Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/323830343a313030633a3a2f33322d3438203d3e20323633363136.roa
File:                     323830343a313030633a3a2f33322d3438203d3e20323633363136.roa (raw, json)
Hash identifier:          1epN5gmhilTn0NZGtcYXjxp0Ozk8o0LOGYUjm9+sEmI=
Subject key identifier:   EC:14:72:8A:00:E7:67:96:12:DD:F2:A1:30:9E:AF:CE:07:5C:23:AA
Certificate issuer:       /CN=FED723E7FEF416679E265910E6E617325917A4CC
Certificate serial:       08CD3271E7CA794B25CFF9F60022A2176DF10271
Authority key identifier: FE:D7:23:E7:FE:F4:16:67:9E:26:59:10:E6:E6:17:32:59:17:A4:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED723E7FEF416679E265910E6E617325917A4CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/323830343a313030633a3a2f33322d3438203d3e20323633363136.roa
Signing time:             Thu 12 Jun 2025 12:37:36 +0000
ROA not before:           Thu 12 Jun 2025 12:32:36 +0000
ROA not after:            Thu 11 Jun 2026 12:37:36 +0000
asID:                     263616
IP address blocks:        2804:100c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/FED723E7FEF416679E265910E6E617325917A4CC.crl
                          rsync://rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/FED723E7FEF416679E265910E6E617325917A4CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED723E7FEF416679E265910E6E617325917A4CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 03:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cd:32:71:e7:ca:79:4b:25:cf:f9:f6:00:22:a2:17:6d:f1:02:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED723E7FEF416679E265910E6E617325917A4CC
        Validity
            Not Before: Jun 12 12:32:36 2025 GMT
            Not After : Jun 11 12:37:36 2026 GMT
        Subject: CN=EC14728A00E7679612DDF2A1309EAFCE075C23AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:75:cb:8d:0a:33:b6:6f:8f:2f:39:cc:ce:25:
                    60:30:8d:f1:97:cc:4f:15:06:b5:d5:d0:89:7d:72:
                    2d:3b:a6:f2:c8:e5:79:29:5d:a6:01:f2:af:b6:ce:
                    cf:fb:d9:e9:4b:3e:0f:e2:3c:1d:2a:c4:8e:93:4f:
                    79:30:0f:f1:8c:28:03:13:32:a0:f8:86:c9:eb:8f:
                    f2:90:45:dc:36:c9:38:a7:b4:f8:8d:ca:b6:9d:db:
                    20:6c:da:d8:82:f5:93:36:ad:a2:4c:53:68:10:5f:
                    47:f6:0b:37:03:a5:79:62:f2:41:7d:30:b1:9c:7d:
                    be:ee:19:6a:f6:f7:fb:00:7e:60:46:74:e8:6c:53:
                    79:5f:39:74:6e:d5:e9:4c:55:06:28:4c:95:86:80:
                    35:8f:66:5d:fa:c7:e4:e2:e5:04:c5:04:94:ab:82:
                    a6:a8:a3:05:97:44:05:8c:3e:49:f0:6f:42:a0:b8:
                    e0:92:21:0c:33:84:7a:89:fb:6c:5b:51:64:04:56:
                    c5:d2:89:84:e4:cd:1e:bc:21:65:4e:14:0d:16:b8:
                    f3:d7:fe:cd:58:68:88:d8:f3:a7:89:7b:9f:67:fe:
                    20:4b:7f:53:3a:a7:af:da:e7:a0:90:8d:7e:e7:1e:
                    5a:13:f1:14:ac:20:72:94:ea:14:97:19:c5:84:ca:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:14:72:8A:00:E7:67:96:12:DD:F2:A1:30:9E:AF:CE:07:5C:23:AA
            X509v3 Authority Key Identifier:
                keyid:FE:D7:23:E7:FE:F4:16:67:9E:26:59:10:E6:E6:17:32:59:17:A4:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/FED723E7FEF416679E265910E6E617325917A4CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FED723E7FEF416679E265910E6E617325917A4CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du5HsiUqxmSUBiCeuwWpDUPUvTiF8CLFjRp8HBhV8sMr/0/323830343a313030633a3a2f33322d3438203d3e20323633363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:100c::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:83:df:99:d3:58:30:f9:f4:aa:ef:d6:2f:36:b9:b1:3b:5a:
         61:6e:48:db:35:52:8a:ea:3e:90:a0:c9:b5:c0:1e:17:fc:11:
         93:a8:bc:10:35:5a:07:84:7c:c6:e4:4e:29:ec:fc:55:84:a4:
         c9:1d:77:08:29:79:47:09:2b:96:ff:9d:f7:06:d4:2e:f9:ec:
         e5:01:e3:b1:80:a1:8c:0e:79:36:4d:3b:02:86:ea:e2:8f:fe:
         67:02:ba:0b:e9:aa:ab:c4:aa:fa:e9:52:ee:0c:13:ae:15:bc:
         c5:0b:bb:b6:cc:d0:c6:fc:90:01:97:a2:ff:3c:8c:db:7d:a4:
         97:44:54:fa:34:13:99:f5:54:59:0a:d9:e4:be:39:60:a6:7d:
         d2:16:90:ff:48:7d:64:e0:ad:1d:27:a0:2c:14:6a:14:2e:6e:
         f0:6d:db:a5:9c:eb:4b:83:e0:5e:01:14:c0:69:8d:56:05:80:
         d4:fd:d0:19:33:30:05:67:34:82:d0:11:03:a2:54:92:30:5f:
         9b:14:f7:93:3d:da:61:4e:21:a8:57:92:a4:34:c5:a8:30:36:
         2c:23:69:bf:e4:fb:8c:37:94:da:db:0d:37:1c:11:ca:b5:14:
         75:51:c9:92:6b:bb:24:1b:c0:75:7f:10:e5:90:be:18:33:76:
         a3:ad:f6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:51:40 2025 by rpki-client