Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/323830343a343463303a3a2f33322d3438203d3e20323637363531.roa
File:                     323830343a343463303a3a2f33322d3438203d3e20323637363531.roa (raw, json)
Hash identifier:          T3ivKsVSsUvsos9mLJ0pb9lsSLSuW2LWW1anlJlseA8=
Subject key identifier:   A7:CF:95:46:52:36:CB:78:92:50:F2:90:71:87:A8:81:A3:3C:A8:D9
Certificate issuer:       /CN=B0CABD054E1BB6477F4EC5D7A434233DF6100BCB
Certificate serial:       3F4DA66B095CD853145EB85E70C0E91BC58890E8
Authority key identifier: B0:CA:BD:05:4E:1B:B6:47:7F:4E:C5:D7:A4:34:23:3D:F6:10:0B:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/323830343a343463303a3a2f33322d3438203d3e20323637363531.roa
Signing time:             Fri 06 Jun 2025 14:01:02 +0000
ROA not before:           Fri 06 Jun 2025 13:56:02 +0000
ROA not after:            Fri 05 Jun 2026 14:01:02 +0000
asID:                     267651
IP address blocks:        2804:44c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.crl
                          rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4d:a6:6b:09:5c:d8:53:14:5e:b8:5e:70:c0:e9:1b:c5:88:90:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0CABD054E1BB6477F4EC5D7A434233DF6100BCB
        Validity
            Not Before: Jun  6 13:56:02 2025 GMT
            Not After : Jun  5 14:01:02 2026 GMT
        Subject: CN=A7CF95465236CB789250F2907187A881A33CA8D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:23:bb:75:be:11:01:d1:f5:eb:b4:2c:84:
                    c7:5d:26:ad:48:d0:ad:df:57:79:9b:10:b4:45:30:
                    39:4e:41:71:ca:a8:e7:54:b9:62:a7:c1:2a:2a:a4:
                    db:3b:26:38:9f:a8:37:47:be:95:65:5d:6c:23:c5:
                    ac:83:fa:31:b7:4a:ed:2e:36:38:c1:b8:f7:82:57:
                    15:c2:52:e7:e9:3f:5e:c7:ea:a5:9e:b2:88:03:3f:
                    b8:8c:a0:9e:ed:07:93:5a:82:84:0c:7f:87:f0:81:
                    7e:fc:7d:1b:22:1f:0e:9f:c8:d5:fe:79:4b:d5:3a:
                    8e:b7:9e:ff:68:9c:92:60:91:05:40:f5:b7:a3:86:
                    f2:8f:4f:00:02:df:67:c0:64:08:80:d4:c5:cb:ac:
                    52:81:1a:da:8a:ad:7f:49:cc:5b:46:e8:99:31:86:
                    1a:b2:42:09:5c:c6:ed:02:fb:be:71:a5:61:f2:05:
                    8d:cf:6e:f1:12:e8:f2:49:37:2e:eb:2c:0e:b4:46:
                    08:2c:c0:e0:fb:89:06:c3:b2:5b:14:36:db:d6:27:
                    60:53:4a:65:2c:c1:16:2a:1a:4d:e4:bd:42:0b:85:
                    a9:44:ec:f9:29:d1:36:21:3c:80:1a:bc:16:4b:e7:
                    5e:ce:57:ad:07:57:8d:89:2f:84:9b:b9:c7:0e:85:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CF:95:46:52:36:CB:78:92:50:F2:90:71:87:A8:81:A3:3C:A8:D9
            X509v3 Authority Key Identifier:
                keyid:B0:CA:BD:05:4E:1B:B6:47:7F:4E:C5:D7:A4:34:23:3D:F6:10:0B:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0CABD054E1BB6477F4EC5D7A434233DF6100BCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4WiFyuFRNKbbrkMa4EfAQZSNE3WYBKd8fwqKfFAWmCXy/0/323830343a343463303a3a2f33322d3438203d3e20323637363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d6:d0:68:58:e8:3b:b3:0f:b2:5d:28:81:53:15:ce:42:af:32:
         43:30:e9:8d:04:ba:cd:36:d3:49:4e:64:d9:79:50:2e:f0:b7:
         53:47:32:bc:e8:9c:ce:7c:ca:1f:82:e3:f0:90:c4:1d:7a:c3:
         da:7b:09:59:f8:33:10:45:22:de:ff:b8:96:9b:9f:c0:20:e3:
         5f:7a:ce:6c:98:3b:32:92:e7:25:2d:33:de:ef:d3:10:ed:c6:
         e0:30:b0:d0:f6:1b:74:9f:70:22:f7:c2:3a:e3:53:21:39:11:
         7d:49:40:72:21:72:1e:b4:14:b8:3e:a1:4a:73:24:c5:73:f5:
         b6:b4:c2:8c:f0:56:53:c0:95:75:5b:25:83:0a:35:95:1c:1c:
         77:c0:ab:0e:74:26:d8:36:8f:0a:5a:9a:f5:d7:f2:c7:11:e0:
         ae:3b:5c:26:28:74:a6:5f:96:e9:e9:f9:f7:26:3a:99:eb:47:
         52:6a:fc:37:cc:2c:dd:b7:dd:17:6d:9d:4f:03:3d:c0:0f:a4:
         a0:da:33:6a:87:78:f7:37:ce:93:f3:cc:81:2c:f6:de:45:8d:
         ac:a1:d0:67:d0:7a:a1:55:a3:0c:aa:cf:8d:ab:3b:76:3c:0c:
         17:6e:13:51:9b:4a:76:de:96:0a:fa:a9:92:39:80:9f:d8:97:
         c2:50:4e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:15:59 2025 by rpki-client