Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a313230303a3a2f34302d3430203d3e20323632323933.roa
File:                     323830343a6138303a313230303a3a2f34302d3430203d3e20323632323933.roa (raw, json)
Hash identifier:          goJwYQ+G6uL+WKLlBW/iMGZOoSHc6azMtsUP2VNgLYg=
Subject key identifier:   5D:15:9B:C8:DB:7A:FA:55:93:27:2F:8E:E2:B8:7E:0D:11:46:F7:DA
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       3ED08E5233EC56A5C2D7795069CBAE1AE3CD3A57
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a313230303a3a2f34302d3430203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:47 +0000
ROA not before:           Sun 08 Jun 2025 11:19:47 +0000
ROA not after:            Sun 07 Jun 2026 11:24:47 +0000
asID:                     262293
IP address blocks:        2804:a80:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d0:8e:52:33:ec:56:a5:c2:d7:79:50:69:cb:ae:1a:e3:cd:3a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:47 2025 GMT
            Not After : Jun  7 11:24:47 2026 GMT
        Subject: CN=5D159BC8DB7AFA5593272F8EE2B87E0D1146F7DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d5:c6:c6:a8:ca:b2:ba:fe:4e:78:1c:1b:7a:
                    b7:ab:91:4b:43:a0:97:0b:3e:4e:09:31:f6:35:4c:
                    ff:59:79:91:ac:ca:d7:05:cb:63:37:5d:42:98:17:
                    ed:cf:70:35:c6:ff:f2:51:83:ee:85:dc:f4:45:50:
                    a1:17:be:3c:23:ad:65:34:4d:c7:15:5d:c4:dc:32:
                    b7:ea:b1:5d:84:2e:00:5c:95:f9:3c:f3:02:15:31:
                    87:a6:15:37:d9:4a:e1:f1:23:29:12:7a:ee:ca:98:
                    bf:30:5a:0f:53:43:cf:ef:f2:a7:41:a1:06:27:71:
                    09:6a:5d:f4:2b:77:15:21:47:8e:5b:48:34:25:70:
                    3e:b5:73:f2:51:0f:4c:5f:fd:2a:4a:25:75:65:54:
                    4e:ef:b0:79:80:74:75:a5:59:b4:59:47:0f:1a:34:
                    ca:ac:63:5e:19:61:bf:ba:68:54:22:fe:58:b1:f3:
                    29:c5:04:a0:33:2b:fc:59:5f:b9:66:59:55:e8:aa:
                    1f:06:a0:46:76:55:e0:de:bd:18:23:69:db:eb:51:
                    0f:e9:bf:80:5e:a5:29:6a:aa:07:71:66:9e:ad:20:
                    32:7d:00:2a:53:5a:23:4e:6d:f5:4e:7e:2d:10:57:
                    ba:e3:d8:d9:93:0d:60:a8:c8:8b:45:bc:ae:99:c3:
                    27:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:15:9B:C8:DB:7A:FA:55:93:27:2F:8E:E2:B8:7E:0D:11:46:F7:DA
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a313230303a3a2f34302d3430203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a80:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:52:c2:01:ef:26:b1:9a:46:9e:3a:35:6d:53:d9:e0:f6:be:
         92:28:a3:55:a5:bf:33:27:4c:b9:be:8b:91:d0:f3:d6:ba:f4:
         d9:1a:6e:5c:4d:59:10:bf:50:a0:cc:7c:24:b5:e9:cb:86:22:
         2d:3f:5e:3f:8f:f8:32:e8:0e:f2:43:cb:e4:8b:71:ae:73:4d:
         b5:d0:1a:c6:08:e6:22:af:a2:88:d3:7b:a8:a7:21:cf:4d:1b:
         fa:b6:2b:60:2b:3a:4b:04:97:22:85:c2:b0:11:6c:cc:75:d9:
         26:9e:84:45:f2:6a:63:53:bd:83:a4:87:80:88:8f:87:62:4c:
         14:7a:4f:a0:fa:f3:6f:db:14:20:ed:5c:fe:cd:af:60:f5:cd:
         06:e0:04:27:08:0e:e5:87:0a:7e:6f:9f:34:07:a8:a4:ab:7b:
         27:d0:d2:47:8d:d4:9a:31:23:74:49:47:84:46:46:28:33:84:
         3b:ab:21:bb:85:82:e9:a4:eb:04:52:6c:1f:6f:04:55:89:c6:
         56:3c:b5:69:43:2a:93:14:59:99:8b:68:04:b7:37:93:a9:f4:
         9f:72:f1:94:4e:62:3b:df:dc:a7:1f:47:bf:0f:67:de:f0:16:
         71:8d:ea:51:98:67:87:71:f9:a3:3a:32:b6:b0:a5:da:31:43:
         2d:e0:e7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:39:48 2025 by rpki-client