a3a2f33322d3332203d3e20323636333032.roa
File:                     323830343a333562383a3a2f33322d3332203d3e20323636333032.roa (raw, json)
Hash identifier:          Uq/qq65TB1yEj/H2hN7zL8kCRMVFpzjGb6mmJlXws1c=
Subject key identifier:   5E:D6:11:0A:14:18:68:ED:C0:9B:93:C8:BA:34:08:EB:14:18:E2:54
Certificate issuer:       /CN=180D5A022BF9B64C2D3DB9A99B100E4173AF515C
Certificate serial:       4694BDD39BE1A062C45997D2EFE27A688BBFCA06
Authority key identifier: 18:0D:5A:02:2B:F9:B6:4C:2D:3D:B9:A9:9B:10:0E:41:73:AF:51:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a3a2f33322d3332203d3e20323636333032.roa
Signing time:             Tue 08 Jul 2025 13:58:14 +0000
ROA not before:           Tue 08 Jul 2025 13:53:14 +0000
ROA not after:            Tue 07 Jul 2026 13:58:14 +0000
asID:                     266302
IP address blocks:        2804:35b8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.crl
                          rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 06:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:94:bd:d3:9b:e1:a0:62:c4:59:97:d2:ef:e2:7a:68:8b:bf:ca:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=180D5A022BF9B64C2D3DB9A99B100E4173AF515C
        Validity
            Not Before: Jul  8 13:53:14 2025 GMT
            Not After : Jul  7 13:58:14 2026 GMT
        Subject: CN=5ED6110A141868EDC09B93C8BA3408EB1418E254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:28:75:5d:99:f0:0f:bd:2e:e6:68:0c:09:
                    04:85:fe:2d:da:27:da:9b:a1:30:a3:d8:25:2a:93:
                    43:12:e2:c8:73:f6:1c:04:dd:c8:a3:df:91:86:05:
                    30:2c:a6:7f:e6:0a:be:32:45:06:52:ba:5c:d5:ae:
                    a0:41:bf:b9:3f:2a:18:dd:7a:98:f7:e4:48:4c:74:
                    f8:4b:c4:ea:f4:a1:40:63:82:f1:48:48:b8:af:af:
                    8b:72:a6:cf:03:5b:e3:a7:c1:3c:b3:53:89:06:fe:
                    bc:bc:7a:f5:ca:6f:65:a2:91:5d:d5:bc:0e:f3:da:
                    08:ac:21:5d:f4:b9:d2:e3:57:0a:2c:4b:de:cc:ae:
                    99:c9:6b:64:20:df:80:b8:2d:e2:e5:40:aa:6f:83:
                    bc:9f:06:ee:95:8d:2a:ff:d1:c9:ff:c7:9b:90:b7:
                    45:1a:71:10:d7:ee:88:31:33:c1:6e:60:a8:9e:eb:
                    d5:bc:66:e4:6b:2e:11:b5:4d:49:bb:c7:5a:f2:75:
                    9e:47:a5:26:bd:1b:12:20:ae:c8:cd:ba:3b:0e:5c:
                    ce:16:c5:c2:b6:dc:61:f3:22:99:f5:6e:02:4e:09:
                    79:86:e2:17:c1:ab:63:8c:86:d1:af:e9:4c:3d:c8:
                    b6:74:e3:86:a8:14:ef:93:b9:87:36:33:67:8c:13:
                    da:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D6:11:0A:14:18:68:ED:C0:9B:93:C8:BA:34:08:EB:14:18:E2:54
            X509v3 Authority Key Identifier:
                keyid:18:0D:5A:02:2B:F9:B6:4C:2D:3D:B9:A9:9B:10:0E:41:73:AF:51:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/180D5A022BF9B64C2D3DB9A99B100E4173AF515C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTtet5GYaj7Y2JATX62kCZTNy7R2oJqsMuUoeTPSXyeE/0/323830343a333562383a3a2f33322d3332203d3e20323636333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:28:04:fc:f8:8c:9e:48:75:30:8a:dc:3d:5e:92:6c:23:79:
         69:e5:ba:d4:a2:4f:ad:db:07:f9:00:0a:9c:4c:a0:96:79:f8:
         bd:78:4a:6d:59:42:00:99:fa:7c:d1:e0:bb:98:00:8c:e9:fa:
         68:2d:d9:78:d6:0e:b4:ba:90:44:83:7e:cd:a5:9e:8b:11:70:
         49:ff:53:8e:68:7f:37:58:e6:e1:4b:e5:ae:51:f7:19:fd:63:
         ad:b0:40:9f:80:cb:68:0e:ad:d4:93:e0:ee:02:0d:06:17:f8:
         23:a5:11:44:9e:a9:dc:27:32:00:62:c0:9d:0b:de:a2:e7:9a:
         74:4a:cc:45:00:5f:54:a5:a5:d2:d9:c8:49:03:27:1f:50:49:
         f9:3b:a1:5f:1e:3d:f3:d8:01:cb:b2:00:b0:78:75:2a:3b:9e:
         66:d4:d7:87:47:11:7d:22:37:bd:4d:8f:2e:13:32:69:49:60:
         0f:e7:95:f5:d2:01:ee:ac:df:bc:82:06:f8:60:6c:07:82:10:
         5f:62:89:d0:55:d4:9b:7b:35:73:82:11:9b:5e:17:6f:15:54:
         27:93:85:76:71:a7:e7:61:22:fd:13:71:48:5d:92:05:b2:15:
         2e:a3:d5:8c:52:3c:47:62:96:d7:0a:8a:a9:40:04:ee:70:41:
         dd:6f:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:30:10 2025 by rpki-client