Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a343030303a3a2f33342d3334203d3e20323634353637.roa
File:                     323830343a323162303a343030303a3a2f33342d3334203d3e20323634353637.roa (raw, json)
Hash identifier:          pflnKXrilP12RJMhe9lmrvD3jLPiwMca0QNlJaICCd4=
Subject key identifier:   CC:59:D4:86:38:33:0F:C6:0E:45:02:90:C5:12:8F:BF:AC:12:2C:DA
Certificate issuer:       /CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
Certificate serial:       1B387ED51D4B60A964D78D27D01CA0E0A7E11E97
Authority key identifier: 7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a343030303a3a2f33342d3334203d3e20323634353637.roa
Signing time:             Tue 17 Jun 2025 19:57:21 +0000
ROA not before:           Tue 17 Jun 2025 19:52:21 +0000
ROA not after:            Tue 16 Jun 2026 19:57:21 +0000
asID:                     264567
IP address blocks:        2804:21b0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:38:7e:d5:1d:4b:60:a9:64:d7:8d:27:d0:1c:a0:e0:a7:e1:1e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
        Validity
            Not Before: Jun 17 19:52:21 2025 GMT
            Not After : Jun 16 19:57:21 2026 GMT
        Subject: CN=CC59D48638330FC60E450290C5128FBFAC122CDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:5c:bf:82:9c:1b:df:12:de:9c:19:77:14:
                    77:02:2b:85:a6:bf:7e:6b:84:9a:6c:18:5b:09:59:
                    76:92:32:8b:4f:da:a3:e2:26:b4:f5:07:0c:8a:d6:
                    52:53:54:89:42:8d:26:20:9f:17:23:c2:3a:bf:a8:
                    76:90:a1:ed:86:21:8c:85:40:86:c6:fe:11:47:6d:
                    69:e6:b0:30:b9:2a:f6:3f:3a:ab:97:2a:3a:20:52:
                    38:1e:3b:d5:36:67:3d:53:a9:3b:e1:a1:5b:8f:31:
                    7d:1b:a3:f8:95:d7:08:53:01:fe:40:82:39:91:cb:
                    b8:fd:f7:d9:c5:f8:35:99:40:52:c5:99:fb:bf:a6:
                    69:38:6a:ce:7e:14:a6:5b:dd:da:33:98:01:ef:9e:
                    2e:cd:bc:57:35:56:b7:de:fc:17:51:1f:06:a4:9f:
                    66:88:77:9c:ce:44:70:f3:c8:c7:44:be:c7:cc:c7:
                    fe:e3:2e:2a:78:0d:18:69:ee:75:8e:d7:ef:37:19:
                    d6:11:84:67:e7:8c:ac:dd:ad:19:3d:b4:eb:e8:c1:
                    bf:31:03:c3:b2:5d:1f:c8:6b:a0:70:0d:27:bd:fe:
                    2f:9f:11:4c:b7:eb:b6:5e:fa:f0:f8:c3:ae:99:cc:
                    f8:53:dd:d9:51:bc:4d:4d:df:3e:60:07:93:2f:f2:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:59:D4:86:38:33:0F:C6:0E:45:02:90:C5:12:8F:BF:AC:12:2C:DA
            X509v3 Authority Key Identifier:
                keyid:7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a343030303a3a2f33342d3334203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21b0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         91:87:d9:99:5f:1c:5c:f4:55:b3:09:5b:29:b8:f7:49:ab:ca:
         59:6a:b7:54:14:a2:13:c0:a1:da:4b:af:d0:7c:53:8f:9b:25:
         56:f4:d6:1b:2d:88:2d:7b:eb:0f:36:0f:5d:ba:1a:d5:c7:fd:
         5c:e4:22:28:72:a7:79:7f:80:f7:0b:cc:a1:24:6d:c6:4e:83:
         ec:99:68:37:0b:86:1f:07:e1:96:ca:c4:45:fa:1c:75:10:33:
         7c:6d:6e:2e:a5:5f:91:30:25:55:bf:ed:4e:62:0c:a4:58:9e:
         ab:d9:49:18:bf:a1:6c:ce:9d:8f:c7:28:21:b4:70:8d:1a:cf:
         63:c9:e9:fc:24:b8:18:8e:7e:80:6e:cb:6d:25:be:3b:83:62:
         c8:84:20:eb:c9:ae:30:79:9e:fa:bd:34:ae:0e:d2:48:5e:08:
         a8:06:f9:fc:38:3b:93:73:2d:0b:c4:ab:86:ef:37:d5:24:df:
         c3:9b:0a:be:eb:0f:f8:0d:b3:9d:72:61:b9:07:0a:e9:56:6d:
         88:53:47:81:9a:dd:08:fd:fc:0f:f1:57:13:99:30:65:5d:47:
         cb:ff:c1:e3:cd:d6:0d:7d:eb:07:d1:f4:31:1b:25:78:4b:9f:
         09:51:e1:9b:ec:08:f1:5a:78:bb:14:18:0f:6c:21:47:05:50:
         74:01:3b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:56:57 2025 by rpki-client