Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/323830343a326536303a3a2f33322d3332203d3e20323635333432.roa
File:                     323830343a326536303a3a2f33322d3332203d3e20323635333432.roa (raw, json)
Hash identifier:          7sMyhfu4C4Flvw0AGRGx5QdhTTA0kL7qvEMI7G15Wsc=
Subject key identifier:   BE:75:6D:01:52:0F:29:5B:8D:F4:17:5A:B0:B4:4C:D4:7C:E8:EE:41
Certificate issuer:       /CN=252608E1AF372BD4691CB17C734D43ADB468E835
Certificate serial:       7F9F0BF1609B70D8187A3350E82B5302AD94FEBA
Authority key identifier: 25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/323830343a326536303a3a2f33322d3332203d3e20323635333432.roa
Signing time:             Mon 26 May 2025 13:58:54 +0000
ROA not before:           Mon 26 May 2025 13:53:54 +0000
ROA not after:            Mon 25 May 2026 13:58:54 +0000
asID:                     265342
IP address blocks:        2804:2e60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.crl
                          rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:16:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9f:0b:f1:60:9b:70:d8:18:7a:33:50:e8:2b:53:02:ad:94:fe:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252608E1AF372BD4691CB17C734D43ADB468E835
        Validity
            Not Before: May 26 13:53:54 2025 GMT
            Not After : May 25 13:58:54 2026 GMT
        Subject: CN=BE756D01520F295B8DF4175AB0B44CD47CE8EE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:70:fc:75:c1:52:e2:c0:44:7a:2a:da:f4:
                    93:4e:10:04:99:c1:d5:53:4f:6e:d2:af:1b:d0:79:
                    ad:8f:e6:9d:76:bb:5c:3c:f0:61:a9:71:5c:92:c7:
                    9e:24:4c:63:82:b9:0d:84:8e:9f:98:0b:be:be:30:
                    92:3f:e9:93:f0:98:cf:6a:e9:43:1b:ed:dd:71:08:
                    60:44:69:9a:13:30:2f:9a:a0:be:eb:f8:f1:d2:58:
                    c7:ca:58:30:e6:81:82:39:93:ba:dc:57:58:f7:fd:
                    e7:1d:91:21:11:97:95:de:f0:18:3d:b8:c4:13:88:
                    b9:10:86:58:c6:c2:0f:c8:32:4e:f7:4c:60:1c:3a:
                    c5:07:42:78:c5:76:cd:02:5c:f6:bb:13:93:81:c6:
                    47:c9:b1:f3:86:85:37:0b:4a:53:35:9d:28:05:bc:
                    98:3a:15:3f:5c:58:03:8f:c9:67:1c:7f:58:6a:2c:
                    99:e2:05:f5:cb:c3:90:2d:20:06:37:f6:1c:7c:61:
                    b9:a4:85:6a:ca:18:60:1d:33:6f:af:18:8b:13:8d:
                    3b:d6:f1:3d:2d:53:c0:df:c4:63:11:5f:cc:7e:45:
                    7d:aa:c1:fe:69:f5:3c:d8:23:05:7a:7e:8a:08:76:
                    00:fd:92:01:dd:07:dd:d4:b1:82:5e:92:6c:d2:d8:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:75:6D:01:52:0F:29:5B:8D:F4:17:5A:B0:B4:4C:D4:7C:E8:EE:41
            X509v3 Authority Key Identifier:
                keyid:25:26:08:E1:AF:37:2B:D4:69:1C:B1:7C:73:4D:43:AD:B4:68:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/252608E1AF372BD4691CB17C734D43ADB468E835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/252608E1AF372BD4691CB17C734D43ADB468E835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4X7eoTWokwgvkKJgDzJjKP69hhkRRVNCXQtzTLj1VwoL/0/323830343a326536303a3a2f33322d3332203d3e20323635333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e60::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:de:ba:87:0f:bb:e6:8b:57:c9:5b:64:fd:8e:4f:90:09:
         1e:8e:18:d7:9e:21:36:04:33:2b:a1:34:5d:a3:0c:d6:c5:de:
         5d:1c:cb:e6:f6:48:f6:44:c7:58:ee:20:4d:b8:82:9f:c2:68:
         ff:b7:40:27:98:63:28:e8:86:8c:ff:fc:06:ae:4f:87:f4:05:
         6d:0f:6f:fc:9f:8b:5c:72:b7:db:f8:5e:8b:48:07:5f:dd:98:
         c3:b9:6e:ec:c5:9c:da:79:13:e9:a3:35:7c:bb:0c:d2:a3:f8:
         24:4f:3e:2f:31:8d:6e:18:1a:88:bc:89:85:b9:ed:99:69:b3:
         12:0f:96:9a:a5:e4:eb:bf:12:06:d3:5d:d6:b2:dd:19:1b:61:
         00:37:b5:54:b1:6d:6c:4c:af:1f:f5:75:81:98:c9:62:46:cc:
         fb:8a:66:d8:8e:c7:35:a8:25:35:0d:64:2d:28:a8:98:6e:fa:
         ca:08:f9:10:8a:b1:39:c7:d9:a9:88:f8:22:44:c7:e9:38:b3:
         77:e2:15:19:11:f9:f0:a2:9c:df:0f:bc:7c:2c:75:20:dd:4e:
         18:54:0d:94:3f:ff:da:3e:89:1c:c1:c3:27:cb:31:a5:15:ce:
         a5:a7:cb:54:c7:ee:64:a1:b2:fc:71:71:59:b2:a4:9e:d2:5d:
         7d:c0:c9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:56:36 2025 by rpki-client