Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/323830343a373263303a3a2f33322d3332203d3e20323730383733.roa
File:                     323830343a373263303a3a2f33322d3332203d3e20323730383733.roa (raw, json)
Hash identifier:          RKg08dTia6H/aAUIPYc97tyJCGFLWjjqq0t+k3HOEUk=
Subject key identifier:   1E:ED:D4:AA:78:4D:98:83:DB:D1:C0:D2:D2:2D:C5:67:F7:AE:87:E4
Certificate issuer:       /CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
Certificate serial:       3AD9E39DC3236B334931B0D2E8B6B6F8750D5D56
Authority key identifier: 46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/323830343a373263303a3a2f33322d3332203d3e20323730383733.roa
Signing time:             Fri 06 Jun 2025 15:02:49 +0000
ROA not before:           Fri 06 Jun 2025 14:57:49 +0000
ROA not after:            Fri 05 Jun 2026 15:02:49 +0000
asID:                     270873
IP address blocks:        2804:72c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.crl
                          rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 14 Jun 2025 10:59:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d9:e3:9d:c3:23:6b:33:49:31:b0:d2:e8:b6:b6:f8:75:0d:5d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B712FDB1DD6EDE73EFEB711E11BCA6345B134D
        Validity
            Not Before: Jun  6 14:57:49 2025 GMT
            Not After : Jun  5 15:02:49 2026 GMT
        Subject: CN=1EEDD4AA784D9883DBD1C0D2D22DC567F7AE87E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:f9:cf:7b:49:3d:24:e7:62:02:d0:24:3b:
                    77:74:be:57:4f:7b:cf:4e:09:36:29:d7:a6:f7:55:
                    6b:1a:5e:b2:cc:af:74:2d:5d:ee:ff:a0:df:21:52:
                    10:0c:a5:2a:1b:a6:e0:7e:92:8c:4c:6a:23:98:67:
                    b7:a8:d1:a7:b5:a8:9c:e0:11:b4:22:fd:e5:0b:2d:
                    9d:b3:4c:96:d7:a7:f5:e9:c8:08:e0:80:26:54:9b:
                    f7:32:24:e1:81:0e:72:ad:33:b4:77:10:6b:bd:12:
                    ce:8b:be:a7:a9:68:24:de:90:d7:72:84:43:65:b1:
                    38:7c:5b:23:a2:14:16:73:62:7c:fa:d6:47:9e:d3:
                    c3:20:6c:e7:ee:51:58:75:d9:12:0d:90:3d:bd:14:
                    85:a6:30:09:d2:c1:c3:e3:d7:17:ac:22:99:30:11:
                    01:3e:ad:d4:c2:3f:92:f8:f1:63:61:85:ef:fa:5c:
                    20:36:86:a2:d5:49:ee:85:35:a0:2f:ae:e8:08:9f:
                    1a:1a:f8:e9:2d:31:6b:f7:6c:41:74:cc:2f:5d:46:
                    d1:60:7f:b4:72:da:61:fd:b1:3e:84:04:7a:2c:97:
                    45:54:6d:bb:10:31:f4:81:32:d0:6b:8d:11:07:d8:
                    f9:e9:51:68:90:a6:8e:d5:e3:80:f0:4b:1e:a9:1a:
                    a5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:ED:D4:AA:78:4D:98:83:DB:D1:C0:D2:D2:2D:C5:67:F7:AE:87:E4
            X509v3 Authority Key Identifier:
                keyid:46:B7:12:FD:B1:DD:6E:DE:73:EF:EB:71:1E:11:BC:A6:34:5B:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46B712FDB1DD6EDE73EFEB711E11BCA6345B134D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iQfftvrwdXJsUxhTJ74Ui1KNqHPCvRmHZ6MTs7eFxGU/0/323830343a373263303a3a2f33322d3332203d3e20323730383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:37:a1:0a:17:11:0b:6e:2c:d1:64:5c:5a:55:6b:f6:aa:91:
         4c:45:38:27:13:ed:a6:7e:8e:05:1f:8c:37:14:57:e7:64:70:
         63:2f:21:7a:2a:65:8c:b6:7c:aa:cf:87:41:1f:ab:a0:41:92:
         87:6b:01:ef:54:cc:2b:51:88:fe:e0:01:5f:7e:80:9f:c8:78:
         bf:dc:86:ff:a9:20:8e:f5:3e:7c:e5:cb:39:b3:6a:38:40:75:
         79:67:a0:10:bf:df:66:e4:ae:8e:cb:7c:14:b6:72:28:26:96:
         53:f1:5d:dd:a6:ca:60:d3:7c:8e:6a:72:80:17:22:2a:d2:35:
         98:1e:a2:6e:a3:cb:cc:60:e5:3d:37:4a:86:f3:47:1e:54:b5:
         b4:20:ff:39:22:63:e1:ad:bc:8b:32:e5:e3:83:d2:c2:2d:18:
         0b:61:fe:6f:e3:80:0c:03:6a:a2:0c:a3:14:dd:5b:6b:66:0c:
         60:36:94:08:bd:e1:99:89:d0:c6:f8:ca:0f:3f:dd:cf:77:48:
         89:3c:b2:0d:65:1f:41:de:fd:00:4f:75:58:5e:d7:fa:44:51:
         ca:5e:5b:7a:8b:ef:f8:33:1b:e1:21:1f:dc:4f:55:89:69:d5:
         1f:22:a1:20:e0:9b:b9:78:7b:1d:15:54:34:61:45:47:9d:be:
         1c:ee:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:58:54 2025 by rpki-client