Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/323830343a393432303a3a2f33332d3333203d3e20323734383233.roa
File:                     323830343a393432303a3a2f33332d3333203d3e20323734383233.roa (raw, json)
Hash identifier:          pr3CqlYEjFEiNafltznb2tPR2E8ucxVQOXz3AqW1T9w=
Subject key identifier:   78:47:2A:B7:A7:6B:9A:19:74:90:36:12:64:9F:B2:85:62:AE:1E:CC
Certificate issuer:       /CN=BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12
Certificate serial:       64C151EA5525478F711E31C35087D5E383E8CA05
Authority key identifier: BE:CD:6D:4F:8A:FA:BA:CB:AB:9F:BF:6F:3A:0F:02:B0:0B:33:0F:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/323830343a393432303a3a2f33332d3333203d3e20323734383233.roa
Signing time:             Mon 16 Jun 2025 22:37:46 +0000
ROA not before:           Mon 16 Jun 2025 22:32:46 +0000
ROA not after:            Mon 15 Jun 2026 22:37:46 +0000
asID:                     274823
IP address blocks:        2804:9420::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.crl
                          rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 07:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c1:51:ea:55:25:47:8f:71:1e:31:c3:50:87:d5:e3:83:e8:ca:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12
        Validity
            Not Before: Jun 16 22:32:46 2025 GMT
            Not After : Jun 15 22:37:46 2026 GMT
        Subject: CN=78472AB7A76B9A1974903612649FB28562AE1ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c1:b1:e8:3f:5d:62:51:1d:d3:b3:28:a4:8f:
                    a6:f0:57:34:95:9a:22:86:b5:90:13:0d:aa:ce:8e:
                    45:af:c7:84:14:1b:e3:1a:a1:6f:20:19:b0:d0:a4:
                    ea:1f:ac:21:bd:cb:dc:65:97:81:78:63:a3:31:46:
                    d5:fd:9d:00:33:d2:06:b8:0e:94:63:7d:73:16:8e:
                    9f:ac:43:aa:43:8e:dc:ab:49:a3:7c:09:d1:3e:05:
                    c9:63:8b:9a:4d:2e:ce:b5:96:c4:df:b7:5d:7c:e7:
                    fb:05:75:ed:64:82:bc:9a:b4:50:1d:47:39:01:c8:
                    0b:ec:b9:5b:f0:f5:71:db:b8:3b:d6:32:54:c4:71:
                    49:b4:64:45:ca:20:95:0d:a5:f1:11:f4:1a:48:83:
                    3e:0a:13:d1:8a:12:40:91:f9:23:99:f8:1c:74:b0:
                    9a:13:7f:61:da:94:88:54:5e:92:ce:cf:9b:e3:bf:
                    05:98:1c:33:81:6f:b3:f4:43:26:83:4c:d8:47:58:
                    56:7a:61:6d:d1:47:9f:96:a1:53:67:cf:05:67:24:
                    c5:7c:da:a5:1a:37:a1:c9:4c:04:d5:b4:f0:54:4f:
                    d7:75:19:08:4b:b4:ca:e8:88:8f:60:c8:08:e2:d5:
                    5e:1d:b1:59:7b:00:7f:83:29:1a:94:07:16:70:d2:
                    a5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:47:2A:B7:A7:6B:9A:19:74:90:36:12:64:9F:B2:85:62:AE:1E:CC
            X509v3 Authority Key Identifier:
                keyid:BE:CD:6D:4F:8A:FA:BA:CB:AB:9F:BF:6F:3A:0F:02:B0:0B:33:0F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BECD6D4F8AFABACBAB9FBF6F3A0F02B00B330F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kc1WvvTqpXBN4rPpp7c5F4JGz7XxPMQcep7ZEvz1vXz/0/323830343a393432303a3a2f33332d3333203d3e20323734383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9420::/33

    Signature Algorithm: sha256WithRSAEncryption
         71:16:82:ce:d3:19:2d:60:5b:6e:20:ad:de:88:2d:4f:70:0c:
         07:f0:d9:34:2b:c4:32:5d:f7:77:89:08:8a:f8:e8:6a:5e:7d:
         23:d9:57:e9:bd:d8:89:7b:f9:e1:b5:cc:08:a0:09:42:51:fd:
         22:3d:7f:42:ad:47:22:47:7b:75:a9:dd:dc:ac:cf:20:5c:c4:
         3a:4f:27:88:00:e5:12:f8:99:7f:98:d1:c3:a0:47:06:e2:df:
         41:7c:4b:fa:4c:91:bd:c3:96:d4:7e:2e:4f:c1:a3:4d:9e:86:
         fa:78:17:2e:9a:3c:a7:0d:0a:d4:c2:7f:22:b8:dc:aa:eb:18:
         46:51:42:7f:75:bf:93:d2:56:c4:17:27:30:90:6c:8a:f4:e3:
         e8:93:a5:f7:a5:ae:59:cf:f2:f8:48:69:61:10:84:3d:7d:03:
         cc:03:1c:53:1f:c7:00:a9:62:16:9f:cc:c8:39:ac:46:9b:83:
         de:35:f4:05:f3:5b:6e:ba:1e:c5:0c:1c:c2:3a:7f:6e:1a:8d:
         be:a7:e7:3a:df:55:b6:25:da:b6:97:a6:19:c1:82:cf:36:18:
         ac:0c:03:d1:bb:c5:a4:28:4f:1f:03:13:fa:e4:c2:c9:ed:9a:
         e0:87:cc:80:54:97:8f:b5:b1:4c:93:84:e0:61:cc:ce:b4:dc:
         47:97:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:38:04 2025 by rpki-client