Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WtsPS512En2oceD5EivTpV4kVp4FkiWhnsmcmqPFBti/0/323830343a373037343a3a2f33322d3438203d3e203632363033.roa
File:                     323830343a373037343a3a2f33322d3438203d3e203632363033.roa (raw, json)
Hash identifier:          Azs3cPYUNlwdsZrZrHIFK/g2OQkSHZcnbeTYr+rZsAk=
Subject key identifier:   A2:21:58:51:06:0B:DE:13:F2:08:2F:94:C2:AF:9A:A5:37:02:0F:50
Certificate issuer:       /CN=5C6496B676555EAD2CC7CB5A76D4DD033512D301
Certificate serial:       60D805B1AEC0206CEEB959A469EE602EF994EA64
Authority key identifier: 5C:64:96:B6:76:55:5E:AD:2C:C7:CB:5A:76:D4:DD:03:35:12:D3:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C6496B676555EAD2CC7CB5A76D4DD033512D301.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WtsPS512En2oceD5EivTpV4kVp4FkiWhnsmcmqPFBti/0/323830343a373037343a3a2f33322d3438203d3e203632363033.roa
Signing time:             Mon 30 Jun 2025 13:20:53 +0000
ROA not before:           Mon 30 Jun 2025 13:15:53 +0000
ROA not after:            Mon 29 Jun 2026 13:20:53 +0000
asID:                     62603
IP address blocks:        2804:7074::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9WtsPS512En2oceD5EivTpV4kVp4FkiWhnsmcmqPFBti/0/5C6496B676555EAD2CC7CB5A76D4DD033512D301.crl
                          rsync://rpki-repo.registro.br/repo/9WtsPS512En2oceD5EivTpV4kVp4FkiWhnsmcmqPFBti/0/5C6496B676555EAD2CC7CB5A76D4DD033512D301.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C6496B676555EAD2CC7CB5A76D4DD033512D301.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 11:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d8:05:b1:ae:c0:20:6c:ee:b9:59:a4:69:ee:60:2e:f9:94:ea:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C6496B676555EAD2CC7CB5A76D4DD033512D301
        Validity
            Not Before: Jun 30 13:15:53 2025 GMT
            Not After : Jun 29 13:20:53 2026 GMT
        Subject: CN=A2215851060BDE13F2082F94C2AF9AA537020F50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:89:29:12:e1:4b:03:f8:a8:a9:5c:67:e5:
                    af:49:37:a1:6b:78:5e:10:14:cb:6a:2f:d2:b8:ce:
                    d6:e5:4e:65:37:e3:0d:5f:79:55:93:21:15:f5:65:
                    d4:1a:07:73:e2:dd:a9:2e:3b:58:4d:d7:cc:60:39:
                    0b:5d:ea:63:2c:5f:9f:92:36:9c:53:5c:78:ff:36:
                    26:4b:ea:c3:1d:87:30:b0:ab:1d:9d:45:d2:45:a5:
                    14:39:95:dd:c3:56:cf:6a:53:ca:ff:c9:12:7c:ce:
                    82:d2:93:5a:b1:b7:6c:36:2a:06:57:a2:3c:46:76:
                    52:2d:44:1a:6d:ac:8f:27:22:ca:c5:2d:d9:a2:b7:
                    f2:92:f9:1f:18:33:1d:d6:54:4b:76:be:35:6c:50:
                    54:2e:f8:3c:8e:ac:d8:be:15:b9:ec:e0:1f:1e:8d:
                    22:c4:18:fa:8c:fc:dd:9e:ff:cd:76:3e:fa:3b:20:
                    14:5b:08:2d:5d:ad:58:2c:08:20:95:4d:dc:7a:29:
                    b3:b1:e3:f9:52:f0:42:87:94:26:49:b6:af:23:f3:
                    cc:76:34:c0:34:6b:05:1f:00:5b:33:e8:82:f9:ca:
                    74:3a:d3:b8:60:d7:5b:5d:03:bb:29:14:b7:58:2b:
                    84:49:ff:90:73:61:7b:8b:f9:91:6b:62:e4:e1:8a:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:21:58:51:06:0B:DE:13:F2:08:2F:94:C2:AF:9A:A5:37:02:0F:50
            X509v3 Authority Key Identifier:
                keyid:5C:64:96:B6:76:55:5E:AD:2C:C7:CB:5A:76:D4:DD:03:35:12:D3:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WtsPS512En2oceD5EivTpV4kVp4FkiWhnsmcmqPFBti/0/5C6496B676555EAD2CC7CB5A76D4DD033512D301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5C6496B676555EAD2CC7CB5A76D4DD033512D301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WtsPS512En2oceD5EivTpV4kVp4FkiWhnsmcmqPFBti/0/323830343a373037343a3a2f33322d3438203d3e203632363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7074::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:54:10:8e:59:1d:6f:9e:b0:2c:64:8f:52:4b:48:d2:10:d4:
         a0:10:ff:a8:69:21:a2:e1:7e:a4:5a:ad:ea:19:d3:ad:01:da:
         0a:63:e9:6c:13:39:34:a7:4b:62:ed:37:a7:c9:32:6e:21:38:
         d9:53:c7:74:1d:31:f7:4a:8f:5c:f2:33:32:4b:71:ba:ac:c4:
         06:32:fe:88:1e:f4:70:82:52:4b:ff:84:47:24:16:06:54:88:
         51:7b:e0:5c:58:32:6b:0a:e7:7a:41:9c:8a:31:6e:07:a3:da:
         9f:af:2d:fb:c8:37:61:8f:55:50:8d:bc:bb:e5:ee:c3:39:1a:
         7e:60:ac:0e:c7:1a:db:08:c1:c0:7e:b8:ed:06:c4:b9:eb:99:
         e5:5e:ed:78:62:0d:31:c4:23:90:27:2f:62:fd:c4:70:f7:9d:
         f5:a0:06:d5:23:39:9e:e8:55:2b:82:d7:0b:82:0f:98:d2:9b:
         7b:ca:28:5d:f8:b4:bc:04:17:3a:49:97:d8:38:e5:f6:38:0f:
         c1:45:d9:71:3b:6d:93:71:12:45:6c:a0:67:77:d4:a5:64:33:
         c3:7f:5b:d5:de:2e:fb:ab:68:47:f8:5e:55:ea:50:eb:41:03:
         34:da:91:59:e4:da:c5:58:2e:2a:dd:ef:15:06:28:53:27:cc:
         80:5f:cb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 20:01:15 2025 by rpki-client