Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a3a2f33322d3332203d3e20323634353637.roa
File:                     323830343a323162303a3a2f33322d3332203d3e20323634353637.roa (raw, json)
Hash identifier:          0rQwB1uQ+3gfFtPiWaHL+KtxBJjiBmJo6E9g+LrQplI=
Subject key identifier:   37:A5:36:73:EA:5C:3D:E8:55:EB:CF:D1:2B:98:67:BC:70:E5:D5:54
Certificate issuer:       /CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
Certificate serial:       354C5E73EABC33495CD8197546BC1E57F21161A9
Authority key identifier: 7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a3a2f33322d3332203d3e20323634353637.roa
Signing time:             Tue 17 Jun 2025 19:57:22 +0000
ROA not before:           Tue 17 Jun 2025 19:52:22 +0000
ROA not after:            Tue 16 Jun 2026 19:57:22 +0000
asID:                     264567
IP address blocks:        2804:21b0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl
                          rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4c:5e:73:ea:bc:33:49:5c:d8:19:75:46:bc:1e:57:f2:11:61:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CB92493B599C1F640A8D3956B2095652C6E1AA0
        Validity
            Not Before: Jun 17 19:52:22 2025 GMT
            Not After : Jun 16 19:57:22 2026 GMT
        Subject: CN=37A53673EA5C3DE855EBCFD12B9867BC70E5D554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:d2:22:0a:ad:65:a4:66:9d:3c:45:88:d8:
                    9b:5c:3e:24:e9:2a:05:df:37:0c:8a:03:5f:9e:17:
                    c4:f3:b8:04:80:6c:8c:17:b2:ca:e0:96:a1:11:cd:
                    71:05:27:41:6d:2d:dc:52:07:c8:81:cc:5a:57:f0:
                    83:1c:34:3c:ef:b2:08:62:99:34:c4:cc:1c:22:37:
                    df:0e:72:fb:56:3e:06:c9:ed:99:62:38:d8:68:ae:
                    8c:0a:b3:f9:c0:4e:f0:a6:1f:f7:cc:1e:9d:00:e0:
                    b5:a4:95:15:bb:6e:20:c8:cd:18:2a:6e:ed:9e:aa:
                    d8:6b:02:69:43:88:45:59:a7:02:55:df:db:1f:a5:
                    49:62:b4:14:d3:e0:a6:80:e5:37:61:36:a3:92:42:
                    e5:e4:46:c4:84:34:93:7f:93:cc:12:de:a8:d6:b8:
                    f0:63:e2:9e:89:b9:39:f8:00:48:48:7f:7c:f8:da:
                    68:79:9d:69:12:d8:fa:41:0b:91:6d:73:fe:33:9a:
                    a4:cd:a5:c3:94:bb:c5:e5:98:84:cf:42:7d:b7:3f:
                    d4:d6:54:a4:6e:6d:d1:be:02:aa:ed:e9:8d:05:c3:
                    45:8c:6b:96:cf:d7:7a:2a:30:32:1b:3e:9c:fa:90:
                    97:e7:c8:ee:d1:0d:01:2d:74:3c:33:cd:14:12:06:
                    c6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A5:36:73:EA:5C:3D:E8:55:EB:CF:D1:2B:98:67:BC:70:E5:D5:54
            X509v3 Authority Key Identifier:
                keyid:7C:B9:24:93:B5:99:C1:F6:40:A8:D3:95:6B:20:95:65:2C:6E:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/7CB92493B599C1F640A8D3956B2095652C6E1AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CB92493B599C1F640A8D3956B2095652C6E1AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GN2aMcvXT78S9LBxR2NzfsqUPMzEEKp52yLBrbqXzZd/0/323830343a323162303a3a2f33322d3332203d3e20323634353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:21b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:13:88:33:de:08:7e:36:c1:1f:1f:47:dc:4d:81:d9:07:3d:
         1f:f2:5d:a9:19:b4:dc:b2:81:22:71:20:e2:e3:d7:30:8e:ec:
         92:c7:9f:e6:de:e3:1e:9f:77:74:56:ee:ab:07:40:44:98:7d:
         fa:16:9c:28:7b:52:a6:16:36:aa:a0:a4:3f:b4:32:5e:8e:e0:
         ca:bf:02:42:a3:9f:d6:5e:3a:2b:ea:c1:bf:85:1e:98:20:5b:
         d6:07:81:f2:f0:4a:9b:21:da:cd:13:6f:0a:a7:fa:1c:1e:77:
         16:ad:32:71:29:4f:68:c4:8e:2a:ae:73:01:bb:05:cc:9b:e7:
         da:7a:92:dd:9e:75:b6:d9:6c:c0:73:ba:e1:1a:06:77:45:8e:
         f9:b4:aa:94:2c:43:eb:c9:7c:cc:51:51:d6:c1:93:1e:48:2f:
         d1:ff:36:21:14:e7:b2:69:a9:2b:b7:35:de:d6:65:85:88:0a:
         fe:0f:48:1c:1e:36:37:02:ca:cf:c7:6f:e0:37:63:33:ae:15:
         ff:f3:1c:72:68:63:0c:f7:a5:48:87:df:19:9f:4c:c9:8f:23:
         27:c5:b3:00:6f:71:3b:29:d5:dd:5b:b5:a2:38:9f:e1:39:2b:
         f1:19:68:bd:65:6f:c2:ba:c0:e3:60:6b:d6:e3:03:32:e1:2d:
         69:6c:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:55:38 2025 by rpki-client