Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653230303a3a2f33392d3339203d3e20323633323930.roa
File:                     323830343a313638383a653230303a3a2f33392d3339203d3e20323633323930.roa (raw, json)
Hash identifier:          3SEmfDnaLNe9lYVRLV77DPifvo+++KwCzoGpwBshvls=
Subject key identifier:   3C:9D:A5:92:EE:AB:63:67:89:C5:9C:9D:7C:75:C0:E5:2D:8F:9A:17
Certificate issuer:       /CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
Certificate serial:       15F9AFBE5E6DDB42FED12AD7EB8FA214A3DCCAB0
Authority key identifier: 66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653230303a3a2f33392d3339203d3e20323633323930.roa
Signing time:             Tue 03 Jun 2025 13:54:12 +0000
ROA not before:           Tue 03 Jun 2025 13:49:12 +0000
ROA not after:            Tue 02 Jun 2026 13:54:12 +0000
asID:                     263290
IP address blocks:        2804:1688:e200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl
                          rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f9:af:be:5e:6d:db:42:fe:d1:2a:d7:eb:8f:a2:14:a3:dc:ca:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7
        Validity
            Not Before: Jun  3 13:49:12 2025 GMT
            Not After : Jun  2 13:54:12 2026 GMT
        Subject: CN=3C9DA592EEAB636789C59C9D7C75C0E52D8F9A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:41:75:3b:b9:67:c4:1e:01:06:06:b7:67:
                    ad:52:ea:bf:fd:4e:1a:af:cc:65:91:fc:e8:45:9e:
                    0d:5a:a8:dc:43:55:cf:ca:65:2c:34:0f:4c:bd:93:
                    2a:62:85:a1:11:88:17:d1:38:22:7b:75:63:4c:16:
                    fb:25:3b:31:4b:f6:d1:1f:92:c4:22:a1:fe:89:c1:
                    92:e4:79:47:69:dc:5f:fe:92:f9:94:ed:fe:a3:93:
                    ce:66:4a:38:7c:70:5d:2e:b2:a2:b1:6f:e0:f7:62:
                    4e:e8:16:f1:fe:c6:12:e4:8c:98:31:c1:d2:2a:00:
                    14:c6:2a:c6:28:1f:25:cf:4d:49:ca:6c:71:29:31:
                    1d:fa:bf:09:3f:68:59:3d:dc:2a:50:dc:2a:02:9d:
                    08:ba:fc:d7:a7:cf:a1:5c:43:0c:2d:bc:d5:fa:9e:
                    06:b6:f1:62:65:02:f6:3b:ad:6b:66:ab:9c:d0:43:
                    54:2b:0c:a2:dd:a4:1d:7d:3f:6c:52:37:d4:af:84:
                    88:ff:08:be:4c:85:c4:19:00:b7:9d:90:f1:8d:27:
                    f3:c8:1f:f6:0f:86:29:c0:f6:5f:aa:34:3c:91:2e:
                    a5:36:55:4a:c7:93:fa:f2:fe:4f:7d:2b:88:8b:98:
                    7e:28:60:a0:56:8f:28:d6:c7:53:00:8d:17:6d:a4:
                    e5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9D:A5:92:EE:AB:63:67:89:C5:9C:9D:7C:75:C0:E5:2D:8F:9A:17
            X509v3 Authority Key Identifier:
                keyid:66:53:61:CB:3A:CA:41:97:B4:AC:FD:25:7E:CF:EA:3E:0D:21:C9:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665361CB3ACA4197B4ACFD257ECFEA3E0D21C9B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/884CcEVgc8vvCBg4CUA181vaxZpscLtA3tpBsBfr6woy/0/323830343a313638383a653230303a3a2f33392d3339203d3e20323633323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1688:e200::/39

    Signature Algorithm: sha256WithRSAEncryption
         d8:03:fd:84:5b:e0:0e:a1:a3:2b:ca:00:11:c1:4b:4c:05:7c:
         88:19:06:3f:45:f5:e0:7e:d2:4e:1c:58:7d:3f:bd:1a:85:50:
         6b:49:cc:dc:33:9a:80:a8:fd:d5:ce:8b:57:0b:63:8c:c4:91:
         a9:b1:4d:7a:30:16:bd:a2:56:55:41:90:12:42:cb:be:bc:fd:
         ef:3b:91:bb:ad:73:0e:6c:a4:80:ae:77:83:74:3e:f0:51:f0:
         da:77:54:4d:50:5d:fa:b8:f5:a4:3f:a2:ba:b7:ba:a3:7b:6d:
         c4:d3:8a:f6:11:87:0b:97:0e:48:d8:39:5a:c3:09:70:e7:5a:
         1a:bd:fb:8d:fc:c5:01:ca:d1:9f:94:26:73:2f:fe:e9:35:e9:
         58:ca:23:f6:f1:ce:41:73:bc:24:4a:f7:6a:5a:07:3c:38:31:
         34:4e:4e:18:37:1b:dd:64:27:77:7e:28:9e:34:41:cd:9a:1a:
         07:e1:ef:86:97:aa:96:bd:18:b9:34:6f:bb:97:43:8c:f7:a2:
         90:db:7b:36:1c:86:3e:a8:ef:f6:20:dc:d2:63:a8:9f:1d:34:
         cf:46:8c:4a:87:50:7c:80:ac:39:ce:9c:6a:91:3f:a4:3b:cc:
         30:a1:2a:62:e6:58:f4:ac:76:18:85:7e:d3:b5:91:af:43:fa:
         2a:92:64:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 17:49:55 2025 by rpki-client