Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a313130303a3a2f34302d3430203d3e20323632323933.roa
File:                     323830343a6138303a313130303a3a2f34302d3430203d3e20323632323933.roa (raw, json)
Hash identifier:          Hk/RlV9WYU6jpmZNiw5qAduLHR51VY+DpyvGarEdsjk=
Subject key identifier:   3D:42:02:D1:A5:09:8A:65:E6:A3:FF:40:1B:1B:8B:A8:2C:F1:39:19
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       42DF679F2DC7A14B44A623F8FF202C20237DFD78
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a313130303a3a2f34302d3430203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:44 +0000
ROA not before:           Sun 08 Jun 2025 11:19:44 +0000
ROA not after:            Sun 07 Jun 2026 11:24:44 +0000
asID:                     262293
IP address blocks:        2804:a80:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:df:67:9f:2d:c7:a1:4b:44:a6:23:f8:ff:20:2c:20:23:7d:fd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:44 2025 GMT
            Not After : Jun  7 11:24:44 2026 GMT
        Subject: CN=3D4202D1A5098A65E6A3FF401B1B8BA82CF13919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:81:7f:fe:64:54:ad:dd:0a:1a:8e:dc:ea:
                    fb:a4:87:5c:c5:9e:19:b1:66:eb:c8:68:32:2e:79:
                    f7:7b:5b:56:19:c6:21:fa:83:ca:ac:c7:11:87:2e:
                    1a:1e:62:5d:28:91:a4:01:63:38:1f:b1:76:75:07:
                    a0:7a:6b:5a:9d:b1:36:a2:dd:41:13:fd:f1:4b:01:
                    fe:59:2f:26:23:34:b6:18:ca:3a:a5:a5:fc:ac:7b:
                    31:2e:4e:5e:16:a8:f2:bb:97:10:ae:0c:b9:19:9e:
                    a7:12:9d:5c:43:4b:04:a3:a7:53:db:5e:02:4c:25:
                    5b:d2:bf:84:71:ce:17:60:7a:ea:43:c1:95:a7:6a:
                    7d:d4:3e:92:67:1f:66:98:bf:92:56:06:36:e9:b8:
                    29:23:37:c8:fa:6d:ea:13:e0:70:09:05:72:86:ca:
                    dc:17:b6:2a:43:46:da:66:8f:58:6c:7e:8a:61:fb:
                    b2:12:c1:25:2d:17:34:8a:d2:08:07:fe:04:55:f6:
                    82:98:3e:9a:ef:b2:85:05:20:bb:ef:c4:9a:be:e7:
                    49:b7:02:2e:2c:b4:87:42:04:d0:2a:05:6f:46:83:
                    71:37:19:f8:72:e9:42:df:14:25:b5:f1:16:75:a2:
                    07:ef:25:a5:e0:80:9d:d0:7b:59:9d:38:c2:25:31:
                    28:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:42:02:D1:A5:09:8A:65:E6:A3:FF:40:1B:1B:8B:A8:2C:F1:39:19
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a313130303a3a2f34302d3430203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a80:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:3f:d9:58:7b:55:35:55:35:58:d7:27:53:2b:90:0d:bd:45:
         94:82:0f:97:bb:4d:b0:29:1a:ec:b4:02:5f:91:3b:fc:98:3c:
         e2:d9:60:a5:ef:59:0b:24:d5:3b:1c:0e:74:29:91:aa:a1:37:
         bb:d2:16:46:f7:21:6a:7c:7a:c4:34:73:cf:4c:08:ab:e5:f4:
         e8:59:fd:11:24:34:67:41:10:06:bc:b7:55:7b:79:ae:13:2c:
         41:09:7a:19:52:ff:d3:ed:05:b6:ae:b7:74:83:65:b3:28:9b:
         ea:a8:cb:74:d6:8d:bc:e2:65:1c:dd:9d:b9:13:d1:8b:5f:14:
         04:ef:4e:e9:b3:34:1d:3f:63:c7:46:aa:9b:83:7f:11:69:5f:
         fe:28:7b:34:3f:49:29:1e:2e:90:fa:e7:92:fa:6d:b7:69:81:
         c6:b3:71:64:ed:fc:e4:d8:cc:ee:d3:c3:a2:e8:80:18:c1:ec:
         7b:af:a2:1d:46:48:65:a7:8d:ae:85:c9:38:1e:5a:13:fd:5b:
         23:01:e6:5a:ad:cb:8d:de:06:af:32:62:5b:c4:02:f0:e8:4b:
         f1:c4:42:d8:e4:47:9c:45:3c:30:a8:89:41:a9:cd:04:1e:8a:
         9b:47:1f:29:9a:64:9d:85:6c:44:19:ca:74:1e:15:8d:ed:08:
         4f:86:cb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:28:01 2025 by rpki-client