Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a3a2f33322d3332203d3e20323637343535.roa
File:                     323830343a343163343a3a2f33322d3332203d3e20323637343535.roa (raw, json)
Hash identifier:          hiXbOemLwn75ItRY/l9rM8H6NU3QiF6/gRoLd+Ch3ms=
Subject key identifier:   10:EC:54:09:DE:FC:80:63:46:82:60:BC:23:73:B7:82:B3:64:82:19
Certificate issuer:       /CN=9CC2CE01A6286693B83AC51F507492F995DE365D
Certificate serial:       0AFA8618D3C9740DE72A5D62C46E426FC1496CB9
Authority key identifier: 9C:C2:CE:01:A6:28:66:93:B8:3A:C5:1F:50:74:92:F9:95:DE:36:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CC2CE01A6286693B83AC51F507492F995DE365D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a3a2f33322d3332203d3e20323637343535.roa
Signing time:             Sun 01 Jun 2025 12:47:28 +0000
ROA not before:           Sun 01 Jun 2025 12:42:28 +0000
ROA not after:            Sun 31 May 2026 12:47:28 +0000
asID:                     267455
IP address blocks:        2804:41c4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/9CC2CE01A6286693B83AC51F507492F995DE365D.crl
                          rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/9CC2CE01A6286693B83AC51F507492F995DE365D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CC2CE01A6286693B83AC51F507492F995DE365D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 15:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fa:86:18:d3:c9:74:0d:e7:2a:5d:62:c4:6e:42:6f:c1:49:6c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CC2CE01A6286693B83AC51F507492F995DE365D
        Validity
            Not Before: Jun  1 12:42:28 2025 GMT
            Not After : May 31 12:47:28 2026 GMT
        Subject: CN=10EC5409DEFC8063468260BC2373B782B3648219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a9:07:ad:e0:b5:3d:00:8a:f9:66:97:56:e0:
                    47:b8:46:95:03:f4:df:ed:59:35:1d:69:55:df:98:
                    1c:ba:f6:47:2c:ec:7c:de:29:4b:21:2d:a6:43:2f:
                    9c:85:23:2f:72:fc:60:10:57:68:9d:11:92:6a:0f:
                    fc:36:85:c1:a0:6f:18:de:f9:de:b1:e5:ae:ce:a5:
                    d3:b8:bc:28:e4:34:a6:61:25:95:39:8c:8f:65:16:
                    02:17:16:51:c8:02:04:2e:36:c6:3a:2d:2d:a0:01:
                    26:ee:27:4a:41:9d:54:10:49:6b:1e:bf:3f:4a:b8:
                    4f:98:cb:ff:b2:36:2e:dc:95:97:b6:3b:3f:bd:59:
                    3f:30:86:15:de:e2:82:aa:1b:95:b1:fd:30:79:0a:
                    4a:6b:2c:d8:64:13:d0:05:b7:0d:43:86:73:2c:e4:
                    4f:35:61:54:1e:11:73:a8:26:7d:31:1c:b1:9f:2d:
                    51:98:ed:30:d4:4d:e5:ab:64:f9:b6:41:75:59:7e:
                    42:88:b4:8d:76:a8:9c:f2:81:ed:f3:50:46:9f:43:
                    fb:d1:88:ba:54:30:06:57:bf:68:95:a7:da:28:6c:
                    a4:8a:30:17:e7:97:a2:74:ba:f0:fe:ed:7c:9b:46:
                    41:a5:4f:cd:4a:00:90:45:4f:7e:1f:20:20:f9:6a:
                    af:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EC:54:09:DE:FC:80:63:46:82:60:BC:23:73:B7:82:B3:64:82:19
            X509v3 Authority Key Identifier:
                keyid:9C:C2:CE:01:A6:28:66:93:B8:3A:C5:1F:50:74:92:F9:95:DE:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/9CC2CE01A6286693B83AC51F507492F995DE365D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CC2CE01A6286693B83AC51F507492F995DE365D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a3a2f33322d3332203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:6e:7d:bb:2e:d5:87:e5:b3:8b:4f:02:43:61:0d:cc:7e:ad:
         d2:48:2d:2a:76:8d:4f:ac:71:08:70:6b:38:90:f0:04:65:eb:
         e4:15:c1:fb:00:eb:64:bf:f1:1b:e4:83:dc:ab:2e:90:f7:eb:
         6a:66:2d:d8:df:f7:21:dd:4e:4b:bc:75:f3:28:08:5f:b8:ba:
         00:04:cd:57:20:96:d8:7f:51:dd:d8:9b:44:92:6b:32:18:4e:
         e2:a8:fe:a6:e1:7d:d5:db:d7:5a:a3:d9:6b:34:ee:52:45:29:
         5c:7c:7c:b6:a2:50:a3:6d:aa:9e:5b:97:c2:43:99:c3:e4:4b:
         17:d8:de:7a:12:cc:ce:36:80:8b:d7:f0:07:ef:64:85:15:cd:
         31:39:62:79:73:4d:eb:ff:2e:d8:d4:6b:c2:6d:a1:4c:1c:30:
         88:ab:f5:b0:d4:2c:6d:8f:75:fd:23:b4:eb:a9:cd:38:4c:17:
         fa:2f:ea:9c:b1:f9:58:9e:e9:fb:e3:0a:99:79:c2:da:48:36:
         cf:fa:52:3d:ea:40:5d:52:a0:8f:c3:4f:98:5b:0c:4d:a3:9b:
         48:9f:8b:21:cd:83:9a:24:a4:a0:dc:88:5d:7f:84:80:af:c4:
         be:3b:d1:d5:f5:bc:cc:38:42:13:ea:e9:19:49:72:f2:34:f8:
         cf:23:43:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:20:31 2025 by rpki-client