Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/323830343a366532383a3a2f33322d3332203d3e20323730353739.roa
File:                     323830343a366532383a3a2f33322d3332203d3e20323730353739.roa (raw, json)
Hash identifier:          VLNm2mzW65b3jjilEnfK7dvN8/0vphbu26QNGfcOiGo=
Subject key identifier:   79:5E:6C:C6:39:36:62:9A:37:17:2F:5E:70:C8:FD:96:95:FB:FB:A9
Certificate issuer:       /CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
Certificate serial:       3273942FAF8866C46B18A7B285BA900715CB9855
Authority key identifier: F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/323830343a366532383a3a2f33322d3332203d3e20323730353739.roa
Signing time:             Fri 23 May 2025 23:25:28 +0000
ROA not before:           Fri 23 May 2025 23:20:28 +0000
ROA not after:            Fri 22 May 2026 23:25:28 +0000
asID:                     270579
IP address blocks:        2804:6e28::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.crl
                          rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:73:94:2f:af:88:66:c4:6b:18:a7:b2:85:ba:90:07:15:cb:98:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F462BB2524D88C109A78F223DCBD42C0C97609EB
        Validity
            Not Before: May 23 23:20:28 2025 GMT
            Not After : May 22 23:25:28 2026 GMT
        Subject: CN=795E6CC63936629A37172F5E70C8FD9695FBFBA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:fd:80:bd:e3:ab:3e:c6:27:9b:4a:b4:e4:
                    9d:f0:d9:03:a4:22:64:de:59:8c:89:a0:0e:9b:6d:
                    83:2e:09:dd:c9:38:e0:7d:10:fa:9d:c7:6c:4c:4f:
                    3b:50:de:e1:f7:f9:5d:9a:7a:8b:19:49:d1:72:f7:
                    dc:52:8a:47:3b:f4:e5:3f:13:a2:2a:ab:dd:5a:44:
                    c5:aa:bc:f2:50:29:42:a8:99:d9:c5:55:c2:80:7a:
                    04:f7:f2:e8:84:a9:08:98:56:ac:dc:80:aa:4d:fd:
                    c9:27:09:78:1c:fc:86:7f:e3:a5:22:83:39:37:51:
                    8a:ff:fd:f2:a9:f5:97:5f:23:7a:df:9e:3f:de:58:
                    64:c0:fe:4a:0d:a1:e2:fe:8d:cb:24:7c:53:61:a0:
                    9d:8b:e9:32:58:e3:a6:a0:ea:ec:8f:9b:3d:5b:96:
                    71:8f:c7:fc:d9:38:c9:91:73:a4:ad:f7:24:a5:0c:
                    48:19:b9:fb:d2:0a:45:1c:eb:f5:af:6b:1a:1f:69:
                    fb:ca:7a:17:b1:61:3a:5c:a9:fe:a5:0d:ea:47:4e:
                    99:fe:91:ec:03:77:2f:cc:6f:f2:09:85:ca:4c:03:
                    5e:7b:70:91:12:f0:7b:25:67:69:13:e7:4f:9a:06:
                    75:1e:9d:11:5b:5f:e1:14:98:7a:61:08:e4:19:6f:
                    bf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5E:6C:C6:39:36:62:9A:37:17:2F:5E:70:C8:FD:96:95:FB:FB:A9
            X509v3 Authority Key Identifier:
                keyid:F4:62:BB:25:24:D8:8C:10:9A:78:F2:23:DC:BD:42:C0:C9:76:09:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/F462BB2524D88C109A78F223DCBD42C0C97609EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F462BB2524D88C109A78F223DCBD42C0C97609EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/323830343a366532383a3a2f33322d3332203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:a0:0c:3d:85:b9:e0:e5:f6:ba:f1:28:bc:b5:f7:e0:44:18:
         1b:9b:2c:b3:91:ad:6e:6a:bc:2f:90:46:1b:21:55:e7:9a:5d:
         0d:ef:f3:c9:bc:2f:13:ca:5f:13:0b:46:69:28:80:7e:ee:98:
         39:70:47:93:5f:64:3c:cc:1c:93:6c:e6:a0:f2:0e:89:84:ec:
         87:a7:59:a7:d0:e3:5e:d5:9f:85:13:b5:96:1d:ce:41:b9:46:
         de:e8:c1:da:f4:09:00:26:b0:df:da:db:fc:1e:2c:e7:32:95:
         d6:31:48:28:d4:03:80:eb:37:83:c0:0e:d1:bc:b6:3f:4e:46:
         5c:eb:46:37:47:ea:ec:db:3d:51:19:55:d5:0c:3b:31:79:c2:
         8a:7c:ff:04:93:c0:07:f5:e5:d1:13:64:6c:ed:9e:f4:34:9f:
         0c:b7:f8:12:7e:ac:2c:dc:a1:92:a2:91:d7:2f:14:10:d6:2e:
         d7:46:ed:36:f6:4a:ab:2e:95:41:47:4c:b5:d4:9c:ad:3c:4a:
         5c:ee:05:b9:82:33:44:f3:11:db:70:78:5c:b5:84:41:fd:c2:
         46:f4:0d:92:e9:be:19:e2:8a:3e:d6:90:29:82:1a:bd:e1:62:
         02:a4:6a:8f:ef:dc:47:69:d2:8e:f5:e3:88:d1:46:60:2b:50:
         1e:e8:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:10:23 2025 by rpki-client