Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/323830343a336634383a3a2f33322d313238203d3e20323636363530.roa
File:                     323830343a336634383a3a2f33322d313238203d3e20323636363530.roa (raw, json)
Hash identifier:          ZJt7R5RQ3S+69oulqrX88V0+D552Dy8CGU/EA/kjGd0=
Subject key identifier:   08:30:37:DC:C8:DA:73:4A:0D:49:C9:79:6D:DB:78:6C:7B:25:C3:DE
Certificate issuer:       /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
Certificate serial:       423201D6059F44768509C9FBFCA9AFC6DAA26ABB
Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/323830343a336634383a3a2f33322d313238203d3e20323636363530.roa
Signing time:             Thu 22 May 2025 17:13:06 +0000
ROA not before:           Thu 22 May 2025 17:08:06 +0000
ROA not after:            Thu 21 May 2026 17:13:06 +0000
asID:                     266650
IP address blocks:        2804:3f48::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl
                          rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 13:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:32:01:d6:05:9f:44:76:85:09:c9:fb:fc:a9:af:c6:da:a2:6a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
        Validity
            Not Before: May 22 17:08:06 2025 GMT
            Not After : May 21 17:13:06 2026 GMT
        Subject: CN=083037DCC8DA734A0D49C9796DDB786C7B25C3DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:82:11:a9:e9:8b:f5:5f:2b:08:e1:20:ea:
                    39:cd:04:36:d7:80:e2:ef:28:17:f4:f3:b9:62:76:
                    ca:a5:56:09:21:16:f8:a3:28:1f:ed:8d:1c:3a:af:
                    8d:87:20:12:6e:8b:69:93:42:92:aa:f8:42:66:f4:
                    16:8b:50:fe:93:cf:d8:dd:53:b5:d8:26:eb:22:be:
                    07:f7:db:75:57:2c:ab:cf:e8:62:bc:34:79:2a:69:
                    10:8c:24:4d:73:67:c7:f7:c3:33:3e:85:8a:d9:1a:
                    c2:b0:5c:79:37:64:26:a1:64:a5:3f:c5:43:60:66:
                    e4:50:ca:1e:5f:c6:c6:12:82:46:28:24:cd:bd:9d:
                    b7:f8:27:d5:de:4f:e2:dc:77:a7:73:75:9b:09:ce:
                    9f:b1:77:ab:6d:85:28:0a:77:68:2e:de:c0:d1:47:
                    1f:71:7e:44:41:ee:1d:34:be:f1:03:de:26:97:1e:
                    fe:0f:e4:73:7b:5e:9b:63:4e:01:52:0b:81:cb:d9:
                    09:d7:1a:87:2c:5f:eb:a3:24:ee:be:66:e0:ac:5b:
                    7c:4f:dd:b0:14:8a:af:a8:da:5c:e6:27:5a:74:0f:
                    19:46:44:56:de:3c:fc:12:82:8b:8d:fc:67:be:5c:
                    19:18:ec:e0:8b:63:f6:3f:1a:a6:76:0e:33:28:9e:
                    11:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:30:37:DC:C8:DA:73:4A:0D:49:C9:79:6D:DB:78:6C:7B:25:C3:DE
            X509v3 Authority Key Identifier:
                keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/323830343a336634383a3a2f33322d313238203d3e20323636363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f48::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:2b:af:e5:cf:eb:75:b5:62:a2:0d:b0:76:52:58:d5:fc:3e:
         50:30:70:6d:5c:a5:38:7b:02:d9:ab:ca:62:54:57:33:a0:be:
         b2:73:51:a0:1f:f0:96:cf:04:92:05:d7:2a:aa:bc:ef:99:82:
         5a:d2:e3:a1:41:a9:24:ab:ac:c2:b3:82:a7:77:52:a5:38:6d:
         76:14:be:4a:d3:01:b8:87:10:c0:25:da:a0:d4:00:2a:6c:6e:
         ec:1f:c3:a6:64:8d:05:c8:44:59:c5:0e:69:49:21:ff:91:5a:
         f3:4c:09:8f:f0:83:e2:75:75:9e:9e:c2:b1:1e:5c:3b:b9:4a:
         df:f6:b8:1b:6a:1e:06:b1:b7:b6:ad:6c:17:1f:ce:00:18:60:
         ed:69:e6:e3:a1:e1:aa:6a:fc:7f:c6:3b:ae:1a:45:c2:c1:10:
         fd:6e:f6:a7:3e:f9:7c:d9:08:1c:c3:c5:88:93:0f:b8:fe:71:
         97:65:c4:4c:3f:50:14:65:e5:69:aa:19:d5:84:a1:59:94:3e:
         fc:51:9f:a5:b9:49:7b:a1:a4:67:81:68:9b:e5:6b:dd:e1:d0:
         75:3b:20:89:1e:93:30:92:e8:7c:0c:2d:bc:08:10:fc:e6:5c:
         08:ca:e0:41:1a:22:ed:e6:6c:02:60:a6:8d:c9:00:d2:8e:3b:
         fb:9c:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 00:26:58 2025 by rpki-client