Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/323830343a363161633a3a2f33322d313238203d3e20323639323439.roa
File:                     323830343a363161633a3a2f33322d313238203d3e20323639323439.roa (raw, json)
Hash identifier:          mGniI9SUYK2irM5PQk9883zzUp0efGzBmnkGKuCgIpo=
Subject key identifier:   1F:EB:D9:DE:DB:84:B6:B1:D0:60:82:5A:5D:A6:EE:19:A0:AF:4D:24
Certificate issuer:       /CN=4C220782AEE345F8F20B4B31D947B80C36C6C6BF
Certificate serial:       570403CC5C5589D3C7C462D99624DB8DE405A7E2
Authority key identifier: 4C:22:07:82:AE:E3:45:F8:F2:0B:4B:31:D9:47:B8:0C:36:C6:C6:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/323830343a363161633a3a2f33322d313238203d3e20323639323439.roa
Signing time:             Wed 02 Jul 2025 14:30:16 +0000
ROA not before:           Wed 02 Jul 2025 14:25:16 +0000
ROA not after:            Wed 01 Jul 2026 14:30:16 +0000
asID:                     269249
IP address blocks:        2804:61ac::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.crl
                          rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 22:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:04:03:cc:5c:55:89:d3:c7:c4:62:d9:96:24:db:8d:e4:05:a7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C220782AEE345F8F20B4B31D947B80C36C6C6BF
        Validity
            Not Before: Jul  2 14:25:16 2025 GMT
            Not After : Jul  1 14:30:16 2026 GMT
        Subject: CN=1FEBD9DEDB84B6B1D060825A5DA6EE19A0AF4D24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:cc:e6:89:4c:3a:c8:8b:81:d9:86:10:b1:
                    53:c6:d1:35:71:c0:4f:64:41:b6:ff:9a:51:f8:57:
                    75:cf:ca:50:e8:58:90:a4:39:00:79:bd:da:e3:65:
                    16:d6:df:41:a8:14:c6:18:b8:6d:42:91:02:4e:09:
                    dd:dd:6e:f2:bd:d8:e3:a9:3b:ff:4b:06:72:9a:16:
                    83:07:65:bb:83:45:c5:42:2a:fa:1b:8d:3f:e4:e0:
                    4d:d6:49:09:0c:53:7c:f5:ce:28:a2:93:2d:95:87:
                    88:b6:8d:35:79:06:73:fe:4d:eb:d3:0f:f2:69:39:
                    dd:04:37:2c:07:d2:bd:52:a2:91:44:d4:59:3d:91:
                    81:ed:90:b9:6b:db:23:15:ff:e6:1d:44:68:cb:d7:
                    45:1f:8b:7f:fd:e3:c9:a1:bb:86:37:81:ea:38:66:
                    65:99:9b:68:94:8a:01:17:2a:f7:89:0f:b1:c6:b4:
                    aa:e1:c4:10:35:0f:d6:d4:9e:23:45:d1:aa:1a:7f:
                    f8:65:32:53:b4:e1:d4:81:26:94:f6:97:1c:8b:9d:
                    85:c6:2c:88:27:8f:fa:a2:3d:f1:fc:8d:fa:b2:58:
                    11:cf:18:f6:6a:8b:e6:c8:a1:7f:a7:39:45:e8:76:
                    a6:7f:e5:03:69:37:e8:fb:fc:74:3f:8e:2f:05:a9:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EB:D9:DE:DB:84:B6:B1:D0:60:82:5A:5D:A6:EE:19:A0:AF:4D:24
            X509v3 Authority Key Identifier:
                keyid:4C:22:07:82:AE:E3:45:F8:F2:0B:4B:31:D9:47:B8:0C:36:C6:C6:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C220782AEE345F8F20B4B31D947B80C36C6C6BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQ6gdeYaGqdpP6SY9ZHsKb5qc2rDm9ZZY7YLw3aemrgZ/0/323830343a363161633a3a2f33322d313238203d3e20323639323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:0d:a8:94:22:b0:83:41:ff:f5:8f:43:86:cc:ea:d9:b8:
         df:b4:9b:64:ec:c5:78:15:ae:7f:48:ed:65:71:f5:fa:13:3d:
         0f:72:fe:a1:00:f8:65:13:cc:62:5b:bc:ce:c3:12:3e:fe:58:
         f5:ad:a0:d2:1c:3f:c2:cd:9f:3d:a5:80:fd:5e:c3:c2:70:63:
         a0:19:eb:7b:4f:22:92:66:ac:73:52:54:d6:7a:c0:dd:93:42:
         48:e5:80:59:03:5b:84:ac:35:ab:51:ec:28:50:33:3b:ae:12:
         e5:23:b2:29:c5:3d:e9:bb:64:e5:59:47:2f:15:52:fc:eb:b0:
         40:55:1e:48:2a:da:16:48:5d:49:37:d8:6b:c5:35:05:d9:90:
         6f:e8:7e:59:15:34:d2:d5:5d:2c:fe:b0:91:d4:57:c2:88:be:
         90:ab:d2:24:56:86:af:b7:dd:55:4f:9d:96:78:2a:5d:36:c4:
         dc:c7:1e:a3:2f:2e:e2:b0:0d:83:6b:72:f7:59:80:c4:82:23:
         06:07:42:9d:bb:d5:c2:27:92:f8:2a:9a:9d:fc:e9:20:b0:91:
         cf:5b:f6:b4:6d:23:8c:8e:fa:e4:9a:ac:e6:d5:16:74:cf:4e:
         13:0e:78:c8:c8:19:9e:4f:1e:a1:2b:33:6f:f5:6b:9f:0d:60:
         32:1b:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:31 2025 by rpki-client