Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/323830313a38313a38303a3a2f34382d3438203d3e20323734363637.roa
File:                     323830313a38313a38303a3a2f34382d3438203d3e20323734363637.roa (raw, json)
Hash identifier:          7wu5oiUK23LRH2Drnng0f/NEk4nvCBaEhZbICHa8ke0=
Subject key identifier:   DD:08:EA:8F:93:2E:E4:29:FC:18:BE:81:7E:94:46:2B:FF:5F:34:A5
Certificate issuer:       /CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
Certificate serial:       0C9119E87A148235B3476851E552A6318FBAB6CB
Authority key identifier: C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/323830313a38313a38303a3a2f34382d3438203d3e20323734363637.roa
Signing time:             Mon 09 Jun 2025 19:59:12 +0000
ROA not before:           Mon 09 Jun 2025 19:54:12 +0000
ROA not after:            Mon 08 Jun 2026 19:59:12 +0000
asID:                     274667
IP address blocks:        2801:81:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl
                          rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:91:19:e8:7a:14:82:35:b3:47:68:51:e5:52:a6:31:8f:ba:b6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C694D1E9149451AFAC0EA6E7C7644083454DF2DC
        Validity
            Not Before: Jun  9 19:54:12 2025 GMT
            Not After : Jun  8 19:59:12 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:50:50:27:b5:68:e1:bf:1f:d6:7a:7b:d9:3b:
                    a7:dc:bc:2d:29:2b:51:e3:21:4a:1b:f1:12:0e:c7:
                    da:34:ec:8a:1a:7a:a6:5c:c2:a5:bc:12:68:03:a0:
                    99:20:7b:18:30:f8:2a:e1:e9:47:fd:74:ac:99:d6:
                    d9:98:8c:67:9c:4e:3a:5d:e6:1e:03:aa:e8:59:95:
                    0e:83:6f:d6:20:f9:38:7c:a7:46:21:0b:a9:c5:88:
                    a2:3d:31:89:51:4b:4b:eb:06:6d:4a:70:16:f9:19:
                    e1:b5:27:90:e9:8b:42:3e:8d:aa:48:fb:73:b5:73:
                    07:5f:c5:40:b5:fa:56:6f:60:67:9e:f1:d5:84:b5:
                    3b:df:a8:8c:b8:6e:45:da:53:bf:f7:5b:53:d1:6b:
                    c6:b1:4b:cf:70:75:39:7a:76:1c:3b:ad:ed:6d:e8:
                    15:f7:71:29:eb:c8:b1:85:ab:3e:68:e3:04:a6:9a:
                    ea:38:99:a7:56:6b:19:c9:ff:0c:4c:bc:98:d0:03:
                    a8:b0:2b:59:cd:7a:d0:92:ae:54:e4:d1:6e:a2:f7:
                    8c:b4:4a:4b:d5:2b:24:ce:02:97:6f:48:73:55:7c:
                    2b:19:13:9b:1e:44:26:b1:96:7f:8e:51:5d:77:8d:
                    57:f6:0f:47:de:28:81:d8:d3:fa:0a:c5:b6:4f:69:
                    a8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:08:EA:8F:93:2E:E4:29:FC:18:BE:81:7E:94:46:2B:FF:5F:34:A5
            X509v3 Authority Key Identifier:
                keyid:C6:94:D1:E9:14:94:51:AF:AC:0E:A6:E7:C7:64:40:83:45:4D:F2:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C694D1E9149451AFAC0EA6E7C7644083454DF2DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4JYAfPcbZKLb1EKZfvx1ptRt5cM7AS6ucVVp8CxrVnc/0/323830313a38313a38303a3a2f34382d3438203d3e20323734363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:81:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:20:29:04:65:3b:c0:ea:1e:05:3a:15:aa:d7:fb:35:df:8c:
         aa:b2:b3:fe:77:7e:72:f3:5a:76:3f:d6:cc:ed:cd:df:5b:01:
         be:17:8d:bb:00:36:70:d8:0d:77:c4:e4:34:58:2f:cb:8b:36:
         09:6d:ce:f4:a6:32:bb:4a:49:b4:34:47:82:ce:fe:63:1c:79:
         ec:fa:bf:e1:8e:3a:92:21:56:01:cd:bf:a1:ff:c9:90:c8:bd:
         ce:2e:34:ca:0f:74:f5:a9:8c:57:95:2e:80:e4:ae:95:bd:1d:
         c7:db:1c:57:b8:57:ab:23:6b:e0:dd:57:dc:40:e4:58:8c:6b:
         60:ad:a5:64:4d:ed:52:e0:43:35:f3:08:35:70:14:9d:b2:5a:
         c4:a5:f7:0d:4d:f7:a2:f5:dd:36:75:87:ce:e4:71:10:e2:0a:
         67:02:62:55:9f:a0:cd:b6:e1:3c:f6:45:12:f2:02:52:06:64:
         55:99:d3:cb:88:d2:75:bc:4a:ca:d3:05:c8:d8:51:40:84:8c:
         42:a5:91:6f:77:d5:53:50:91:62:4b:06:73:ec:99:6e:e3:be:
         b5:22:89:15:3b:ed:81:43:d4:50:6f:29:f2:a9:13:74:a0:94:
         58:21:82:23:73:75:ca:72:21:82:51:3e:bd:04:11:c3:47:e7:
         78:ae:15:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:21:29 2025 by rpki-client