Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/323830343a343735383a343130303a3a2f34302d3430203d3e20323637303437.roa
File:                     323830343a343735383a343130303a3a2f34302d3430203d3e20323637303437.roa (raw, json)
Hash identifier:          Hkgo0n9zubIU6nFW36OhHCIgA0RZVnFx3WDHPrRR2nA=
Subject key identifier:   18:30:CC:C4:38:93:4D:9B:18:A5:E3:2D:D4:CA:FE:48:87:B0:61:EC
Certificate issuer:       /CN=717380C17B82263404536494404A01EF51405E80
Certificate serial:       32FF7A75D1C98C1CD9A4C08B13500FA23BE24847
Authority key identifier: 71:73:80:C1:7B:82:26:34:04:53:64:94:40:4A:01:EF:51:40:5E:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717380C17B82263404536494404A01EF51405E80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/323830343a343735383a343130303a3a2f34302d3430203d3e20323637303437.roa
Signing time:             Wed 21 May 2025 14:02:49 +0000
ROA not before:           Wed 21 May 2025 13:57:49 +0000
ROA not after:            Wed 20 May 2026 14:02:49 +0000
asID:                     267047
IP address blocks:        2804:4758:4100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.crl
                          rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717380C17B82263404536494404A01EF51405E80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 21:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ff:7a:75:d1:c9:8c:1c:d9:a4:c0:8b:13:50:0f:a2:3b:e2:48:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717380C17B82263404536494404A01EF51405E80
        Validity
            Not Before: May 21 13:57:49 2025 GMT
            Not After : May 20 14:02:49 2026 GMT
        Subject: CN=1830CCC438934D9B18A5E32DD4CAFE4887B061EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:c7:3c:0c:6f:1d:00:76:ea:eb:4d:89:94:
                    77:9a:30:1b:e8:b0:7e:13:65:0e:8b:4e:4c:93:85:
                    a6:5b:fc:3c:f9:e9:c8:49:4f:63:43:88:72:17:51:
                    f6:63:a6:ec:30:4c:46:02:9a:64:43:3a:7d:5f:e4:
                    6c:fc:ee:62:ec:e2:b6:62:70:e6:79:c5:7a:ab:51:
                    a7:20:2e:b8:0b:21:4c:10:f2:74:d9:29:1d:71:a2:
                    e4:ec:fe:d5:0a:42:bb:f3:5c:8c:3a:58:91:ca:d6:
                    15:2b:3b:b1:c1:e8:63:95:d2:98:e1:e6:f2:c6:ed:
                    89:b5:32:b8:b7:27:a2:54:c2:b5:7f:c1:07:ae:25:
                    02:63:c0:18:94:ae:7e:7c:42:86:f6:85:aa:4b:be:
                    00:c7:7d:88:67:d2:78:a9:b5:4c:67:17:64:9c:d3:
                    8b:74:6e:12:6a:c7:da:48:91:bf:c5:33:97:c1:60:
                    1f:bc:af:0c:89:20:9a:a4:9e:3e:9a:18:c4:0f:40:
                    62:44:76:45:4b:30:27:45:7e:a8:d2:3f:f1:48:c9:
                    fd:99:79:0d:a2:b0:d0:91:84:85:72:a0:2a:cd:51:
                    7a:47:7e:14:cb:f1:e6:61:ab:2a:c6:6e:73:7f:5a:
                    19:2c:8f:99:af:91:50:0a:fb:3c:68:10:e8:cf:1a:
                    41:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:30:CC:C4:38:93:4D:9B:18:A5:E3:2D:D4:CA:FE:48:87:B0:61:EC
            X509v3 Authority Key Identifier:
                keyid:71:73:80:C1:7B:82:26:34:04:53:64:94:40:4A:01:EF:51:40:5E:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/717380C17B82263404536494404A01EF51405E80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/717380C17B82263404536494404A01EF51405E80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXfRx28f2Vzd3GYBEi1GyuEhY6kSP98GJZbhrHeZuTCa/0/323830343a343735383a343130303a3a2f34302d3430203d3e20323637303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4758:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:0d:46:7c:b0:fd:b6:dc:48:09:84:47:31:d5:82:60:2c:b3:
         95:7e:3a:67:71:bd:ed:21:e1:e3:ca:72:e2:e9:fb:38:91:c6:
         dd:0e:ce:37:22:e6:28:ea:4c:dd:78:ff:02:bc:80:be:5a:2b:
         0d:cc:b9:a3:91:a6:60:6b:68:5a:46:6e:19:31:b9:93:b4:87:
         7e:36:0b:fc:df:01:a7:b1:14:5d:24:f2:d6:6e:81:3b:63:1d:
         f6:8f:69:6d:64:b5:eb:63:de:d4:0a:e8:4f:ac:6d:e3:e4:52:
         fa:e1:d7:93:71:30:89:c5:79:78:93:b9:19:1e:dc:1b:44:d9:
         52:1e:11:4a:d7:62:48:e6:77:c8:d8:d7:95:85:dd:97:6c:3d:
         72:98:99:e6:0b:e0:65:57:fe:d6:f3:22:16:99:1e:5d:6f:a7:
         2c:34:6d:13:8f:2c:c7:20:69:cc:d5:25:65:4d:5e:48:5a:59:
         03:15:bd:51:e2:0d:bf:5f:1e:a6:2e:00:1b:06:53:98:e1:ad:
         7f:4e:c1:32:e2:8f:b5:fe:96:9d:50:0a:df:60:38:b6:be:1d:
         06:b1:7c:b2:2a:eb:84:90:95:61:1e:74:fb:ed:6b:67:dd:3b:
         73:e7:54:3b:d7:c1:53:56:5a:79:95:01:d8:68:80:99:23:7c:
         f4:77:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:59 2025 by rpki-client