Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          /vXGivaASQ6p58hSvGVjAQr4aCJR/+/yQEJMRnriLII=
Subject key identifier:   F4:24:1B:49:73:1F:2C:C9:70:E8:61:4C:EA:FE:4A:17:0A:F3:5F:2A
Certificate issuer:       /CN=ADFB743F78B2F288155F57415C2B114473B48D92
Certificate serial:       1ED769E1F2B9ADC4627E4C986213AB43E77F1B2F
Authority key identifier: AD:FB:74:3F:78:B2:F2:88:15:5F:57:41:5C:2B:11:44:73:B4:8D:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 14 Jun 2025 17:25:51 +0000
ROA not before:           Sat 14 Jun 2025 17:20:51 +0000
ROA not after:            Sat 13 Jun 2026 17:25:51 +0000
asID:                     274726
IP address blocks:        2804:92a8::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 06:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:d7:69:e1:f2:b9:ad:c4:62:7e:4c:98:62:13:ab:43:e7:7f:1b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFB743F78B2F288155F57415C2B114473B48D92
        Validity
            Not Before: Jun 14 17:20:51 2025 GMT
            Not After : Jun 13 17:25:51 2026 GMT
        Subject: CN=F4241B49731F2CC970E8614CEAFE4A170AF35F2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0c:40:a5:43:9e:e8:9f:65:fe:8d:ca:30:d9:
                    8a:64:fd:15:91:37:67:f1:c2:37:c1:26:0c:ff:ba:
                    91:77:33:d9:ee:a3:e7:da:5a:6a:bb:46:d2:52:80:
                    cd:1c:ec:87:6e:95:ab:77:b1:46:79:6f:a3:15:d7:
                    74:24:36:09:4b:dc:09:77:15:15:ba:80:bd:03:c7:
                    99:33:ca:16:58:98:ed:71:53:13:4f:01:4e:c1:7a:
                    f8:73:3a:42:f7:8d:db:07:41:76:5c:a0:7a:f7:ff:
                    f7:f3:22:64:ee:3f:1a:51:6a:07:3b:c0:a9:8d:23:
                    a8:49:53:99:f3:1a:2a:f5:5f:b9:a4:34:31:be:9d:
                    9a:7b:01:fe:2e:4c:06:57:b3:39:b8:33:22:6a:40:
                    a8:96:e1:8d:22:b1:df:bd:29:cd:29:0b:3c:75:7d:
                    5c:56:85:0f:5f:45:ed:38:6d:ca:34:b1:9f:68:c2:
                    b5:ac:75:b3:a7:a7:9b:2b:8b:53:1b:c5:8f:88:30:
                    0f:c8:85:24:49:59:99:7a:00:48:de:c2:e2:77:a4:
                    04:40:a3:d2:28:a7:fa:09:aa:4d:cb:d4:5f:97:c4:
                    5e:18:4d:66:97:43:4e:88:dc:25:7f:cc:6a:4b:45:
                    e0:83:fd:56:36:36:df:a8:95:f0:32:0f:40:1e:66:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:1B:49:73:1F:2C:C9:70:E8:61:4C:EA:FE:4A:17:0A:F3:5F:2A
            X509v3 Authority Key Identifier:
                keyid:AD:FB:74:3F:78:B2:F2:88:15:5F:57:41:5C:2B:11:44:73:B4:8D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/36

    Signature Algorithm: sha256WithRSAEncryption
         77:eb:7b:d8:5e:ed:44:cb:d7:07:4e:ab:9a:21:f2:b4:06:05:
         f7:b0:f8:d7:f2:6a:66:2c:07:95:e9:4e:bf:45:fb:14:f1:2b:
         be:c3:95:96:58:d6:eb:9d:9c:5b:1b:37:e7:12:f3:98:2e:53:
         e8:86:77:fc:41:71:77:fd:65:89:da:c9:14:04:84:9d:8d:3e:
         bf:de:4b:28:fe:93:ad:2b:fd:ce:81:ed:9c:51:eb:94:93:23:
         2b:37:fd:c5:42:14:68:e2:ab:2b:11:74:e0:b6:9b:d4:95:4a:
         09:96:30:d6:70:95:94:ca:8a:04:74:4d:1d:44:52:69:cc:f0:
         57:27:2f:95:b0:f0:a5:92:fd:1a:78:11:34:82:1c:4d:93:75:
         91:05:59:b8:0e:5b:6b:c5:30:a6:bd:b8:2d:3b:06:8d:55:71:
         0b:f7:9d:33:b5:30:ee:f0:b1:6a:d3:8b:da:da:30:58:3e:d6:
         52:d3:50:27:3f:6f:fb:a6:d2:9c:eb:df:d8:b8:da:08:14:4f:
         85:38:0f:8a:d2:7f:3a:f1:8d:0f:79:ad:d1:3e:9e:26:38:cc:
         9e:36:57:03:3a:42:ea:1a:ae:e4:81:bc:25:fe:1f:1e:96:b9:
         36:d9:9e:c4:23:e7:d2:6d:94:fe:c0:3e:a0:49:e9:5e:23:8c:
         99:10:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:34:19 2025 by rpki-client