Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f33382d3338203d3e20323632373239.roa
File:                     323830343a313664383a3a2f33382d3338203d3e20323632373239.roa (raw, json)
Hash identifier:          P73PRhhpr3rWpPFTNK5o/JjsmyN120QbrBPU71xqMq4=
Subject key identifier:   5B:D6:80:C7:79:34:54:AD:29:CC:4A:6B:4C:A8:30:8B:18:B0:63:AB
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       1B4DB2CD10B53DC3C7EA8963AC8660F5D720C5E2
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f33382d3338203d3e20323632373239.roa
Signing time:             Mon 16 Jun 2025 14:10:47 +0000
ROA not before:           Mon 16 Jun 2025 14:05:47 +0000
ROA not after:            Mon 15 Jun 2026 14:10:47 +0000
asID:                     262729
IP address blocks:        2804:16d8::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 02:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4d:b2:cd:10:b5:3d:c3:c7:ea:89:63:ac:86:60:f5:d7:20:c5:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Jun 16 14:05:47 2025 GMT
            Not After : Jun 15 14:10:47 2026 GMT
        Subject: CN=5BD680C7793454AD29CC4A6B4CA8308B18B063AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:6e:b5:de:1c:4f:48:13:e3:27:23:2a:03:
                    9d:6c:e6:30:19:0b:b3:5f:78:06:68:8a:bb:85:db:
                    84:d0:5a:51:c9:33:74:38:ca:e8:4c:10:fc:6e:8e:
                    1c:59:63:98:44:bd:2b:45:cb:a1:56:a6:01:50:ba:
                    93:6e:56:78:1e:39:35:ff:15:70:98:e7:8e:bd:67:
                    8d:e4:3b:8e:22:b2:84:44:cd:f8:9b:a2:07:a2:1f:
                    18:6f:42:07:cb:a6:d1:1a:ff:ca:5f:af:d6:3d:31:
                    84:b8:64:57:b6:54:5b:39:c5:b3:02:ec:29:56:23:
                    48:05:c8:ae:50:45:a0:01:9b:78:dc:99:10:26:ac:
                    a9:87:29:5a:ba:6c:12:cf:22:b5:38:5a:76:0b:f7:
                    50:64:30:35:de:4e:1a:7a:d5:85:7a:91:6d:4c:5a:
                    57:50:97:87:d6:77:8a:cd:a2:46:e7:80:1b:dd:34:
                    6a:aa:46:55:2c:42:87:d2:ca:d0:71:0d:0e:c6:81:
                    61:0b:17:a2:ea:55:42:e8:14:fc:9b:9d:ff:23:c6:
                    d0:0d:9d:bb:c7:75:7e:5f:c2:0b:e2:e4:a7:12:e8:
                    d9:68:2e:f0:59:dc:c2:cb:22:3e:b4:7e:e3:b1:bb:
                    6e:46:c5:89:7f:85:db:0e:fb:0a:b9:cc:d2:ec:ff:
                    9b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D6:80:C7:79:34:54:AD:29:CC:4A:6B:4C:A8:30:8B:18:B0:63:AB
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a3a2f33382d3338203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16d8::/38

    Signature Algorithm: sha256WithRSAEncryption
         90:e2:d2:fa:8d:68:3e:33:93:49:43:09:73:25:20:b3:21:4e:
         10:35:e9:14:31:2a:f0:b9:1f:b9:84:c7:2e:fe:9b:69:7c:ba:
         d4:cc:6d:56:b3:1f:7c:23:9e:1f:54:bf:6a:5e:45:3a:ab:80:
         15:d2:7a:b4:e4:02:97:1d:1b:e8:f4:7a:78:c3:4c:0c:1c:26:
         e3:a0:5e:fe:0c:b4:6b:eb:c4:a8:1a:de:fd:f6:14:26:cd:7e:
         08:bd:61:23:25:e4:74:11:2d:fc:d6:31:bb:9a:30:7f:5b:c9:
         ce:66:e8:2d:d9:c0:0f:8d:c7:8e:a5:10:1f:3e:38:bf:ef:60:
         f2:33:39:86:d9:11:c5:2f:79:f7:19:4f:7b:e3:84:56:aa:8d:
         10:40:8c:a5:a3:04:a8:48:d9:4e:33:b7:6d:d0:72:3a:ab:98:
         25:f4:18:f4:39:69:af:a4:76:4f:af:5c:84:2e:af:41:84:28:
         17:96:dc:75:62:15:67:e3:22:b9:5b:bc:ab:25:93:ab:15:8c:
         74:59:2a:7f:ba:af:a2:49:be:d4:01:21:de:4e:09:43:c1:5a:
         a0:0d:94:b7:0a:73:09:b3:e0:f7:ff:f5:59:07:b5:4a:1f:87:
         6b:fd:c8:25:25:12:2f:e1:2d:14:31:dc:c9:68:37:80:1c:74:
         f5:78:42:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:25:07 2025 by rpki-client