Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a373330303a3a2f34302d3430203d3e20323632353033.roa
File:                     323830343a326265303a373330303a3a2f34302d3430203d3e20323632353033.roa (raw, json)
Hash identifier:          tDh9qk8F02y5UoSnvzwXYVgOmM+sc5WW76dKBwjRXQQ=
Subject key identifier:   6C:1C:5C:D5:BF:B4:E9:56:EA:34:AF:AC:4F:68:A4:FD:A9:28:FC:A0
Certificate issuer:       /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial:       7CA4F7058DFC04E46C026991718A097C3D0492C4
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a373330303a3a2f34302d3430203d3e20323632353033.roa
Signing time:             Thu 29 May 2025 18:50:12 +0000
ROA not before:           Thu 29 May 2025 18:45:12 +0000
ROA not after:            Thu 28 May 2026 18:50:12 +0000
asID:                     262503
IP address blocks:        2804:2be0:7300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 06:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a4:f7:05:8d:fc:04:e4:6c:02:69:91:71:8a:09:7c:3d:04:92:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
        Validity
            Not Before: May 29 18:45:12 2025 GMT
            Not After : May 28 18:50:12 2026 GMT
        Subject: CN=6C1C5CD5BFB4E956EA34AFAC4F68A4FDA928FCA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:5f:68:db:c7:5a:1e:c0:df:40:d3:8e:a8:
                    d3:88:52:fb:1b:6b:9a:57:71:d3:c9:f6:d8:16:99:
                    89:0e:73:55:86:8a:1b:2c:c2:6a:1b:b6:5a:ab:d6:
                    d8:39:64:bc:3b:4d:31:2f:e9:e4:2f:58:7f:7b:b7:
                    5a:63:76:32:c8:4b:d0:ae:95:23:d3:ee:12:f2:64:
                    8b:db:b4:ca:79:77:dd:f5:6d:41:37:62:26:c2:1d:
                    81:c0:88:69:61:cf:b3:ec:a0:3d:b1:37:65:80:fc:
                    5f:59:66:4c:d7:e0:d4:2c:13:5c:c0:9a:9e:78:63:
                    33:c9:b2:2c:47:f9:2b:43:90:fa:a7:1b:6c:5d:b9:
                    ac:fa:3d:39:61:7e:f6:76:f3:a3:a5:8e:00:f9:a2:
                    bf:63:b5:f8:59:e8:be:5d:51:2c:ed:5f:a1:6a:f6:
                    62:40:69:49:b1:57:54:70:7a:ef:b4:a3:00:f8:25:
                    39:6c:3c:85:ea:7c:63:a4:e5:ee:43:e8:a5:3c:e9:
                    08:35:17:72:49:c0:b8:2a:15:61:55:67:07:6f:9b:
                    58:50:f1:85:15:d8:b7:0a:91:15:4f:dd:9b:e6:eb:
                    b0:0a:7a:e9:1e:f5:c2:4a:2c:90:cd:33:e9:be:ed:
                    42:b0:4c:1a:44:f4:ad:92:0a:aa:30:5c:ca:4c:19:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1C:5C:D5:BF:B4:E9:56:EA:34:AF:AC:4F:68:A4:FD:A9:28:FC:A0
            X509v3 Authority Key Identifier:
                keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a373330303a3a2f34302d3430203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2be0:7300::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:9d:5c:83:76:65:ca:bd:63:0e:96:2d:25:1d:9e:85:21:f7:
         03:66:ae:1f:a9:9a:26:df:09:ac:bd:cb:32:3f:7b:73:ef:c3:
         71:57:77:a0:e4:97:b2:78:86:60:d6:37:5b:76:79:d5:c2:c4:
         7b:a3:70:b3:f9:39:22:ef:fc:5b:99:60:96:8d:34:3d:8c:f0:
         dd:21:1e:f8:03:cd:b0:96:39:ad:d7:78:91:83:d6:17:04:2b:
         7b:63:11:54:6a:cf:ff:c3:d0:3f:c3:e1:16:2d:72:e5:b2:e4:
         96:67:82:8d:12:1f:50:51:41:3c:68:72:4a:11:e7:6e:5d:e4:
         82:b3:d2:03:4a:fb:ed:49:04:d5:a5:fd:2c:53:55:b5:1a:e3:
         b6:4a:d8:21:ab:fd:e0:49:b3:5d:85:2f:4c:25:6a:35:b7:38:
         47:68:09:11:a1:88:73:2b:63:34:ed:69:76:5d:fd:fc:a8:83:
         5a:0c:89:40:9d:63:3a:52:a5:a4:f9:18:c5:e2:63:81:d9:23:
         57:ca:56:2b:80:42:2b:13:af:d9:73:35:3d:e1:78:ad:6e:82:
         04:ec:46:1a:20:a1:ca:cf:c5:a4:8c:0c:6d:19:e5:30:7e:6a:
         d2:39:9e:64:4e:fd:30:45:86:61:e6:8f:5c:b8:30:b8:ac:96:
         fb:9f:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:22:19 2025 by rpki-client