Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a323030303a3a2f33352d3335203d3e20323633323930.roa
File:                     323830343a313638383a323030303a3a2f33352d3335203d3e20323633323930.roa (raw, json)
Hash identifier:          irk+Om5nTyDDPj7rxsqSw+33ZP0SR/w5vUkFmrVRw1s=
Subject key identifier:   B3:64:06:43:E2:DB:34:A5:D9:13:D7:A8:C2:61:E6:78:B6:20:BF:15
Certificate issuer:       /CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
Certificate serial:       3E301E234EACD6821119F8FACD46C8C8A34A1FFF
Authority key identifier: 66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a323030303a3a2f33352d3335203d3e20323633323930.roa
Signing time:             Tue 03 Jun 2025 13:54:12 +0000
ROA not before:           Tue 03 Jun 2025 13:49:12 +0000
ROA not after:            Tue 02 Jun 2026 13:54:12 +0000
asID:                     263290
IP address blocks:        2804:1688:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:30:1e:23:4e:ac:d6:82:11:19:f8:fa:cd:46:c8:c8:a3:4a:1f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
        Validity
            Not Before: Jun  3 13:49:12 2025 GMT
            Not After : Jun  2 13:54:12 2026 GMT
        Subject: CN=B3640643E2DB34A5D913D7A8C261E678B620BF15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e4:db:76:02:6b:25:9c:1b:57:d7:00:03:87:
                    00:1b:32:67:9b:01:d1:84:7f:02:bf:e9:5f:f9:87:
                    02:78:d6:3c:6b:f6:ba:6a:15:d3:fe:fe:b0:67:17:
                    2d:31:32:dc:45:df:3c:96:41:fe:b9:9d:ae:e7:21:
                    48:d3:95:3b:b0:35:fa:ff:ef:2e:30:d9:a8:e1:00:
                    fc:71:52:e6:fe:99:92:d5:5b:2d:a4:97:32:21:15:
                    e5:7a:88:16:87:0c:16:ce:cf:cc:ea:54:ae:01:f9:
                    f8:30:1e:d1:36:fc:1f:c3:9a:27:46:ea:7c:0a:ad:
                    0b:a6:2f:00:4e:77:89:39:1f:c1:1d:01:62:8f:4f:
                    4e:73:11:14:2f:cc:b9:8f:9f:66:8c:bc:53:80:40:
                    0e:31:93:25:81:f0:33:29:49:23:74:45:f3:e5:29:
                    06:bd:a2:2b:46:ff:af:be:8b:85:94:b6:39:fb:c8:
                    95:16:0d:32:e7:54:cc:ee:13:42:f2:a3:e4:94:87:
                    40:a7:d3:42:b5:31:3b:3b:42:a3:53:73:ea:02:cd:
                    4d:2d:24:cc:a6:8b:7a:31:f4:cd:9a:87:cf:97:f0:
                    69:b7:6f:06:11:2c:21:df:0d:9a:b7:d6:e1:3c:1e:
                    6d:5f:e0:61:3e:e2:48:b9:48:9b:29:61:68:63:1b:
                    5e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:64:06:43:E2:DB:34:A5:D9:13:D7:A8:C2:61:E6:78:B6:20:BF:15
            X509v3 Authority Key Identifier:
                keyid:66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a323030303a3a2f33352d3335203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1688:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:bf:8f:96:14:4f:87:53:fc:f7:a8:1b:39:fc:08:6a:93:
         43:6d:32:b4:c1:b4:bf:fe:d3:b7:ae:40:57:f8:d4:0f:ea:2b:
         65:c3:38:04:2f:f6:db:06:6d:a4:1c:82:74:76:75:73:bd:29:
         a7:dc:55:3c:b1:da:be:bc:e0:f7:f6:ec:90:e8:a1:12:e8:bb:
         fa:d3:f9:ce:fd:e2:b1:14:84:0f:09:b3:78:69:77:fa:4c:86:
         fc:a1:81:3c:83:a4:e0:e9:08:bf:33:82:b6:40:83:6b:f5:f6:
         5e:23:c0:11:46:0b:70:69:7c:2e:7c:ef:c5:db:57:fb:df:b2:
         b6:94:c1:d0:76:5c:10:81:a5:cd:2c:ce:f1:ed:17:9c:a9:f9:
         b5:0d:e4:c0:e4:60:46:ae:f6:82:0b:8d:0e:c3:39:54:c6:77:
         c5:73:07:0d:1d:86:5a:0d:0a:67:93:cc:50:b2:c3:0a:1c:96:
         09:81:eb:6c:d3:86:6d:5d:35:46:3e:ed:36:b2:c2:2f:99:46:
         1f:8e:21:9b:0f:12:38:f6:b7:67:e6:87:37:69:bd:14:49:76:
         75:10:a6:1b:cb:cd:4a:4b:e2:50:75:9f:58:bb:20:59:b5:b1:
         9f:cd:70:5b:8b:28:8e:2c:8e:dd:4b:26:2d:01:25:c9:e8:56:
         23:b0:51:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:39:36 2025 by rpki-client