Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33322d3333203d3e20323733363631.roa
File:                     323830343a386135303a3a2f33322d3333203d3e20323733363631.roa (raw, json)
Hash identifier:          SshP1AFxllXnzeETB9z0GbWRY7hcn0fH/aNLLRC33/U=
Subject key identifier:   0C:20:96:14:06:A0:DE:55:A7:5C:14:9B:59:6F:3E:B1:A7:84:C3:0F
Certificate issuer:       /CN=26792F1362DED6EFA867836B5CFDA1B01F5205A2
Certificate serial:       11AC68717964FF7A4FBB16F735BD2D697BB7FF83
Authority key identifier: 26:79:2F:13:62:DE:D6:EF:A8:67:83:6B:5C:FD:A1:B0:1F:52:05:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26792F1362DED6EFA867836B5CFDA1B01F5205A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33322d3333203d3e20323733363631.roa
Signing time:             Fri 06 Jun 2025 17:16:44 +0000
ROA not before:           Fri 06 Jun 2025 17:11:44 +0000
ROA not after:            Fri 05 Jun 2026 17:16:44 +0000
asID:                     273661
IP address blocks:        2804:8a50::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/26792F1362DED6EFA867836B5CFDA1B01F5205A2.crl
                          rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/26792F1362DED6EFA867836B5CFDA1B01F5205A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26792F1362DED6EFA867836B5CFDA1B01F5205A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 07:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:ac:68:71:79:64:ff:7a:4f:bb:16:f7:35:bd:2d:69:7b:b7:ff:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26792F1362DED6EFA867836B5CFDA1B01F5205A2
        Validity
            Not Before: Jun  6 17:11:44 2025 GMT
            Not After : Jun  5 17:16:44 2026 GMT
        Subject: CN=0C20961406A0DE55A75C149B596F3EB1A784C30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:11:41:68:c7:82:47:3d:cd:f2:ed:e5:8d:
                    ff:91:5b:54:60:bc:1b:16:ec:4a:bd:12:50:43:3c:
                    2e:f7:e5:a4:de:df:99:3a:8c:2d:bd:a7:72:87:6d:
                    79:86:62:3b:b9:3a:ef:61:46:9b:be:55:49:58:58:
                    92:bf:5a:7d:d9:15:95:ca:48:8d:70:31:68:0e:9e:
                    0d:d4:d4:6a:27:ca:6f:e6:27:21:f0:77:dc:e5:1a:
                    5f:a0:7b:fc:14:1b:f0:dd:6e:df:4b:9f:40:1e:ac:
                    4d:6f:f5:e9:39:ed:7c:a4:ba:13:b6:f8:1e:1c:94:
                    97:af:27:1b:af:52:58:58:65:6a:59:0d:7c:97:41:
                    4b:f9:81:99:9c:40:82:92:fb:e3:b6:c9:9a:4a:9b:
                    89:9c:2f:db:eb:7f:59:b9:cb:3f:3b:26:21:ec:53:
                    25:83:9a:e9:94:aa:91:d1:4e:04:78:94:36:e9:e7:
                    43:98:42:77:32:5b:8a:6c:a7:14:6f:08:bc:83:8d:
                    44:cc:c3:fa:a8:08:c9:de:f1:cb:8f:33:11:71:8b:
                    ca:be:d3:cf:4d:08:b6:f0:e9:3e:95:85:a6:84:1b:
                    79:71:75:cb:d8:09:de:4a:f2:17:10:5f:8f:7b:b9:
                    e2:98:3c:86:2b:ff:82:4b:ae:05:77:b7:4c:d6:6f:
                    96:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:20:96:14:06:A0:DE:55:A7:5C:14:9B:59:6F:3E:B1:A7:84:C3:0F
            X509v3 Authority Key Identifier:
                keyid:26:79:2F:13:62:DE:D6:EF:A8:67:83:6B:5C:FD:A1:B0:1F:52:05:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/26792F1362DED6EFA867836B5CFDA1B01F5205A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26792F1362DED6EFA867836B5CFDA1B01F5205A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/323830343a386135303a3a2f33322d3333203d3e20323733363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:b1:7b:51:03:f6:5c:3a:d4:8a:d6:b0:28:41:6d:9f:e5:
         47:03:64:75:f4:84:4f:4f:8b:87:8b:a4:01:ab:b1:c4:3f:f5:
         98:82:2b:7f:95:fb:1b:3e:34:4d:f6:7d:a4:90:75:4b:19:b0:
         db:25:8c:a7:2a:5a:e2:e4:a4:2e:ad:a1:27:2d:dc:7f:21:54:
         69:29:4b:bf:a2:19:73:83:fb:d6:0d:f0:1f:8f:4e:ba:e1:97:
         0a:fa:25:fe:aa:fb:c6:97:82:2b:85:82:89:16:65:df:6c:69:
         0b:16:3d:c4:27:4a:1f:74:1a:2d:6c:6c:d2:9e:06:d3:1d:6b:
         9e:08:56:e9:92:59:0b:9b:2d:ad:4c:76:a0:44:01:c1:6f:1a:
         f2:c6:9c:c1:be:cb:9f:0f:27:90:52:b9:f8:3c:3e:8c:cb:7a:
         64:39:e4:fe:ed:49:35:49:66:fd:3e:22:f4:d0:3c:09:47:bb:
         d3:5e:1d:d0:1a:4d:1b:c5:54:3e:82:fa:4d:f4:96:fb:f3:01:
         6c:d1:2e:0f:05:46:62:da:24:33:d8:db:b2:ae:7b:1c:bb:d6:
         86:cf:93:03:05:69:f6:a6:62:68:9c:5c:de:6f:d8:21:b3:c1:
         21:65:04:6a:9c:aa:8f:2f:17:c8:95:25:bc:6b:7d:6e:6c:74:
         9a:fa:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:03:56 2025 by rpki-client