Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa
File:                     323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa (raw, json)
Hash identifier:          ITBCdKvrtcl0MMQdnLjKzp5k0tgVJKhpOqPLPTIbcyo=
Subject key identifier:   B7:6F:BF:6B:D5:DC:48:9A:A6:4A:B7:93:68:53:C5:03:88:17:1B:D3
Certificate issuer:       /CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
Certificate serial:       64821DAF88055D59D62F1EAE169021B6741AB643
Authority key identifier: 66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa
Signing time:             Tue 03 Jun 2025 13:54:14 +0000
ROA not before:           Tue 03 Jun 2025 13:49:14 +0000
ROA not after:            Tue 02 Jun 2026 13:54:14 +0000
asID:                     263290
IP address blocks:        2804:1688:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:82:1d:af:88:05:5d:59:d6:2f:1e:ae:16:90:21:b6:74:1a:b6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
        Validity
            Not Before: Jun  3 13:49:14 2025 GMT
            Not After : Jun  2 13:54:14 2026 GMT
        Subject: CN=B76FBF6BD5DC489AA64AB7936853C50388171BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:a6:17:a1:87:04:94:6e:f6:ed:fa:dc:6a:
                    8d:13:84:00:7b:17:a3:fc:e6:7e:86:6a:35:b4:25:
                    78:35:e9:ed:b9:79:cf:7a:e3:55:8b:fa:45:db:ee:
                    7a:72:36:6d:72:c0:a9:ac:41:c2:10:2b:87:3a:1e:
                    fa:82:e5:a6:80:d0:a8:af:56:64:ea:a0:b3:55:5e:
                    6c:a4:55:8f:74:d0:14:40:0e:01:fd:97:b8:f1:91:
                    a2:64:27:fd:03:e4:41:d0:94:2c:6b:2a:6c:3e:b4:
                    7e:86:9d:4d:94:a8:85:a6:f2:07:7f:0d:0a:b1:bd:
                    39:34:8b:1e:cf:09:7b:01:07:c2:55:7d:ac:b4:84:
                    82:e7:b4:0a:41:80:40:e1:e4:8a:28:75:73:f3:97:
                    00:49:96:51:54:a5:da:45:13:ad:99:eb:a9:f7:9d:
                    f3:f2:35:87:c6:06:9f:98:b1:2e:a9:d5:a6:d8:91:
                    29:73:9d:3c:4a:1e:0f:da:d3:fb:4b:54:47:ca:fa:
                    14:a1:4f:48:14:c3:fb:36:eb:0d:22:97:6d:85:b3:
                    09:05:22:01:ae:2b:43:5c:cb:bd:7b:c0:4a:97:86:
                    d0:68:f2:51:28:16:d0:9a:ff:b3:a5:d6:ce:6c:7d:
                    30:19:19:20:47:20:97:00:68:d5:d4:40:45:f9:e9:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6F:BF:6B:D5:DC:48:9A:A6:4A:B7:93:68:53:C5:03:88:17:1B:D3
            X509v3 Authority Key Identifier:
                keyid:66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a383030303a3a2f33352d3335203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1688:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         52:9f:73:b0:34:88:89:80:d4:9f:df:e1:f7:81:3b:bd:87:33:
         4b:51:f9:43:13:aa:0c:4a:f9:cc:2e:bd:da:2c:cb:cb:67:e0:
         dd:5e:a6:23:af:20:bf:90:10:13:0d:32:ca:af:2d:e7:3c:f8:
         bc:91:e1:14:19:af:a0:1a:11:61:24:59:a6:17:32:e9:29:02:
         62:0c:88:ce:96:de:46:0a:aa:31:6a:b1:4d:c8:03:99:e3:f3:
         e7:1c:24:c9:89:d3:d4:14:07:ea:8f:b3:91:31:1c:5a:fd:d0:
         68:ed:b5:e3:9a:a3:b7:25:07:34:9a:72:67:e5:ef:9f:fd:ef:
         e9:90:15:87:98:66:90:14:59:ba:56:fa:06:ef:50:2c:65:04:
         d5:c6:cd:ed:fc:39:b5:ee:fc:7a:15:77:8a:8c:ce:b3:6c:59:
         e5:82:7f:69:17:a3:a0:8c:6d:50:25:a0:e4:ea:f9:5c:97:e9:
         b6:e5:00:69:de:73:22:1d:a0:0b:23:16:ef:a2:38:29:69:66:
         cb:b4:de:b8:67:c7:54:f4:11:3f:05:68:54:b0:f8:7d:94:c6:
         c8:54:5b:66:92:72:c2:32:76:fb:a1:7b:9a:91:9b:00:91:b6:
         0d:58:bb:71:02:45:25:a0:59:f0:fd:2b:34:92:c9:f7:f5:bd:
         8e:46:62:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:15:19 2025 by rpki-client