Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/323830343a353330343a3a2f33322d3438203d3e20323638353537.roa
File:                     323830343a353330343a3a2f33322d3438203d3e20323638353537.roa (raw, json)
Hash identifier:          wqKlqVL7W+Kb2fvhbIalxcQZ7cEzpbHNTNi30laWQyU=
Subject key identifier:   DC:8E:8C:D6:B1:A0:D3:1E:A6:9C:15:84:6A:D2:E9:A2:C2:38:BD:02
Certificate issuer:       /CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
Certificate serial:       2AAB8E94FF439908FB03778260EA39B91EAED55A
Authority key identifier: B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/323830343a353330343a3a2f33322d3438203d3e20323638353537.roa
Signing time:             Mon 16 Jun 2025 20:03:03 +0000
ROA not before:           Mon 16 Jun 2025 19:58:03 +0000
ROA not after:            Mon 15 Jun 2026 20:03:03 +0000
asID:                     268557
IP address blocks:        2804:5304::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl
                          rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 06 Aug 2025 09:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ab:8e:94:ff:43:99:08:fb:03:77:82:60:ea:39:b9:1e:ae:d5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8
        Validity
            Not Before: Jun 16 19:58:03 2025 GMT
            Not After : Jun 15 20:03:03 2026 GMT
        Subject: CN=DC8E8CD6B1A0D31EA69C15846AD2E9A2C238BD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c0:a7:f4:ea:33:bb:89:94:e3:f8:b4:38:3f:
                    61:b5:be:bf:f9:d9:6b:de:9f:80:f3:ac:b3:94:85:
                    28:e7:f3:ff:30:3d:9c:ce:05:b8:b0:28:3a:bc:10:
                    a5:26:6f:69:6f:a8:c5:54:1f:fa:a5:cb:e2:1e:90:
                    56:5b:29:c9:4a:66:17:88:c1:b8:4b:50:5a:6a:a1:
                    e4:d7:22:3d:e1:df:00:9d:bc:ea:8c:61:cc:8b:89:
                    87:80:b5:91:46:4e:b0:99:0d:ba:25:9f:65:62:86:
                    fa:55:47:18:bb:f6:3d:25:17:4e:09:3e:c8:e4:d7:
                    cf:98:77:8c:c6:16:c9:82:4d:db:04:01:27:38:a0:
                    30:ed:bf:a5:d8:b9:9d:eb:83:74:cc:c6:5e:fd:5c:
                    74:cd:86:8e:71:b4:26:66:49:cf:e4:29:c2:6a:b4:
                    79:9b:c3:bb:ef:b8:42:df:6f:05:e5:6a:1c:c0:42:
                    d6:70:ff:d1:1d:9f:17:69:05:03:f5:89:50:2a:2b:
                    90:9b:98:35:8b:0d:8f:a7:67:ee:28:79:a0:25:93:
                    cb:96:57:6c:75:c4:cb:94:50:a0:08:51:43:e3:cc:
                    5c:be:c8:e7:c3:4f:e1:d5:82:1d:f5:ae:78:f3:f6:
                    94:05:2f:4a:b1:b8:f5:3b:3e:f9:c1:62:97:2c:f4:
                    b5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8E:8C:D6:B1:A0:D3:1E:A6:9C:15:84:6A:D2:E9:A2:C2:38:BD:02
            X509v3 Authority Key Identifier:
                keyid:B0:CA:65:D9:C1:CC:96:DA:8D:04:D5:27:F2:AA:10:BA:40:DF:DF:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CA65D9C1CC96DA8D04D527F2AA10BA40DFDFF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CA9fNmxzRzNNYPQuPtq2dMqbPLc5WisyZpszrLAHCL4f/0/323830343a353330343a3a2f33322d3438203d3e20323638353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5304::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:6f:ea:c7:d6:84:f0:87:58:78:55:cc:c8:ad:ac:31:94:24:
         03:7b:61:6b:7d:01:7a:63:a7:ef:63:8e:84:f3:0a:a1:f7:0a:
         4c:d1:66:84:08:3b:b6:64:49:6d:35:7b:4f:df:cd:51:e0:19:
         1e:db:16:72:04:b0:0a:06:56:ab:c2:d0:a7:79:c2:3d:81:03:
         de:7a:78:24:e7:af:bf:b9:e5:d2:ab:5c:9d:56:fe:1b:92:88:
         96:1c:b2:c0:8e:06:d3:a2:74:52:2f:55:09:fe:c5:36:f9:9a:
         eb:6b:96:d5:85:66:f6:e6:2a:50:9b:93:73:59:87:3e:c4:91:
         c3:4b:07:3a:e1:28:87:62:17:05:19:ee:fe:82:64:78:e5:02:
         fd:98:d1:59:6d:57:d8:e0:dd:5b:2d:f1:6c:9c:0d:48:17:bb:
         ef:58:17:bf:f1:f4:b0:e8:18:e3:a7:3f:97:7a:ed:b4:f3:3c:
         b6:0e:a4:62:71:29:af:1d:f2:ff:35:ac:57:a1:47:4f:32:a4:
         0f:e6:01:06:31:a4:09:50:82:67:61:6d:10:36:65:53:d1:08:
         a7:e7:de:db:07:57:3f:63:1a:23:be:1e:c5:c5:84:ec:f0:93:
         46:e6:cc:71:11:01:fc:2d:47:6c:3b:4a:c6:76:ce:7e:7a:0a:
         7c:10:8e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:14:09 2025 by rpki-client