Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/323830343a366633633a3a2f33322d3438203d3e20323730363437.roa
File:                     323830343a366633633a3a2f33322d3438203d3e20323730363437.roa (raw, json)
Hash identifier:          Yy9a80hxuGkv47p1WxAV8/8jNtLNtfdf0ZtuB0b65RU=
Subject key identifier:   E4:7C:ED:B9:CB:9C:9F:65:02:4D:8C:8D:53:BE:E1:10:8F:CD:3E:27
Certificate issuer:       /CN=2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D
Certificate serial:       7D3A9728A028B371D423A83D1460CEE6CE933514
Authority key identifier: 2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/323830343a366633633a3a2f33322d3438203d3e20323730363437.roa
Signing time:             Thu 10 Jul 2025 23:53:08 +0000
ROA not before:           Thu 10 Jul 2025 23:48:08 +0000
ROA not after:            Thu 09 Jul 2026 23:53:08 +0000
asID:                     270647
IP address blocks:        2804:6f3c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl
                          rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 09:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3a:97:28:a0:28:b3:71:d4:23:a8:3d:14:60:ce:e6:ce:93:35:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D
        Validity
            Not Before: Jul 10 23:48:08 2025 GMT
            Not After : Jul  9 23:53:08 2026 GMT
        Subject: CN=E47CEDB9CB9C9F65024D8C8D53BEE1108FCD3E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c5:34:0e:af:c6:9b:44:59:02:9a:67:96:0b:
                    3e:7d:97:47:06:f8:a6:3d:98:06:0f:86:80:04:8e:
                    8c:66:d4:f3:bf:d7:2b:1e:ec:58:c0:5c:cd:ab:f7:
                    3a:2a:24:00:0e:16:3b:e7:07:ec:8a:6d:88:d1:d4:
                    7e:58:3f:03:3a:58:1e:ba:38:19:1a:e6:c4:c1:dd:
                    f2:c6:6b:e2:9b:fb:f5:7d:d2:5d:4d:27:4c:d5:cd:
                    c9:e0:a7:73:65:9d:16:c6:e7:b1:73:74:56:e8:06:
                    c7:12:22:0e:f8:b1:74:ec:2e:bb:cf:6a:bd:ef:20:
                    80:03:f1:82:55:18:9d:35:e9:55:8e:74:e9:30:c5:
                    1e:4d:61:cf:6f:1c:a1:29:bd:93:cd:67:1a:54:e2:
                    ea:fa:bf:96:ce:e9:ac:28:0e:4c:74:e9:22:cf:15:
                    c5:33:92:de:c5:7c:86:f5:67:80:4e:92:ec:e8:d0:
                    8f:2e:53:62:bd:30:8f:97:7d:44:9b:f3:7a:c2:ae:
                    ae:95:da:21:2c:66:3f:8b:a3:75:64:c8:94:fd:a0:
                    ec:d8:ef:07:14:6e:8e:bd:d4:a3:bc:34:63:a6:de:
                    2c:89:da:f9:43:21:c4:2d:c4:5f:7d:ba:18:ee:f5:
                    be:09:00:32:98:5d:dc:5b:81:b0:61:e9:be:12:63:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7C:ED:B9:CB:9C:9F:65:02:4D:8C:8D:53:BE:E1:10:8F:CD:3E:27
            X509v3 Authority Key Identifier:
                keyid:2B:0D:55:6B:D1:6D:C2:30:4B:92:D8:8D:4D:E8:A7:49:E2:2D:FA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0D556BD16DC2304B92D88D4DE8A749E22DFA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kXRrsUjZS4Leci74cK38ip4XnivqUKcfwR62jtALmMb/0/323830343a366633633a3a2f33322d3438203d3e20323730363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:0b:1b:12:0b:11:70:dd:37:ef:2b:dd:50:e2:7a:c5:c8:60:
         65:55:a1:77:81:c2:90:d5:5d:ce:03:8d:82:af:5d:73:ae:34:
         43:83:07:c5:6e:6b:4e:e5:5b:9d:13:8f:d0:16:15:39:1c:f3:
         52:28:06:54:ee:e5:e1:56:40:29:1a:65:78:97:e2:93:e2:b0:
         a5:f3:22:13:8f:3a:69:1c:8b:88:12:1b:be:7c:b3:02:7a:21:
         28:c3:75:ad:7b:09:d1:b9:d7:05:92:49:ea:23:96:e0:37:de:
         be:3b:e7:94:3a:27:ef:82:79:b4:a2:10:c1:45:c0:c0:63:95:
         46:5c:08:69:1b:80:68:34:5c:6f:05:6a:7c:de:a2:62:66:ae:
         3c:d5:3e:ed:9c:3e:fc:f4:db:44:61:85:fe:97:08:3c:08:a7:
         bd:10:ac:22:80:20:c4:14:00:eb:8d:d8:82:50:50:79:8a:1e:
         ec:97:c8:be:c1:a2:f9:e5:b6:c2:60:f0:d9:53:10:3e:98:21:
         b8:2a:f7:d4:d3:4c:6b:2b:6d:cc:d8:e5:d8:92:58:78:f0:0d:
         cb:da:53:a6:ef:e7:2c:f7:28:3e:ad:0b:5b:9a:a3:46:bd:d9:
         84:87:4b:fa:60:04:af:90:19:15:73:18:08:5c:81:3f:91:3c:
         4b:98:99:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:16:55 2025 by rpki-client