Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393030303a3a2f34302d3430203d3e20323632353033.roa
File:                     323830343a326265303a393030303a3a2f34302d3430203d3e20323632353033.roa (raw, json)
Hash identifier:          yH+dWYrvVUBwIwRmND10xGpQAkABr+1Q55xO3JfD3jk=
Subject key identifier:   7E:86:AB:BC:02:BC:2F:6E:9D:8A:F7:2F:AD:0A:ED:F1:44:A6:15:69
Certificate issuer:       /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial:       7740B6B8E59DEC1268D8F8BC3A6AB6B5181AB91E
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393030303a3a2f34302d3430203d3e20323632353033.roa
Signing time:             Thu 29 May 2025 18:50:12 +0000
ROA not before:           Thu 29 May 2025 18:45:12 +0000
ROA not after:            Thu 28 May 2026 18:50:12 +0000
asID:                     262503
IP address blocks:        2804:2be0:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 09:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:40:b6:b8:e5:9d:ec:12:68:d8:f8:bc:3a:6a:b6:b5:18:1a:b9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
        Validity
            Not Before: May 29 18:45:12 2025 GMT
            Not After : May 28 18:50:12 2026 GMT
        Subject: CN=7E86ABBC02BC2F6E9D8AF72FAD0AEDF144A61569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:24:a2:9e:75:f3:80:fc:8c:f9:a3:60:eb:
                    a9:52:8b:fd:7b:c2:5a:a4:60:bf:46:03:3b:78:93:
                    84:3b:c2:3f:71:b5:44:32:61:07:55:b0:0b:99:d2:
                    02:60:b1:bf:c6:77:b6:30:86:f2:fb:3a:1e:f0:dd:
                    b9:84:76:a2:fe:9f:10:12:35:3a:a0:ee:ed:02:46:
                    9a:e6:37:6c:87:ad:dd:4a:ed:d9:24:f6:7e:d1:60:
                    af:e3:37:c4:ac:f2:d5:2f:be:b9:54:ac:ac:a7:35:
                    ad:46:50:62:56:2b:f6:16:c2:be:1c:39:2e:30:5a:
                    47:cd:5d:56:7c:96:bb:d3:98:99:19:a9:97:f9:48:
                    5f:64:8e:1e:61:a2:68:ba:30:f1:fa:b7:7f:1a:a6:
                    2a:4d:16:db:ed:9d:1c:64:55:04:8b:4f:cd:5a:75:
                    05:d0:c0:94:82:ba:2c:8c:d9:c8:91:d6:08:eb:5f:
                    cf:e0:1d:f8:56:ee:33:ca:c2:ee:fb:09:a3:ce:04:
                    f7:6f:9a:7b:1b:a3:2e:74:a6:e6:70:c4:7c:2d:a8:
                    e5:6e:bd:20:fa:06:63:44:f6:f5:06:d0:bf:e1:f5:
                    a9:d0:68:e0:3a:1a:7e:30:d8:7d:11:08:d3:e3:85:
                    5f:ac:ee:f5:96:d4:4a:61:f9:8b:3e:0e:71:03:78:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:86:AB:BC:02:BC:2F:6E:9D:8A:F7:2F:AD:0A:ED:F1:44:A6:15:69
            X509v3 Authority Key Identifier:
                keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393030303a3a2f34302d3430203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2be0:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:03:45:f4:74:05:2c:a1:6a:85:da:a5:78:7e:2a:97:d8:f0:
         b8:5e:b2:d1:d1:48:30:7c:45:38:eb:71:69:5a:17:49:11:f3:
         a8:6b:8e:08:7f:bd:ed:b0:7f:b4:e9:4f:3a:f7:9d:7d:0d:15:
         e1:96:28:c8:ef:ac:4d:af:48:1d:d2:9c:9b:42:36:e7:64:fc:
         27:32:7d:e0:53:0d:33:30:38:d3:7f:f7:72:6c:8a:0d:30:17:
         ff:24:ce:f6:57:94:dd:2d:41:e3:16:5f:d0:7d:d1:b4:f2:99:
         cd:df:b2:ea:b3:b9:db:23:f3:4b:f1:fc:d0:f4:56:c3:ef:8e:
         ab:43:34:27:5b:68:5b:37:6f:c7:ad:7f:1c:44:e5:fe:41:d1:
         1b:69:b1:15:19:3f:38:47:5c:c0:23:7a:73:ab:84:a5:b8:bb:
         0b:d5:0d:f2:6c:6f:12:6c:80:6d:97:1a:94:fc:26:f8:15:5d:
         84:a6:b9:f4:13:4c:3a:2c:76:f8:14:a5:00:ee:5a:0d:1c:99:
         4f:48:15:2c:e5:69:68:f7:ff:88:99:45:9a:41:fb:1f:fb:a1:
         61:8e:30:01:55:29:d7:bc:7a:14:83:66:63:9f:40:f0:0c:20:
         c9:e5:d1:ed:af:39:ec:9f:55:a4:86:22:10:92:ef:78:3f:ac:
         02:d6:48:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:32:25 2025 by rpki-client