Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/323830343a333766303a3a2f33322d3438203d3e20323636343435.roa
File:                     323830343a333766303a3a2f33322d3438203d3e20323636343435.roa (raw, json)
Hash identifier:          mp3DE1dY71Dzp5STxayJnSUYiKkApog44Se6iCHaJAk=
Subject key identifier:   7A:7F:C0:86:7F:EE:70:0D:1C:BE:87:14:25:C8:E9:F6:40:DC:41:71
Certificate issuer:       /CN=7C0A79A31B50DE2C1C7D99F248E560193C413735
Certificate serial:       6DDE88D79C29A2DE2FC86557828ABBDEBA67D5D4
Authority key identifier: 7C:0A:79:A3:1B:50:DE:2C:1C:7D:99:F2:48:E5:60:19:3C:41:37:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0A79A31B50DE2C1C7D99F248E560193C413735.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/323830343a333766303a3a2f33322d3438203d3e20323636343435.roa
Signing time:             Mon 02 Jun 2025 19:52:58 +0000
ROA not before:           Mon 02 Jun 2025 19:47:58 +0000
ROA not after:            Mon 01 Jun 2026 19:52:58 +0000
asID:                     266445
IP address blocks:        2804:37f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7C0A79A31B50DE2C1C7D99F248E560193C413735.crl
                          rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7C0A79A31B50DE2C1C7D99F248E560193C413735.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0A79A31B50DE2C1C7D99F248E560193C413735.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 19:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:de:88:d7:9c:29:a2:de:2f:c8:65:57:82:8a:bb:de:ba:67:d5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C0A79A31B50DE2C1C7D99F248E560193C413735
        Validity
            Not Before: Jun  2 19:47:58 2025 GMT
            Not After : Jun  1 19:52:58 2026 GMT
        Subject: CN=7A7FC0867FEE700D1CBE871425C8E9F640DC4171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:5d:f6:44:a2:40:b6:56:bb:0f:2b:02:04:
                    3d:76:96:29:2f:53:da:fd:1f:6b:f9:0b:50:0a:96:
                    e9:5d:e1:66:26:0a:6e:97:57:f1:73:73:21:88:de:
                    7d:2e:1a:c1:16:b1:03:55:53:11:7f:b3:ab:ce:25:
                    d7:aa:fa:3d:b7:7e:f0:2d:2a:fc:a4:ca:a5:73:2d:
                    7b:fb:81:57:86:59:f7:01:ca:9d:5e:cb:86:af:f8:
                    60:9e:8e:3f:df:bc:d0:7f:f4:6c:12:00:1e:d2:d0:
                    2f:ba:14:3f:36:9b:a5:03:4d:d1:8b:aa:73:31:e0:
                    9d:c2:4c:b6:33:72:44:40:0d:0f:3d:dc:59:e8:89:
                    80:35:58:c8:4a:44:49:9e:1f:68:c6:c2:ac:f1:67:
                    a7:c3:04:f4:35:2f:08:65:98:00:83:71:ca:a1:4a:
                    b0:90:dc:0c:2c:77:01:4c:3f:7b:c3:0f:2d:30:17:
                    a4:61:5d:06:e5:d6:b8:5b:6c:bc:8d:ea:02:8f:e4:
                    84:78:6b:fa:eb:6d:67:90:84:44:fd:dd:69:7a:f0:
                    9f:b0:3c:29:b7:15:6d:e3:b0:18:e1:de:32:78:63:
                    fe:dc:e7:80:43:6f:e1:eb:d6:26:68:2c:35:8a:3d:
                    d9:f7:4a:f0:51:a0:07:95:58:89:5c:0a:22:5b:97:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7F:C0:86:7F:EE:70:0D:1C:BE:87:14:25:C8:E9:F6:40:DC:41:71
            X509v3 Authority Key Identifier:
                keyid:7C:0A:79:A3:1B:50:DE:2C:1C:7D:99:F2:48:E5:60:19:3C:41:37:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7C0A79A31B50DE2C1C7D99F248E560193C413735.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0A79A31B50DE2C1C7D99F248E560193C413735.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/323830343a333766303a3a2f33322d3438203d3e20323636343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:a6:c5:a5:f2:bf:58:33:38:30:16:21:7d:85:43:7b:22:eb:
         3e:e3:bb:2a:ab:25:ab:34:37:ee:4b:e7:56:52:54:75:d1:04:
         76:f8:24:45:a4:9b:fb:54:24:61:1e:ff:a8:92:bc:17:b7:aa:
         80:74:93:ca:06:1b:6e:06:9e:8b:0e:54:e7:d4:88:18:ff:49:
         f2:0c:1e:0b:c5:b8:df:26:2e:24:38:85:2a:d9:cc:31:27:35:
         c0:35:68:de:af:c2:9c:8a:2b:28:ad:47:58:e9:b6:a4:b8:de:
         b6:61:1a:a5:11:91:02:00:62:35:46:d0:16:41:a2:dc:f5:44:
         c1:ca:10:51:a1:a1:e7:f3:cc:5c:e3:57:89:a2:c3:1c:3c:dd:
         14:e5:ff:c1:68:45:fe:4e:8f:bf:77:a6:3e:a0:34:73:cd:f7:
         99:9b:3a:1e:46:40:3f:b7:42:4d:54:07:ac:36:8c:03:91:01:
         4b:ca:b9:74:d3:f2:f3:b3:d4:42:e9:81:45:6a:11:f0:e8:f9:
         11:5d:1d:8b:38:f8:e3:e4:14:f9:e6:bb:2a:28:78:fd:11:f2:
         59:e7:f7:9d:fa:fa:20:82:5b:ad:f0:12:17:25:d9:b5:89:af:
         74:27:3d:c6:7a:28:1e:35:92:8d:68:f5:e9:69:a5:59:54:6c:
         8c:a8:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:00:04 2025 by rpki-client