Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a383030303a3a2f33342d3334203d3e203236393635.roa
File:                     323830343a343630633a383030303a3a2f33342d3334203d3e203236393635.roa (raw, json)
Hash identifier:          q75vQ341skiP4yLFck3/inFwRkiLZokh2FsnngfU8+g=
Subject key identifier:   64:C5:C7:D6:5A:BC:D7:44:4E:A4:E1:35:C2:AC:7B:F3:FA:C0:F6:0F
Certificate issuer:       /CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
Certificate serial:       01F80612AD10939ACEEB9D95AF939C0E57020727
Authority key identifier: CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a383030303a3a2f33342d3334203d3e203236393635.roa
Signing time:             Mon 02 Jun 2025 21:50:46 +0000
ROA not before:           Mon 02 Jun 2025 21:45:46 +0000
ROA not after:            Mon 01 Jun 2026 21:50:46 +0000
asID:                     26965
IP address blocks:        2804:460c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl
                          rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 04:09:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:f8:06:12:ad:10:93:9a:ce:eb:9d:95:af:93:9c:0e:57:02:07:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC96ED49391396FC76164F871315FEAD2DEE5F35
        Validity
            Not Before: Jun  2 21:45:46 2025 GMT
            Not After : Jun  1 21:50:46 2026 GMT
        Subject: CN=64C5C7D65ABCD7444EA4E135C2AC7BF3FAC0F60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:3b:48:c4:5a:68:45:83:2d:e0:89:57:34:
                    61:60:e5:0c:c9:b3:76:ab:21:3b:87:d7:71:40:99:
                    e6:48:da:f6:2f:6e:8c:ac:16:97:de:e5:51:b7:62:
                    27:b7:fe:62:e7:9f:2a:5f:b3:e9:fa:46:be:69:d4:
                    12:61:18:7b:25:a0:2b:bd:7d:98:36:67:44:39:ce:
                    5a:d0:32:01:da:dd:7d:95:b0:0d:f6:ac:6b:a8:3f:
                    43:4d:2b:52:e6:ac:e1:b7:cf:17:0c:fc:ec:ab:8c:
                    f4:a1:6a:01:b8:d3:67:f8:b1:18:fe:cf:ec:f3:8c:
                    2f:75:2b:52:16:2b:6e:8d:16:05:f8:cc:56:29:e6:
                    c0:3d:e4:04:06:d1:c5:d6:f3:8c:2b:9d:3a:9e:0d:
                    56:2e:85:37:ff:6d:d9:03:a8:a9:58:f1:d4:23:ff:
                    0a:53:91:ea:37:f9:f1:79:28:41:f3:bd:52:da:bb:
                    b8:5b:26:38:8c:e3:b2:82:30:0e:e3:fd:1f:d7:8d:
                    68:23:71:85:8e:fc:f0:97:bd:15:d5:0e:9a:b8:b3:
                    d5:02:92:61:d0:78:b1:fc:08:b6:e5:94:c3:8a:67:
                    32:84:9d:05:1a:21:0a:7f:ba:62:dc:d1:bf:bb:0e:
                    40:e0:1d:58:89:cf:aa:39:b7:7f:a9:56:37:5f:03:
                    ba:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C5:C7:D6:5A:BC:D7:44:4E:A4:E1:35:C2:AC:7B:F3:FA:C0:F6:0F
            X509v3 Authority Key Identifier:
                keyid:CC:96:ED:49:39:13:96:FC:76:16:4F:87:13:15:FE:AD:2D:EE:5F:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/CC96ED49391396FC76164F871315FEAD2DEE5F35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC96ED49391396FC76164F871315FEAD2DEE5F35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VCRKLypQmuSiuykQMVac8E9eA8BQu3UxcD1mrV8qSkx/0/323830343a343630633a383030303a3a2f33342d3334203d3e203236393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:460c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         04:89:70:cf:45:7a:f0:b3:f0:11:30:0e:7a:fc:8c:46:0c:99:
         a3:b4:7c:1c:d7:b9:10:98:18:6e:e1:31:9e:1f:ec:15:73:ff:
         86:95:e9:eb:8c:56:17:8f:e7:2c:00:9f:63:c6:58:11:12:2b:
         b7:61:f3:2d:02:04:03:b7:d7:d9:74:e8:3c:50:b4:c5:1a:0c:
         6d:b9:33:1e:ba:17:7a:14:5d:67:de:93:c0:ab:ac:3c:f1:7d:
         94:92:98:51:48:a0:de:04:58:85:e3:15:d7:f7:9c:f7:7a:f6:
         88:97:81:4f:5a:ca:84:e7:e3:0a:6c:8f:71:d1:c7:61:e3:da:
         c7:64:f7:68:09:9e:23:56:99:94:5a:68:55:94:54:17:d9:17:
         27:88:db:b1:10:83:51:43:55:75:ee:c4:30:e3:e2:bd:fa:0f:
         ad:36:ca:89:a5:27:6a:d5:79:26:ee:8d:a2:c7:31:3b:63:42:
         cd:b1:4b:ff:2c:5e:a3:20:24:f7:0f:f4:52:98:12:65:03:31:
         cd:ad:45:c8:aa:cf:45:cb:1c:a5:1d:ee:2a:df:a2:6c:5a:5f:
         25:56:a4:93:0a:f5:ef:16:cc:da:56:48:34:28:90:1f:08:ad:
         e0:23:67:5f:a1:b3:d8:26:04:f3:e4:93:6c:a8:d0:7c:64:51:
         d0:98:41:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:34:42 2025 by rpki-client