Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/323830343a373031633a3a2f33322d313238203d3e20323730373036.roa
File:                     323830343a373031633a3a2f33322d313238203d3e20323730373036.roa (raw, json)
Hash identifier:          Qxgdds3JB3cwHC/Wy+wVKjgZjVElUx2EypJEucK/QpA=
Subject key identifier:   F3:5B:41:85:41:F3:BF:D7:9D:07:5E:25:10:25:3C:CC:83:78:6F:DE
Certificate issuer:       /CN=7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18
Certificate serial:       6E1A824721027EB0D9FE7E06FD6E8141417CB8D5
Authority key identifier: 7D:92:7A:1F:87:04:9C:08:8D:1A:FD:D5:9F:E1:D9:EA:1C:F7:9D:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/323830343a373031633a3a2f33322d313238203d3e20323730373036.roa
Signing time:             Mon 16 Jun 2025 03:05:56 +0000
ROA not before:           Mon 16 Jun 2025 03:00:56 +0000
ROA not after:            Mon 15 Jun 2026 03:05:56 +0000
asID:                     270706
IP address blocks:        2804:701c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18.crl
                          rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 10:54:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1a:82:47:21:02:7e:b0:d9:fe:7e:06:fd:6e:81:41:41:7c:b8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18
        Validity
            Not Before: Jun 16 03:00:56 2025 GMT
            Not After : Jun 15 03:05:56 2026 GMT
        Subject: CN=F35B418541F3BFD79D075E2510253CCC83786FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:db:85:0d:20:a6:a2:fe:c6:43:0a:8b:e8:f8:
                    f5:03:88:4a:aa:ec:c1:99:b4:c0:b3:19:f9:cf:b3:
                    77:ff:6a:8c:46:33:be:f0:dc:bf:9f:cf:f5:5b:08:
                    37:34:1b:6d:cb:0c:14:ad:cb:4f:8a:dd:e8:1f:4a:
                    3a:78:a1:1f:94:bc:27:6c:5a:b9:25:9f:4b:24:f9:
                    fd:21:5a:53:65:e8:56:ff:87:2b:6a:26:a1:37:63:
                    67:cd:f7:59:cf:2d:7e:8f:6c:85:b0:3b:82:9b:d2:
                    22:11:e4:e9:e5:a4:99:20:f2:c0:a5:36:05:a2:2c:
                    ff:e3:70:cd:0f:96:ec:89:26:20:04:74:62:f3:e6:
                    50:28:02:e6:a9:e9:ce:7b:e1:32:15:01:66:f4:b1:
                    9a:a4:a0:1a:93:c9:1e:ee:f8:28:73:62:b4:5d:f9:
                    a9:21:8e:c4:b9:5f:1c:c8:ef:3d:bd:be:24:f5:69:
                    9f:f1:00:ea:cb:1e:ed:69:30:2e:97:45:af:ba:3b:
                    95:9c:0b:22:57:0c:16:41:1a:64:0d:c8:d3:46:d0:
                    99:c3:db:fa:5f:f5:ef:6b:43:18:f6:ce:f2:cf:8f:
                    e8:40:48:ef:40:fb:23:24:91:07:12:2e:1c:52:12:
                    61:24:5e:21:8b:fd:ef:32:ab:a0:93:2c:91:c8:24:
                    db:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5B:41:85:41:F3:BF:D7:9D:07:5E:25:10:25:3C:CC:83:78:6F:DE
            X509v3 Authority Key Identifier:
                keyid:7D:92:7A:1F:87:04:9C:08:8D:1A:FD:D5:9F:E1:D9:EA:1C:F7:9D:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D927A1F87049C088D1AFDD59FE1D9EA1CF79D18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzQBvRp4zZ1r4WpGdhyUJfFqVac1XPoHoxWz5VSQf6hN/0/323830343a373031633a3a2f33322d313238203d3e20323730373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:701c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:8a:da:82:ac:26:e7:d6:60:0f:3b:e4:5a:cb:4c:b0:d3:ed:
         50:9a:32:bc:21:dd:17:e8:5a:b3:f4:95:b7:bb:f8:16:9e:72:
         6e:f8:b1:83:81:15:1c:9e:0c:08:77:5d:da:c3:ed:ab:55:72:
         91:bb:d1:2c:c9:ac:b1:f2:c5:0d:99:4c:46:f2:6e:ac:26:6d:
         06:c2:2b:14:c8:8d:d0:1b:78:df:bd:cc:31:fe:a2:05:a7:e5:
         be:39:57:60:35:f9:ea:af:1b:73:8c:5e:bb:18:99:29:76:83:
         49:2d:1c:5f:04:d7:d7:6b:6a:d8:ce:bf:93:4c:84:47:87:d6:
         94:80:09:d6:e8:66:0e:ac:83:ac:59:f1:df:91:c2:c5:7a:2b:
         cd:f7:ab:ef:ed:dd:e1:c4:b3:0a:bb:3b:55:f2:b4:08:32:07:
         6f:bd:49:93:6c:54:98:71:eb:9b:17:72:15:91:78:31:b1:e0:
         c4:a4:46:ff:0e:29:7e:90:7f:26:84:e3:c3:0a:1b:fc:79:25:
         1d:d2:37:bc:92:7b:1d:06:21:0f:0a:c3:de:c0:8c:77:bc:59:
         05:c8:25:d5:e2:d9:b5:05:40:0a:44:a1:e5:e8:3f:73:15:47:
         c5:82:24:86:61:ef:69:27:36:a7:b8:a0:55:18:0f:0b:bd:5f:
         e1:1f:0c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 03:28:31 2025 by rpki-client