Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d313238203d3e20323632323933.roa
File:                     323830343a6138303a3a2f33322d313238203d3e20323632323933.roa (raw, json)
Hash identifier:          lUFPts5xfg0WPabc87ppTUDO3dPGlg502xWKyJpTfEY=
Subject key identifier:   86:E1:24:F6:7B:A6:8B:34:C8:A6:1E:9E:0E:1E:B8:6E:32:3F:23:9C
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       5A180FF79FBB3C816DEEC1D072392E8094E86039
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d313238203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:27:34 +0000
ROA not before:           Sun 08 Jun 2025 11:22:34 +0000
ROA not after:            Sun 07 Jun 2026 11:27:34 +0000
asID:                     262293
IP address blocks:        2804:a80::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:18:0f:f7:9f:bb:3c:81:6d:ee:c1:d0:72:39:2e:80:94:e8:60:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:22:34 2025 GMT
            Not After : Jun  7 11:27:34 2026 GMT
        Subject: CN=86E124F67BA68B34C8A61E9E0E1EB86E323F239C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:42:ae:6e:8b:2e:39:8d:bd:33:67:06:b6:86:
                    4c:ee:9c:df:5d:89:11:53:e0:36:5f:2b:7e:5f:2f:
                    1d:53:a9:81:07:d3:88:19:45:ff:3c:3e:e6:9b:90:
                    e7:1f:96:b0:ee:4c:ad:f9:b7:b6:e6:ba:0c:d0:b4:
                    e5:b0:2d:59:92:e3:0a:6d:8b:0e:28:b6:5d:8e:1d:
                    2d:32:83:7e:0c:36:07:cc:f8:8f:31:47:8c:ed:9a:
                    04:2e:94:a6:6c:80:6a:c4:5a:a7:9c:91:09:3b:62:
                    0a:a9:40:40:9c:67:54:6f:28:d8:54:b0:31:aa:27:
                    25:fd:24:13:c9:97:c8:50:94:d1:c7:0d:bf:8f:52:
                    1b:39:62:04:05:af:94:89:54:21:c0:1b:75:e2:a2:
                    0f:43:e4:d6:51:86:33:8e:42:6c:ea:f1:e3:b2:39:
                    1b:30:c5:c1:45:7a:07:11:f9:85:4e:89:da:b5:cd:
                    1a:2f:a9:4c:e9:85:81:56:62:ba:3a:bd:f4:c0:f3:
                    43:77:66:74:f5:16:59:57:56:f7:95:98:51:d7:3a:
                    89:0d:32:7c:54:0d:a6:89:ec:7a:07:b9:58:fa:01:
                    c1:69:c6:69:52:78:98:49:c5:2a:c6:a6:83:36:d1:
                    3c:8e:92:9e:ef:24:d9:1a:f0:b4:cb:4d:1f:3a:dc:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E1:24:F6:7B:A6:8B:34:C8:A6:1E:9E:0E:1E:B8:6E:32:3F:23:9C
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d313238203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:9d:54:ef:30:bc:cb:60:8f:a2:5e:d4:12:0f:bb:20:2a:ff:
         0a:8f:24:a1:3a:c9:35:50:e3:93:dd:25:53:2a:45:00:ca:80:
         8c:14:c8:6f:0f:96:9a:93:ac:af:64:5c:4e:68:7b:ce:c0:e4:
         67:7e:7a:bc:40:a0:2c:0f:33:da:87:d4:c7:66:ca:4d:ca:a6:
         a8:d4:04:f9:9a:e5:e1:a8:24:13:86:74:47:8d:d2:03:6d:e0:
         73:1e:bc:34:ef:de:f7:6b:58:0a:8b:2e:76:70:75:0d:98:c9:
         73:88:de:30:0a:27:ff:13:99:23:57:1d:98:b5:44:ee:50:56:
         f0:11:be:79:dc:11:30:7f:09:ba:93:66:13:b5:29:6c:24:f1:
         eb:af:1a:75:4a:72:54:c1:b5:49:eb:cb:93:e6:72:0f:27:2d:
         a6:12:9d:10:71:31:26:f2:0c:eb:74:c1:cd:cd:a7:e7:4f:d7:
         65:aa:f7:0b:55:2e:cb:6e:2c:2c:f3:3d:c3:e7:94:fb:56:46:
         f4:df:ce:6e:cf:9d:e0:d3:02:dc:11:d8:96:5e:b7:3a:86:56:
         eb:cc:7d:38:62:b5:72:dc:a7:fe:9f:24:16:7c:fb:5d:e8:ed:
         c3:78:bc:6b:bf:cd:0d:aa:65:8b:29:48:c7:74:1b:4d:10:e1:
         4e:ee:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:32:40 2025 by rpki-client