Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/323830343a393432303a3a2f33322d3332203d3e20323734383233.roa
File:                     323830343a393432303a3a2f33322d3332203d3e20323734383233.roa (raw, json)
Hash identifier:          m1gn3JVvx3q/B50g/5cqODKpATdKvOdUZoC1Im75mvU=
Subject key identifier:   1C:AF:FE:F5:1D:17:93:18:5A:F6:91:E9:DF:F6:A2:BA:A8:3F:CE:BA
Certificate issuer:       /CN=BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12
Certificate serial:       48379E7579033B9E27750AC8513AC2B530FDE433
Authority key identifier: BE:CD:6D:4F:8A:FA:BA:CB:AB:9F:BF:6F:3A:0F:02:B0:0B:33:0F:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/323830343a393432303a3a2f33322d3332203d3e20323734383233.roa
Signing time:             Fri 20 Jun 2025 18:16:22 +0000
ROA not before:           Fri 20 Jun 2025 18:11:22 +0000
ROA not after:            Fri 19 Jun 2026 18:16:22 +0000
asID:                     274823
IP address blocks:        2804:9420::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.crl
                          rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 07:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:37:9e:75:79:03:3b:9e:27:75:0a:c8:51:3a:c2:b5:30:fd:e4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12
        Validity
            Not Before: Jun 20 18:11:22 2025 GMT
            Not After : Jun 19 18:16:22 2026 GMT
        Subject: CN=1CAFFEF51D1793185AF691E9DFF6A2BAA83FCEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:b6:5e:97:59:44:83:a5:b1:5c:1d:27:44:
                    8c:92:4a:b3:16:62:8a:37:a3:34:da:98:ae:74:1a:
                    83:41:d8:74:ba:4b:b0:df:39:09:67:9c:43:85:f0:
                    0d:96:46:e3:ed:90:87:cd:7c:bb:e8:d3:d1:e6:25:
                    b7:bb:b2:09:8f:34:b2:cb:7c:34:bd:65:76:be:ea:
                    92:65:33:ae:33:13:c2:59:52:7a:d5:c5:ae:3e:f6:
                    7b:a9:47:53:93:91:71:df:95:ea:18:46:bd:96:33:
                    ed:9a:99:d8:f8:f4:9e:61:03:3c:e1:48:bd:88:8d:
                    6a:f3:c6:15:44:09:40:c4:d4:94:69:15:b1:71:f4:
                    01:d3:13:bf:c0:b2:e1:14:90:b7:70:cf:db:40:45:
                    71:19:bd:de:70:04:1e:c8:b0:9e:0a:85:d8:21:be:
                    f4:17:fb:b5:50:f9:01:2a:b3:f5:98:f9:54:e3:69:
                    9f:3e:6e:85:9a:6a:8c:6d:c6:21:ed:e1:c9:34:a1:
                    67:16:ff:83:34:dd:bc:1f:44:43:45:0a:01:9a:df:
                    58:b3:ee:da:cf:2e:ed:21:61:ac:db:5d:68:47:32:
                    4c:34:ce:8a:8b:96:82:d0:93:5a:e0:43:7a:e8:3f:
                    f6:df:f3:bc:75:b9:e2:1d:93:11:cf:28:e6:65:b9:
                    00:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AF:FE:F5:1D:17:93:18:5A:F6:91:E9:DF:F6:A2:BA:A8:3F:CE:BA
            X509v3 Authority Key Identifier:
                keyid:BE:CD:6D:4F:8A:FA:BA:CB:AB:9F:BF:6F:3A:0F:02:B0:0B:33:0F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/323830343a393432303a3a2f33322d3332203d3e20323734383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9420::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:2f:d6:3b:74:6a:f3:2f:34:e7:dd:93:1c:01:76:63:1a:
         4e:4d:f5:fc:68:55:9e:d7:94:25:08:53:cb:1a:e5:34:10:86:
         3a:50:b3:ed:ed:02:af:a6:98:06:b5:5a:88:ff:86:90:98:a2:
         3c:1c:70:54:8c:1d:53:1c:3e:aa:89:7e:2d:16:b2:83:37:5d:
         af:f7:98:de:6d:26:dd:ec:0d:42:fc:72:77:8a:73:28:a6:d8:
         88:f2:aa:04:6c:a1:76:85:f5:e6:3f:14:7f:d9:9b:37:b5:18:
         b0:97:f7:a3:cd:2b:18:34:b0:82:fd:51:18:b1:ec:fe:54:17:
         ea:ec:77:9c:28:eb:45:8b:b8:42:c6:05:44:63:41:ba:53:39:
         62:43:8e:4f:06:7e:a1:56:1f:da:dd:7c:c8:a6:07:87:34:6f:
         7e:dd:34:c9:7b:dd:aa:6b:61:5e:ca:fb:fe:b1:c8:8c:ae:61:
         97:f1:e5:bf:fb:33:7e:54:64:23:92:0f:82:4b:95:9f:e1:a9:
         01:c9:81:bd:9d:69:9c:be:20:11:81:95:21:0b:9f:32:37:af:
         92:00:f5:a2:f0:20:e0:1e:ac:ee:f5:de:a9:62:be:4f:9c:1b:
         ba:a3:ea:8f:99:de:50:3d:cc:14:9d:2f:8d:f3:78:de:52:0d:
         42:52:75:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:36:58 2025 by rpki-client