Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/323830343a356532383a3a2f33322d3332203d3e20323639303135.roa
File:                     323830343a356532383a3a2f33322d3332203d3e20323639303135.roa (raw, json)
Hash identifier:          0cvHNcgdOrsGhLiSeFftM1H24YlUBTHp9gRnAuF61bI=
Subject key identifier:   63:02:47:9D:6D:01:3C:18:58:53:21:D4:08:67:E9:0F:AA:27:89:95
Certificate issuer:       /CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
Certificate serial:       593F56EC350983E5063375F7FFB5E20E8238CE33
Authority key identifier: C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/323830343a356532383a3a2f33322d3332203d3e20323639303135.roa
Signing time:             Mon 21 Jul 2025 13:39:39 +0000
ROA not before:           Mon 21 Jul 2025 13:34:39 +0000
ROA not after:            Mon 20 Jul 2026 13:39:39 +0000
asID:                     269015
IP address blocks:        2804:5e28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl
                          rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 03:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3f:56:ec:35:09:83:e5:06:33:75:f7:ff:b5:e2:0e:82:38:ce:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C28F148D3E037C892C74D290F0D92B67DAE047D8
        Validity
            Not Before: Jul 21 13:34:39 2025 GMT
            Not After : Jul 20 13:39:39 2026 GMT
        Subject: CN=6302479D6D013C18585321D40867E90FAA278995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:9b:65:8d:8a:8b:00:f7:ab:8f:81:6c:ef:
                    8b:3d:40:21:d8:69:c2:f8:cd:33:f0:ba:2d:29:1f:
                    01:94:96:18:f1:02:4a:11:05:1f:e5:d3:33:3f:bb:
                    5f:d7:20:2b:95:7c:28:2a:52:c5:6e:e4:d1:ab:64:
                    b4:9b:d7:41:49:e9:8e:ea:86:9c:50:f9:07:9b:e2:
                    dd:a8:45:ba:e5:b0:5c:6e:68:79:20:9b:ff:95:2e:
                    07:e9:4e:49:c2:02:ea:04:b4:25:53:f2:a0:eb:7d:
                    21:43:50:b4:4b:dd:80:9f:81:15:2f:83:15:f7:6e:
                    ea:15:9a:6e:2b:ca:07:67:89:1c:37:65:83:70:8e:
                    06:34:d1:6a:f4:d1:2b:a0:cd:f8:de:58:09:3a:f5:
                    7e:04:03:e3:e3:d7:9f:9d:a1:d9:88:d7:44:79:fa:
                    b1:09:38:0f:e9:2c:32:4b:58:48:e0:55:08:4b:0a:
                    80:89:f8:0b:e2:06:9d:fa:b1:67:51:70:08:b2:cf:
                    be:8e:1a:f7:13:38:1d:c9:96:f6:9c:48:89:82:fe:
                    71:1e:8a:1a:15:dd:bb:f6:09:e7:cf:c8:8c:c2:a3:
                    58:05:a4:ea:da:ba:1e:ab:8b:1a:7a:d0:71:dd:d8:
                    03:e9:cb:41:f8:96:8f:c7:e2:44:9b:f1:10:9a:30:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:02:47:9D:6D:01:3C:18:58:53:21:D4:08:67:E9:0F:AA:27:89:95
            X509v3 Authority Key Identifier:
                keyid:C2:8F:14:8D:3E:03:7C:89:2C:74:D2:90:F0:D9:2B:67:DA:E0:47:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/C28F148D3E037C892C74D290F0D92B67DAE047D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C28F148D3E037C892C74D290F0D92B67DAE047D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/2/323830343a356532383a3a2f33322d3332203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:27:8e:92:1d:05:01:9f:4e:50:8c:1f:63:a6:79:bc:91:7e:
         a6:c1:36:79:4e:f1:27:32:8e:cf:c9:d4:6c:ad:da:2c:f3:94:
         4d:02:8c:3c:10:7f:dc:23:b8:3c:67:a8:cf:63:78:8d:62:72:
         65:5e:1c:7b:f9:e7:49:b2:52:3a:41:93:8a:5e:6a:e4:de:e3:
         ad:66:1d:87:ab:6e:a6:de:3d:a9:7d:1a:75:5e:78:f6:6e:6c:
         84:3f:4c:eb:fc:06:ee:08:d8:0c:00:6d:64:73:1f:f4:6a:e2:
         80:73:f8:9e:a8:99:bb:e6:bf:24:2f:02:99:38:f2:a6:88:58:
         3e:c9:88:93:98:e6:96:cb:5a:45:0e:1d:a2:7b:53:58:9e:b8:
         95:66:b4:2b:42:5e:82:64:89:07:81:66:d7:cd:04:56:83:b9:
         b0:1e:4b:45:55:95:59:57:f9:28:10:f7:2e:41:50:be:31:2d:
         60:6a:53:d8:06:59:ee:a4:7b:8b:e5:61:65:ee:00:41:5a:b8:
         32:3b:54:22:1d:ba:e9:87:0e:19:81:7d:4f:d6:d8:17:ef:0f:
         a7:b3:b4:f3:d8:24:41:27:db:22:23:75:21:6e:69:bc:2f:9e:
         e2:90:65:b9:5d:1a:6e:c0:d3:db:d1:2a:0d:a3:75:4e:af:b2:
         0b:66:82:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:49:50 2025 by rpki-client