Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a3a2f33322d313238203d3e20323730383737.roa
File:                     323830343a373264303a3a2f33322d313238203d3e20323730383737.roa (raw, json)
Hash identifier:          x0Negjnv647J6XLParkDmeJSFD9sjq4i3L0k57j1LkI=
Subject key identifier:   BE:24:88:B1:6B:E8:B5:50:FB:B6:96:F8:E8:29:A0:E8:7C:05:44:C1
Certificate issuer:       /CN=3E268A146165B7580B59E044B59D275B5F824225
Certificate serial:       701758D4FC931E83535079E6113170C7A2F0879C
Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a3a2f33322d313238203d3e20323730383737.roa
Signing time:             Tue 03 Jun 2025 18:45:50 +0000
ROA not before:           Tue 03 Jun 2025 18:40:50 +0000
ROA not after:            Tue 02 Jun 2026 18:45:50 +0000
asID:                     270877
IP address blocks:        2804:72d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl
                          rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 14:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:17:58:d4:fc:93:1e:83:53:50:79:e6:11:31:70:c7:a2:f0:87:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225
        Validity
            Not Before: Jun  3 18:40:50 2025 GMT
            Not After : Jun  2 18:45:50 2026 GMT
        Subject: CN=BE2488B16BE8B550FBB696F8E829A0E87C0544C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:eb:b2:e1:e1:a3:66:b4:86:e1:52:d0:02:55:
                    32:47:d7:84:8d:7d:2f:5b:a6:c1:58:98:26:c4:3c:
                    08:65:bd:04:da:6a:a7:38:6d:05:14:46:a8:00:c4:
                    b0:65:02:02:2c:56:ae:37:6c:df:2a:48:fa:ba:9b:
                    69:7b:75:88:09:74:85:20:5d:51:51:dd:e8:da:02:
                    5b:50:14:ee:cb:73:e4:df:e6:e0:f4:12:73:27:e6:
                    ef:05:1f:31:75:f7:00:a9:cf:62:53:54:de:dd:66:
                    16:c3:43:cd:60:91:d8:30:4f:e1:37:be:95:0c:44:
                    08:ea:29:39:9f:53:0e:61:dc:46:92:a7:e4:66:15:
                    ec:23:96:4b:c5:08:66:a0:c0:8a:7c:2a:86:63:04:
                    5c:57:c0:97:5d:d9:59:0b:84:45:16:5b:ab:c9:9e:
                    56:63:b3:87:aa:c7:2b:e8:ba:a9:74:b0:8d:35:0a:
                    fb:28:12:a7:e6:a2:11:71:f6:3c:ca:16:9e:18:35:
                    d9:26:57:f5:47:bc:98:cb:3b:e2:46:7b:f5:49:82:
                    8f:e8:f2:30:51:a3:6c:13:77:30:14:9a:1d:4a:c9:
                    e5:a7:cd:45:66:4e:08:52:85:76:eb:f5:a3:1d:4e:
                    86:cb:38:d0:a2:6a:a2:24:35:d5:73:b0:f0:0d:48:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:24:88:B1:6B:E8:B5:50:FB:B6:96:F8:E8:29:A0:E8:7C:05:44:C1
            X509v3 Authority Key Identifier:
                keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a3a2f33322d313238203d3e20323730383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:9f:c0:b0:f0:66:60:b9:82:7a:c0:38:62:10:29:83:d6:51:
         96:36:f9:a8:b7:b0:15:09:59:89:0a:09:cb:14:e6:58:3f:e2:
         78:11:f5:af:91:be:ca:fa:1e:77:f8:00:6c:06:28:7f:e1:d9:
         da:62:e7:b5:f4:08:72:46:ea:54:5e:0b:32:6f:15:47:e2:ff:
         50:8a:45:31:ed:b0:9e:bb:42:5d:e6:ed:24:11:ad:78:cb:08:
         1a:4f:72:51:f5:0d:34:f8:23:e1:8b:78:5c:50:70:91:ac:e4:
         35:20:b8:b1:94:68:ff:00:3b:be:40:2b:3d:92:87:66:4f:bc:
         e8:1e:5a:07:5e:ee:f2:67:3a:1c:09:80:ec:a7:19:70:7e:ad:
         d3:da:e4:db:ee:5e:75:b0:ab:9b:bc:69:60:9f:36:62:6e:80:
         fa:41:77:2f:8b:05:a4:a5:88:b8:69:38:c0:fa:cb:52:97:91:
         dc:f9:79:dc:5d:9d:14:28:38:31:bf:11:fb:87:1c:a5:1f:ff:
         5b:9c:fd:5e:78:71:a8:5f:e2:7b:48:d6:b6:a7:95:30:08:22:
         fe:e4:5f:65:6c:80:8b:e5:a5:c7:8d:5a:c1:83:a3:9d:41:a3:
         7c:34:46:20:aa:3f:d3:11:04:7e:b4:0c:f4:af:7d:54:bc:58:
         fe:d5:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:48:10 2025 by rpki-client