Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/323830343a313762383a3a2f33322d3438203d3e20323632343334.roa
File:                     323830343a313762383a3a2f33322d3438203d3e20323632343334.roa (raw, json)
Hash identifier:          uYS1aO3/xsk1lGHaoKa2baH+NIprgqZUS8Z1Ir0oies=
Subject key identifier:   59:D5:8B:1E:91:EC:28:DC:98:28:AC:48:C8:65:23:D8:FD:2E:1A:55
Certificate issuer:       /CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
Certificate serial:       759774C8FFA7D31E6CFE91222BE4DE4DD30D65CE
Authority key identifier: A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/323830343a313762383a3a2f33322d3438203d3e20323632343334.roa
Signing time:             Tue 03 Jun 2025 20:37:48 +0000
ROA not before:           Tue 03 Jun 2025 20:32:48 +0000
ROA not after:            Tue 02 Jun 2026 20:37:48 +0000
asID:                     262434
IP address blocks:        2804:17b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl
                          rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 15:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:97:74:c8:ff:a7:d3:1e:6c:fe:91:22:2b:e4:de:4d:d3:0d:65:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
        Validity
            Not Before: Jun  3 20:32:48 2025 GMT
            Not After : Jun  2 20:37:48 2026 GMT
        Subject: CN=59D58B1E91EC28DC9828AC48C86523D8FD2E1A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:db:2d:7c:7f:15:e6:61:34:06:d1:cf:a0:
                    5e:bd:9c:e5:31:cf:ad:0f:09:b8:f0:ad:40:7f:90:
                    c4:6e:62:63:39:97:95:f7:23:63:dd:74:db:ee:5a:
                    a8:48:3b:b1:e0:68:46:25:5f:cd:67:79:cf:92:fc:
                    f1:a4:45:71:b0:5e:99:92:ad:52:88:b8:29:72:dc:
                    5c:d7:d3:30:4c:2d:ec:ac:e4:13:b4:7d:b0:74:62:
                    90:fb:a5:83:96:e5:cb:8d:87:23:f4:3b:7e:6a:5e:
                    a9:7b:d5:97:7b:f8:1b:df:f7:7d:4a:34:04:86:8e:
                    3c:ff:6d:96:cb:13:7d:8e:02:e6:5f:81:fa:f0:d8:
                    02:a9:fb:98:16:32:9e:1c:da:80:cb:8e:9b:76:dd:
                    95:6c:da:97:b9:fd:f2:0f:f3:27:98:bb:27:99:95:
                    12:67:11:d1:98:72:05:de:fb:73:d6:70:40:a3:d6:
                    2a:3d:14:bb:d2:c7:a4:fd:c9:fb:02:41:dc:c4:64:
                    cb:3b:79:1f:2d:4b:09:65:13:85:85:14:9e:d5:0e:
                    49:b5:e6:34:97:d3:c1:8b:ea:d4:a8:08:e9:c6:23:
                    85:05:6c:68:5b:f5:b9:e0:20:0f:3a:4d:45:b9:f9:
                    9e:8b:11:ea:8a:63:b9:7d:b1:46:ef:5e:6f:fa:a4:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D5:8B:1E:91:EC:28:DC:98:28:AC:48:C8:65:23:D8:FD:2E:1A:55
            X509v3 Authority Key Identifier:
                keyid:A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/323830343a313762383a3a2f33322d3438203d3e20323632343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:4a:4b:4f:e8:95:82:4d:76:28:ba:40:51:f1:02:00:ad:ab:
         80:c9:0b:a7:80:71:d1:aa:1a:be:42:0f:77:d5:a5:74:a2:ae:
         76:2b:3d:09:15:d9:eb:12:80:53:d9:ce:35:6c:de:0f:62:df:
         40:1d:7d:63:16:2d:e6:ae:64:19:59:59:99:48:99:b2:7b:5d:
         b5:c6:14:5f:3c:c6:d1:3a:e4:ec:ed:2b:bf:f8:77:aa:be:e0:
         fa:9b:ef:a6:83:a1:cb:a2:22:f4:e6:ea:00:da:1c:c4:25:89:
         c5:04:90:26:f8:96:4f:e4:a0:f5:c5:a2:51:b1:40:ad:44:4f:
         b2:c5:91:f6:c4:4d:c5:8c:19:d7:f6:b6:e5:32:08:7c:82:d7:
         28:7c:9d:e3:e1:2a:88:37:8a:fc:3c:26:51:08:8c:6f:e0:8d:
         71:ce:4c:ec:6a:49:59:c4:c4:9e:87:00:be:93:84:e1:68:a8:
         35:7e:1a:1b:39:fb:f5:e2:3b:cd:c4:55:a6:6c:5c:f7:f3:8c:
         21:72:5c:25:7d:be:5a:eb:d2:28:1f:fe:d6:07:f9:76:ae:8d:
         70:ca:b8:f6:80:59:96:ac:1b:ce:38:c5:f8:4e:1f:12:7f:b2:
         a3:14:6d:65:d3:42:b3:b2:3e:62:a5:5e:3d:3a:55:db:93:6c:
         d4:2a:88:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:17:51 2025 by rpki-client