Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/323830343a353337343a383030303a3a2f33332d3333203d3e20323638353835.roa
File:                     323830343a353337343a383030303a3a2f33332d3333203d3e20323638353835.roa (raw, json)
Hash identifier:          ADJTcATtvqRl3lkw9wl0tm6HBb7dhiVxAJ6ahY6KXYs=
Subject key identifier:   67:AC:A6:C1:34:28:F6:47:C5:B0:FF:E6:E6:F6:59:1A:88:0E:CE:66
Certificate issuer:       /CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
Certificate serial:       154C2CB74B6F4CEE56351421AB8FBB6A8C2FEC8A
Authority key identifier: AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/323830343a353337343a383030303a3a2f33332d3333203d3e20323638353835.roa
Signing time:             Wed 04 Jun 2025 20:28:57 +0000
ROA not before:           Wed 04 Jun 2025 20:23:57 +0000
ROA not after:            Wed 03 Jun 2026 20:28:57 +0000
asID:                     268585
IP address blocks:        2804:5374:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl
                          rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 22:28:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:4c:2c:b7:4b:6f:4c:ee:56:35:14:21:ab:8f:bb:6a:8c:2f:ec:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACDD408319E526575F0E327DBFC28EC9CECDF412
        Validity
            Not Before: Jun  4 20:23:57 2025 GMT
            Not After : Jun  3 20:28:57 2026 GMT
        Subject: CN=67ACA6C13428F647C5B0FFE6E6F6591A880ECE66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:14:33:b7:30:f5:85:0b:21:b3:8a:14:5f:
                    25:e1:33:ee:d7:61:ec:c4:a7:1c:15:cf:00:14:f1:
                    00:32:f5:04:b6:55:a0:71:5c:65:b7:8a:85:3c:53:
                    9a:a1:38:fa:f0:05:6a:80:b2:a7:09:c3:e9:86:19:
                    b4:88:23:a2:b7:3f:9b:78:84:b6:0a:42:17:de:31:
                    4a:50:e7:e6:f4:66:68:cc:45:34:3d:82:b2:8d:a5:
                    e9:ac:09:ec:8e:07:d0:c2:51:4d:e9:5a:5f:57:97:
                    c6:99:b0:b9:60:b0:5b:90:9c:19:f3:b5:b1:f8:4b:
                    4c:6b:5b:e9:49:45:41:d7:c8:a0:44:6d:a1:99:dc:
                    8b:61:00:3d:2f:cc:b5:99:06:d5:cb:67:c2:5a:40:
                    c1:31:1e:c1:e5:52:6e:a8:a2:cc:a8:fd:8b:f7:15:
                    48:db:55:ab:00:f1:de:74:4b:68:8f:23:28:ec:5b:
                    92:be:a0:4a:57:c6:fc:d1:e0:c4:f0:66:61:f8:a6:
                    2d:df:8f:f1:d8:c1:a0:4b:d9:68:80:22:e8:0e:b9:
                    0c:2c:e0:72:ed:60:36:19:dd:8d:15:c8:35:a9:bd:
                    84:71:1d:1b:f1:87:cb:61:ad:e0:c4:74:04:89:dc:
                    0f:05:47:ba:02:99:d8:0d:37:3d:f6:8b:64:94:9f:
                    c2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AC:A6:C1:34:28:F6:47:C5:B0:FF:E6:E6:F6:59:1A:88:0E:CE:66
            X509v3 Authority Key Identifier:
                keyid:AC:DD:40:83:19:E5:26:57:5F:0E:32:7D:BF:C2:8E:C9:CE:CD:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACDD408319E526575F0E327DBFC28EC9CECDF412.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/1/323830343a353337343a383030303a3a2f33332d3333203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5374:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         76:46:c4:15:0d:c6:58:b3:cf:bf:db:f8:a5:b1:98:8c:45:a8:
         e4:53:15:cf:1e:95:74:da:2f:dc:93:b5:14:6a:49:f7:16:40:
         29:45:1b:51:c1:85:ea:3a:96:92:26:75:a1:74:8d:f8:44:e3:
         f7:e7:17:61:d3:6f:13:c1:ce:7c:64:c7:c1:4a:58:79:85:30:
         ae:8c:51:41:1b:1a:01:95:a1:38:67:9f:c8:8f:a5:bc:ef:78:
         84:df:02:21:23:13:49:73:ef:0f:38:a3:77:d7:14:c5:c6:c1:
         63:02:29:2a:69:ae:8a:87:25:59:b9:c9:c3:17:9f:05:d0:d9:
         04:da:d5:19:90:fe:c7:19:10:48:6d:7b:9d:9c:a9:af:c1:70:
         ac:b0:e8:02:12:fc:00:9a:9b:0d:8d:8c:39:4c:af:47:01:82:
         c7:49:1d:fd:1a:f8:e4:06:cc:7b:b1:bf:3a:cf:0c:57:8b:1b:
         aa:01:f8:55:bd:37:ed:16:1d:21:8f:f0:d3:7e:20:99:07:64:
         ee:0a:d0:ba:69:99:1b:35:b3:27:ff:ce:3e:08:4e:02:40:89:
         7b:1f:e2:1d:c0:df:26:3c:de:be:7c:38:b1:30:c3:23:5e:35:
         33:1d:49:91:39:0e:b9:64:97:f0:07:21:04:51:b9:01:db:14:
         a5:f0:ef:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:58:50 2025 by rpki-client