Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/323830343a346466343a3a2f33322d3438203d3e20323638323330.roa
File:                     323830343a346466343a3a2f33322d3438203d3e20323638323330.roa (raw, json)
Hash identifier:          2kfM1eHyQMiG6ZPZLM6MK1fN4v4JB8+qkzISObpeHJU=
Subject key identifier:   1B:3C:2B:79:B3:D2:6C:21:39:40:4C:1C:F0:96:74:78:2B:A1:3B:F1
Certificate issuer:       /CN=7C0A79A31B50DE2C1C7D99F248E560193C413735
Certificate serial:       19080D2B3DD7282B170D5E7451C6AD33C89CCA93
Authority key identifier: 7C:0A:79:A3:1B:50:DE:2C:1C:7D:99:F2:48:E5:60:19:3C:41:37:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0A79A31B50DE2C1C7D99F248E560193C413735.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/323830343a346466343a3a2f33322d3438203d3e20323638323330.roa
Signing time:             Mon 02 Jun 2025 19:53:36 +0000
ROA not before:           Mon 02 Jun 2025 19:48:36 +0000
ROA not after:            Mon 01 Jun 2026 19:53:36 +0000
asID:                     268230
IP address blocks:        2804:4df4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7C0A79A31B50DE2C1C7D99F248E560193C413735.crl
                          rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7C0A79A31B50DE2C1C7D99F248E560193C413735.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0A79A31B50DE2C1C7D99F248E560193C413735.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 13:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:08:0d:2b:3d:d7:28:2b:17:0d:5e:74:51:c6:ad:33:c8:9c:ca:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C0A79A31B50DE2C1C7D99F248E560193C413735
        Validity
            Not Before: Jun  2 19:48:36 2025 GMT
            Not After : Jun  1 19:53:36 2026 GMT
        Subject: CN=1B3C2B79B3D26C2139404C1CF09674782BA13BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f5:c7:3d:8c:aa:24:25:ae:ce:f8:6a:41:f1:
                    2e:5a:50:96:77:21:cb:fd:07:fe:89:7d:a1:65:ef:
                    c4:a1:b1:1c:cf:92:30:11:1b:f1:03:bf:11:7c:53:
                    67:30:12:aa:e9:14:c8:47:83:d3:b5:ce:34:27:30:
                    b4:44:4e:d6:e6:29:ac:91:2d:c9:f5:1e:73:e6:f2:
                    c1:2e:92:01:db:16:81:87:04:65:57:4d:b9:1d:0e:
                    25:f8:5a:d6:ba:df:97:53:a9:d1:75:29:1f:df:1c:
                    dc:84:3b:98:27:a5:af:16:b9:59:bf:5f:4f:ed:c8:
                    b4:de:09:57:96:68:56:de:41:33:e5:2a:49:17:54:
                    28:50:ee:3d:1c:21:a7:bb:a8:b3:1d:de:9e:a8:74:
                    45:f2:84:46:b3:6f:08:cf:49:2c:5a:31:8d:ea:cf:
                    dc:4a:27:b5:df:c2:08:e1:40:e5:09:ed:c3:4a:6f:
                    00:25:91:e5:1e:b0:52:74:a5:ef:2f:c5:75:bc:b5:
                    b3:56:d8:89:99:96:2b:40:99:87:1b:0c:f0:c1:89:
                    5a:6d:b0:84:af:de:ae:5a:43:d8:46:fb:d7:3e:4a:
                    85:be:0f:a7:98:7f:bf:4f:c4:6a:5c:59:a7:92:e1:
                    c3:fa:14:08:58:f2:51:4f:c1:54:2b:b0:c4:4b:fd:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3C:2B:79:B3:D2:6C:21:39:40:4C:1C:F0:96:74:78:2B:A1:3B:F1
            X509v3 Authority Key Identifier:
                keyid:7C:0A:79:A3:1B:50:DE:2C:1C:7D:99:F2:48:E5:60:19:3C:41:37:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/7C0A79A31B50DE2C1C7D99F248E560193C413735.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0A79A31B50DE2C1C7D99F248E560193C413735.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/0/323830343a346466343a3a2f33322d3438203d3e20323638323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4df4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:ee:37:bc:88:a6:2e:07:1a:59:30:c0:c6:83:f6:5c:6a:3f:
         54:7a:a6:5f:bb:17:6f:52:64:b9:53:be:71:dc:d1:57:7e:98:
         cf:a1:72:db:3f:64:2c:6a:4b:f7:27:30:21:00:5f:69:e4:a2:
         da:1b:da:c6:ed:2f:93:42:84:e4:42:4a:53:82:62:6a:0d:a6:
         86:f9:a8:f8:36:ea:e2:1d:fb:ff:cd:89:b2:46:22:e8:fc:3d:
         af:3e:3b:a8:17:9c:b3:9c:45:5a:bd:cf:e0:4e:f9:23:25:f5:
         23:99:26:39:65:a0:53:b5:fa:05:6b:f2:3b:69:2a:2d:81:29:
         86:67:d7:36:1d:22:53:97:45:fc:e0:13:dd:88:ca:56:9f:90:
         7c:35:68:c5:71:94:c6:a6:f5:3f:10:ee:cb:01:e4:c7:42:0f:
         d6:87:14:be:7f:40:06:15:19:09:a1:b7:43:f3:e4:c7:80:15:
         1a:54:c0:a5:d8:4a:c7:71:74:34:af:d8:d6:b9:e6:87:fa:f5:
         d2:e4:85:90:d0:65:a5:93:55:ae:96:b3:c2:3a:c2:0d:09:9a:
         d2:d1:c9:34:07:bd:f4:16:df:26:a5:41:c1:84:90:6a:94:41:
         d1:9e:26:a2:01:ba:22:c0:39:a5:5f:3b:46:b0:15:d7:73:a8:
         1d:7c:f4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:49:59 2025 by rpki-client