Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a65303a3a2f34332d3433203d3e20323634323834.roa
File:                     323830343a323538303a65303a3a2f34332d3433203d3e20323634323834.roa (raw, json)
Hash identifier:          LVYPEQE8/t+Gkrp480H3zq9BV7RJmXws4DbAwni980E=
Subject key identifier:   7D:7A:F6:F4:8C:3A:0F:F5:D9:3D:76:20:E0:AE:EA:DB:30:75:FC:25
Certificate issuer:       /CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Certificate serial:       6CE2986AF611D77A12D6E4D1EF3D43399F8A79A0
Authority key identifier: 80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a65303a3a2f34332d3433203d3e20323634323834.roa
Signing time:             Fri 18 Apr 2025 15:25:44 +0000
ROA not before:           Fri 18 Apr 2025 15:20:44 +0000
ROA not after:            Fri 17 Apr 2026 15:25:44 +0000
asID:                     264284
IP address blocks:        2804:2580:e0::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl
                          rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e2:98:6a:f6:11:d7:7a:12:d6:e4:d1:ef:3d:43:39:9f:8a:79:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
        Validity
            Not Before: Apr 18 15:20:44 2025 GMT
            Not After : Apr 17 15:25:44 2026 GMT
        Subject: CN=7D7AF6F48C3A0FF5D93D7620E0AEEADB3075FC25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ab:5a:6d:a6:77:c9:ed:09:1e:db:4e:f9:2d:
                    88:cf:41:b4:80:8a:a6:8c:4a:5b:57:16:56:24:de:
                    ed:01:bc:e5:83:f0:57:ee:1e:6b:d1:c8:b3:4f:8c:
                    b1:d3:83:da:f5:12:bb:cb:10:26:b2:60:91:bc:f6:
                    6a:e9:04:f0:fb:5c:19:59:c1:5e:b3:32:51:da:b7:
                    20:ac:08:3b:27:df:39:ca:0b:3d:b5:3d:2a:c3:5c:
                    49:93:7a:eb:77:3f:9a:47:bc:7e:17:c6:ed:46:5e:
                    f1:01:d5:e2:01:03:b4:1b:11:63:ee:01:3e:ce:6a:
                    28:48:aa:52:d0:41:b8:15:0e:c9:ab:35:cb:1c:f9:
                    9e:b2:87:84:63:28:8c:89:6a:d9:24:1d:af:10:67:
                    b2:06:b3:5c:df:0b:f8:f4:cf:d6:72:67:86:72:fc:
                    3a:99:08:cd:94:8a:00:04:f1:a7:e4:01:0e:b8:20:
                    c2:fd:fa:ca:e6:ab:58:a0:20:4a:14:4c:12:16:d9:
                    ae:ca:fe:b5:f2:32:f7:c8:8f:03:96:31:00:d6:8b:
                    27:34:0f:7a:10:8d:c1:33:69:44:d5:08:a8:0c:3f:
                    cd:54:30:50:27:54:bb:a9:31:0a:40:84:36:4a:45:
                    ed:cf:e3:42:ff:8c:97:20:28:86:87:e3:1e:10:7c:
                    f8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7A:F6:F4:8C:3A:0F:F5:D9:3D:76:20:E0:AE:EA:DB:30:75:FC:25
            X509v3 Authority Key Identifier:
                keyid:80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a65303a3a2f34332d3433203d3e20323634323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2580:e0::/43

    Signature Algorithm: sha256WithRSAEncryption
         b1:9a:25:93:e1:7a:78:ba:39:9a:a1:42:4c:67:ab:24:ef:06:
         b5:65:4d:0c:f6:11:4f:e9:2a:d8:41:a1:2f:c6:85:3e:45:14:
         ac:71:3c:f7:f0:2c:c0:99:f8:96:a4:ba:30:6a:39:53:bb:73:
         4b:95:15:f5:10:78:72:a9:af:13:fe:cb:36:49:67:0b:17:d1:
         31:00:e9:41:0d:b2:22:bf:3e:39:f7:63:76:a1:ee:a1:0d:8e:
         a4:bb:bf:1e:b5:f8:a9:c9:cc:79:ed:2e:4e:78:de:31:c9:97:
         61:42:b6:fe:27:2a:b0:0a:44:00:db:4a:5a:bc:9a:e7:c1:fa:
         b7:b4:a9:46:4c:51:6e:46:dc:ab:78:7d:ca:ad:49:c3:be:f3:
         7e:63:74:f9:47:a6:18:f3:c0:ed:bf:af:a2:e6:88:1b:93:e5:
         56:a3:ae:f4:2d:0d:fb:de:e4:3f:e5:1c:04:13:9a:0b:1b:46:
         32:d8:ff:98:44:ae:6e:2a:eb:6c:c8:0b:e0:6c:09:86:16:85:
         e6:36:47:f3:58:0b:50:fc:2c:ab:19:b7:44:59:b7:f8:19:65:
         39:cc:11:e0:45:0a:66:8e:dc:74:d2:95:76:3c:1e:88:88:b0:
         8a:19:f2:bf:9b:f0:ef:5f:4b:fb:8f:09:b1:81:38:14:c8:79:
         9f:81:a8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:11:37 2025 by rpki-client