Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
File:                     323830343a323936303a3a2f33322d3332203d3e20323634303131.roa (raw, json)
Hash identifier:          owaGEqmvBA1Ig0zDTcfm6FQmVNSBpA2q0ZUO2DvZci8=
Subject key identifier:   61:C8:06:BE:85:E3:45:49:3E:B1:03:0E:53:69:BE:1A:2C:E9:09:31
Certificate issuer:       /CN=2E322CEA05DD556250D2E421A2366BA5D174766B
Certificate serial:       747E9554DC2221546408911F84A4490F43FB395D
Authority key identifier: 2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa
Signing time:             Wed 21 May 2025 18:42:22 +0000
ROA not before:           Wed 21 May 2025 18:37:22 +0000
ROA not after:            Wed 20 May 2026 18:42:22 +0000
asID:                     264011
IP address blocks:        2804:2960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl
                          rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 18:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7e:95:54:dc:22:21:54:64:08:91:1f:84:a4:49:0f:43:fb:39:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E322CEA05DD556250D2E421A2366BA5D174766B
        Validity
            Not Before: May 21 18:37:22 2025 GMT
            Not After : May 20 18:42:22 2026 GMT
        Subject: CN=61C806BE85E345493EB1030E5369BE1A2CE90931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:ea:c4:8a:cd:85:ce:cf:97:e6:26:35:0f:
                    e6:5d:0c:c6:bd:94:35:c4:d6:46:eb:65:1c:19:71:
                    34:92:bf:e0:7d:9a:84:5c:3f:d3:45:a6:0d:81:5f:
                    a4:9b:86:c3:a8:de:50:db:9a:3b:de:0c:73:f1:6f:
                    d9:59:ad:0e:6a:00:95:59:b3:ba:0f:f2:57:91:18:
                    bd:81:09:80:0c:e3:89:89:6a:8a:d8:6d:58:f6:12:
                    48:54:97:7f:ff:e3:58:ce:68:47:47:5b:38:bc:19:
                    04:05:7e:24:c5:4f:7c:1d:c9:3a:df:01:da:20:6b:
                    2c:10:0c:1e:5c:60:c3:f7:93:b0:56:be:48:1f:0c:
                    f2:61:65:17:35:4b:97:b4:e6:77:ee:8f:e1:dd:d3:
                    57:0e:1c:b1:8e:5d:4e:31:18:0b:15:2c:b1:2d:58:
                    44:b9:7f:b6:47:e6:20:de:5c:d5:c1:77:73:d1:86:
                    e6:62:77:91:bc:8e:78:aa:f2:74:3f:f5:b5:93:4a:
                    cb:bd:ec:c3:33:54:43:75:1c:88:e6:50:43:1f:b7:
                    77:7a:64:b2:ae:39:2f:0a:51:c1:eb:a4:86:08:41:
                    ae:29:c5:98:d9:c6:f7:17:96:99:d8:15:c2:47:c9:
                    a7:a2:c1:5c:20:36:cf:2e:bd:a3:6b:ba:9a:3a:f3:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C8:06:BE:85:E3:45:49:3E:B1:03:0E:53:69:BE:1A:2C:E9:09:31
            X509v3 Authority Key Identifier:
                keyid:2E:32:2C:EA:05:DD:55:62:50:D2:E4:21:A2:36:6B:A5:D1:74:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/2E322CEA05DD556250D2E421A2366BA5D174766B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E322CEA05DD556250D2E421A2366BA5D174766B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iMmpJAa29uzskingN42njv5Md7UZB3rSimA2kYrF4RV/0/323830343a323936303a3a2f33322d3332203d3e20323634303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2960::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:84:08:c7:01:4e:20:1f:a3:10:ba:7d:8d:3a:e3:4e:af:4f:
         0c:a3:67:98:77:36:2a:18:e1:b3:6c:6a:2a:e6:21:2e:42:8d:
         f9:2c:fe:b7:c7:9d:73:08:b2:08:2a:a1:77:3c:f5:02:1a:37:
         34:c8:82:89:1f:81:0b:c1:5a:ad:aa:55:4f:81:4f:38:fc:dd:
         ee:70:4c:1d:e7:c9:3d:2f:dc:a8:6b:0f:29:8b:d8:19:04:f9:
         3c:bf:2d:c5:8b:9f:95:9a:66:05:7e:cd:35:b1:83:24:06:7e:
         a9:71:c4:65:54:e2:7b:10:9e:00:90:07:90:7f:99:da:2c:95:
         cb:8e:a2:76:10:66:cd:49:ba:6b:08:28:41:f3:64:9a:14:7e:
         8a:77:99:32:fe:9b:51:a3:f7:6a:56:28:28:e9:eb:9c:63:4c:
         c8:c8:ce:0e:3c:4c:05:04:ea:67:2f:16:53:a5:0d:1a:cd:12:
         c5:47:79:c5:d3:5b:0c:7e:b3:89:c3:ec:9a:64:58:0c:4e:c1:
         88:2d:ac:4a:52:7a:3e:2c:d8:81:ca:c3:c8:cf:fe:67:80:b9:
         2b:9b:76:87:e3:bd:2a:09:97:59:92:92:f7:57:fa:fd:60:97:
         ba:23:6b:8d:93:63:10:5b:99:7a:7a:01:fd:9e:7c:0b:e0:ee:
         13:b1:37:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:18:47 2025 by rpki-client