Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/323830343a333735343a3a2f33322d3438203d3e20323636343034.roa
File:                     323830343a333735343a3a2f33322d3438203d3e20323636343034.roa (raw, json)
Hash identifier:          QghiRlJ69bLeTBIWhvuXr2JfQ4vQpjYEXH0ZTsOaxxU=
Subject key identifier:   E7:8B:12:AA:F7:E6:6B:4D:92:FA:4C:81:58:92:46:63:36:49:49:93
Certificate issuer:       /CN=3ED7EEA9BB1434585656441E180F390DC5431423
Certificate serial:       6759C323CEFF493F0D2DB084767B478D92B52025
Authority key identifier: 3E:D7:EE:A9:BB:14:34:58:56:56:44:1E:18:0F:39:0D:C5:43:14:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED7EEA9BB1434585656441E180F390DC5431423.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/323830343a333735343a3a2f33322d3438203d3e20323636343034.roa
Signing time:             Tue 17 Jun 2025 19:51:12 +0000
ROA not before:           Tue 17 Jun 2025 19:46:12 +0000
ROA not after:            Tue 16 Jun 2026 19:51:12 +0000
asID:                     266404
IP address blocks:        2804:3754::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.crl
                          rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED7EEA9BB1434585656441E180F390DC5431423.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 10:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:59:c3:23:ce:ff:49:3f:0d:2d:b0:84:76:7b:47:8d:92:b5:20:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ED7EEA9BB1434585656441E180F390DC5431423
        Validity
            Not Before: Jun 17 19:46:12 2025 GMT
            Not After : Jun 16 19:51:12 2026 GMT
        Subject: CN=E78B12AAF7E66B4D92FA4C815892466336494993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:df:49:03:40:3b:e0:df:cb:75:d7:7e:f0:
                    1c:f4:43:87:39:8f:74:f7:0d:74:65:55:00:11:77:
                    b3:54:13:95:30:1d:d1:79:72:38:54:68:2f:78:0c:
                    ac:84:b0:3c:be:64:ff:6e:e1:56:f0:0c:98:d6:a2:
                    43:2d:43:da:3b:71:09:92:af:a0:0e:f6:64:dd:50:
                    96:65:40:dc:29:5d:b6:51:cc:08:61:99:5e:4e:86:
                    c2:d3:09:8c:0c:66:cb:5b:c6:7d:70:ca:94:fd:17:
                    02:5b:49:96:01:c7:7d:af:57:24:1a:63:1f:2c:8e:
                    20:b6:94:be:f4:0c:1e:3e:35:8d:77:b5:fe:a4:e9:
                    5d:8d:39:79:e6:13:24:bd:b0:4f:c9:b6:9d:67:4c:
                    57:bc:91:ff:36:f9:bf:b6:9b:d4:82:0c:0a:8f:93:
                    c9:34:b4:7c:e6:4c:5c:84:7c:6f:29:79:90:d7:12:
                    c1:00:6e:82:d2:9f:09:c7:e1:72:aa:cb:1d:b5:93:
                    d9:af:e1:3f:97:a3:23:8b:9c:1e:64:6f:b7:fd:17:
                    ab:20:d2:b8:5b:97:47:60:81:2b:e3:ff:34:4f:44:
                    ca:cb:1e:4c:90:6e:32:51:38:3b:c6:6e:ce:ca:ad:
                    ac:54:c3:77:f9:24:83:71:5d:12:5d:db:23:19:3a:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8B:12:AA:F7:E6:6B:4D:92:FA:4C:81:58:92:46:63:36:49:49:93
            X509v3 Authority Key Identifier:
                keyid:3E:D7:EE:A9:BB:14:34:58:56:56:44:1E:18:0F:39:0D:C5:43:14:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/3ED7EEA9BB1434585656441E180F390DC5431423.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ED7EEA9BB1434585656441E180F390DC5431423.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4gN8UrTLVUXJ14mJUCgCfvtvJNRLrfxVV1nUMFeCuzQm/0/323830343a333735343a3a2f33322d3438203d3e20323636343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3754::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:c3:c2:d4:25:2c:80:29:7c:d3:86:95:1b:d9:58:c2:f2:46:
         52:33:b6:b5:44:cf:99:cd:57:a5:e4:69:89:03:2d:ba:7e:24:
         68:3c:9a:b4:0f:72:47:3e:03:98:fa:05:69:fe:c4:63:f5:bb:
         8d:69:fa:51:49:5c:73:d9:68:7c:2b:ce:bf:6d:7c:7d:81:83:
         3a:c6:93:da:6e:94:d0:2b:7b:4e:be:b7:6e:ca:e4:e7:e6:f6:
         0e:ab:41:4f:5a:76:19:23:e7:51:0e:20:72:e4:5e:43:13:7b:
         a7:3e:b6:81:f5:05:6d:90:9b:c6:ad:a4:34:13:25:f2:2a:cd:
         8d:42:99:a3:54:76:45:3e:ee:d0:ec:ef:ca:6a:2d:a2:c2:72:
         94:79:02:ca:2b:b6:01:69:a7:17:27:81:d8:d1:0a:d2:3a:42:
         e9:0b:66:6d:d6:8d:c0:be:17:aa:0a:95:a7:b1:07:97:36:f1:
         44:0a:c9:0b:a3:96:26:9b:48:cb:8e:2a:9b:39:d8:cc:8c:2d:
         e9:eb:ae:81:6e:89:9a:6f:cf:43:88:26:96:46:66:9e:1a:83:
         3c:a6:40:bf:9e:99:78:b1:be:80:8d:c1:77:c5:55:ff:d7:6f:
         88:63:e0:42:78:f6:3b:36:8a:a1:cb:17:8a:fb:88:7b:ed:af:
         da:b0:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:44:19 2025 by rpki-client