Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a633030303a3a2f33342d3334203d3e20323730373431.roa
File:                     323830343a373061633a633030303a3a2f33342d3334203d3e20323730373431.roa (raw, json)
Hash identifier:          EHFfFT0rPWDp4rkwx1U89XDY+V13RRKnRM0S6GO88dw=
Subject key identifier:   3A:03:07:5F:E4:25:FC:9A:A3:16:6E:D0:10:4B:35:7A:FB:04:39:E6
Certificate issuer:       /CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
Certificate serial:       0E20B7424F0D718CAE16585971D79629CDE43503
Authority key identifier: 60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a633030303a3a2f33342d3334203d3e20323730373431.roa
Signing time:             Sat 02 Aug 2025 05:13:05 +0000
ROA not before:           Sat 02 Aug 2025 05:08:05 +0000
ROA not after:            Sat 01 Aug 2026 05:13:05 +0000
asID:                     270741
IP address blocks:        2804:70ac:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl
                          rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 23:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:20:b7:42:4f:0d:71:8c:ae:16:58:59:71:d7:96:29:cd:e4:35:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605FEF9057460FEC15E9DF06B37BF20541BC477E
        Validity
            Not Before: Aug  2 05:08:05 2025 GMT
            Not After : Aug  1 05:13:05 2026 GMT
        Subject: CN=3A03075FE425FC9AA3166ED0104B357AFB0439E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:02:eb:98:fa:43:f3:39:f0:e8:73:a2:39:
                    91:7e:02:70:d1:d6:97:ac:18:f6:40:94:88:2c:70:
                    12:37:fb:2c:14:3f:82:b1:06:d6:79:ce:10:1f:1d:
                    51:de:df:04:b6:bf:20:7a:3d:94:29:03:24:24:44:
                    36:88:1e:bd:24:f5:11:45:18:4a:be:6a:1f:88:e6:
                    66:f4:fc:3d:5b:80:76:3d:94:8d:8c:a1:ac:f8:52:
                    ad:db:a3:6c:4b:9f:da:11:db:21:9f:32:b7:3b:d9:
                    94:b3:e9:02:69:2c:2b:7e:a7:8b:e5:22:f5:e4:65:
                    85:56:de:c3:4d:a6:09:1b:6d:6e:b0:92:00:9d:04:
                    6b:8a:c3:2f:5a:5f:47:f1:a2:92:3f:b0:ac:d0:31:
                    7d:a0:ae:16:e6:64:eb:92:97:49:36:04:90:91:1d:
                    7c:ca:83:ac:3b:fa:f5:db:eb:06:8b:ea:f9:e9:75:
                    56:14:5e:77:b0:66:ed:f5:a8:81:5c:76:5c:50:0c:
                    77:25:7b:9a:55:21:de:44:43:36:c5:2e:c5:08:a3:
                    08:c0:dd:ef:9e:04:9e:0e:4a:14:3d:bb:20:b0:f1:
                    18:1d:09:7d:cf:a0:fa:d0:eb:7d:12:f3:a1:b5:69:
                    f0:bb:9c:0b:62:0b:94:07:f1:93:19:a1:d7:5e:b3:
                    d0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:03:07:5F:E4:25:FC:9A:A3:16:6E:D0:10:4B:35:7A:FB:04:39:E6
            X509v3 Authority Key Identifier:
                keyid:60:5F:EF:90:57:46:0F:EC:15:E9:DF:06:B3:7B:F2:05:41:BC:47:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/605FEF9057460FEC15E9DF06B37BF20541BC477E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605FEF9057460FEC15E9DF06B37BF20541BC477E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFTB8yVb6hhyofR7pTcYWQS7VDCjL4pHie7Vu8Nor2Bg/0/323830343a373061633a633030303a3a2f33342d3334203d3e20323730373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70ac:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3d:75:11:ff:af:44:ee:e6:dc:f8:40:1c:b8:81:9a:bc:2c:d8:
         27:76:88:e0:a7:b6:33:fb:d4:14:ca:69:6b:f4:c0:6e:fc:f4:
         2a:63:5a:ef:5f:53:b4:4c:ea:41:ad:b3:b4:73:62:f9:fa:95:
         92:3d:3d:1a:95:5f:be:68:ea:88:e1:b3:36:28:00:c5:d0:ae:
         82:a1:21:3c:ba:2c:d2:17:04:17:96:f1:da:36:b3:b8:96:a3:
         cc:5a:94:cb:9b:17:20:27:21:a2:4e:f5:46:a5:02:93:d5:0b:
         c8:54:e2:b9:c8:03:8c:22:57:3d:93:b4:35:f3:ec:a6:54:c4:
         95:23:d7:8c:56:86:d6:e5:3c:c3:06:e8:39:10:69:ed:83:1a:
         4a:d7:bd:06:42:df:79:ea:3b:fc:f8:fe:ec:9b:a1:5a:a5:45:
         9c:9b:0c:1f:66:ed:f9:c7:4b:38:00:1d:7a:d6:23:1a:99:ea:
         a6:fb:d4:05:9a:5f:24:fe:3e:43:68:0e:f6:f0:80:c7:c1:a1:
         79:7e:07:f0:9a:53:a4:65:43:d6:db:4b:80:8c:e5:e4:7f:34:
         3c:a6:36:a7:04:cc:0e:47:b4:e4:dd:32:46:58:cc:f4:f7:18:
         e0:d1:a7:20:90:a4:f1:ad:d4:ee:f5:a0:79:e6:27:63:a7:a0:
         4a:07:88:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:06:57 2025 by rpki-client