Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d3332203d3e20323632323933.roa
File:                     323830343a6138303a3a2f33322d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          3CeFwTyuLca7dAzNcp4BxRHHyzj7AC+seqelSG+urT4=
Subject key identifier:   95:7B:C8:66:23:AA:00:B1:AD:D4:AE:57:0D:32:07:EE:C7:A7:A2:92
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       2FB86192F7A708E12F79D834475CFA1C46F61F21
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d3332203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:49 +0000
ROA not before:           Sun 08 Jun 2025 11:19:49 +0000
ROA not after:            Sun 07 Jun 2026 11:24:49 +0000
asID:                     262293
IP address blocks:        2804:a80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b8:61:92:f7:a7:08:e1:2f:79:d8:34:47:5c:fa:1c:46:f6:1f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:49 2025 GMT
            Not After : Jun  7 11:24:49 2026 GMT
        Subject: CN=957BC86623AA00B1ADD4AE570D3207EEC7A7A292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:57:09:b0:03:e1:7e:71:38:46:48:94:7f:
                    e8:d9:e8:06:eb:55:3e:54:5a:f9:e9:38:3d:b7:c8:
                    48:30:1d:5d:5b:fd:1b:7f:bb:05:db:8b:a9:da:ae:
                    7a:60:06:2c:e4:69:74:b1:ad:a0:b2:77:5d:0e:6f:
                    6c:d9:9d:e1:b7:79:24:26:2a:d0:b5:1b:fc:8a:1f:
                    25:0e:80:ed:7c:80:6f:69:d9:ae:7a:c5:78:02:a8:
                    42:a3:4e:24:a2:86:b4:b6:bb:17:08:28:e5:42:c5:
                    b7:c6:5f:5b:81:09:52:1f:62:c1:8a:0d:cf:b9:5d:
                    49:30:23:4b:f0:98:2f:b3:8d:98:a1:9f:4e:2d:7a:
                    c0:24:e4:0e:2b:e6:2a:f1:cb:d9:51:f8:ba:de:31:
                    0c:d9:bd:4e:03:6e:31:5d:21:7b:1b:8b:28:74:26:
                    6f:72:51:d6:a4:29:90:2b:e2:4b:6f:21:cd:e5:0c:
                    d8:da:c1:5e:0f:37:1c:ce:3e:dd:f5:1b:a8:ce:d6:
                    e6:64:65:8e:36:10:da:81:80:58:1a:91:cd:63:a9:
                    b3:cf:a1:33:ed:66:42:e4:5d:44:5b:c6:a7:20:53:
                    d7:90:4a:35:c3:ab:d4:2f:0a:af:23:b8:08:00:4b:
                    d4:c9:dc:8a:26:b6:fe:0a:58:d9:f7:03:6d:32:b5:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7B:C8:66:23:AA:00:B1:AD:D4:AE:57:0D:32:07:EE:C7:A7:A2:92
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f33322d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:65:fa:2c:7e:e8:bf:60:5c:0f:b5:11:79:ad:8b:f2:66:ac:
         cb:6b:da:5c:2d:b1:56:7c:72:43:8f:2b:8a:6b:ed:d4:88:b1:
         49:b2:ab:c9:3d:d3:ec:72:35:6e:55:65:2e:4c:ee:f9:69:e0:
         65:5f:2d:cd:a4:72:f1:31:07:16:3a:59:9d:9e:ae:e0:ea:61:
         0f:07:fb:10:68:5e:41:11:b0:5f:a8:a9:88:63:fc:78:e9:3e:
         06:06:0c:28:fc:41:50:8f:2e:fe:69:b2:48:0a:bb:ad:4c:5b:
         c0:dd:70:da:8e:21:86:10:39:4e:94:5f:1e:a8:c9:64:2a:a5:
         dd:1a:91:89:c4:39:d9:43:bc:8e:53:ab:2b:bb:df:7a:f4:e8:
         f8:f1:44:7d:63:8b:1c:61:cc:2e:bf:16:d0:23:0d:2c:97:e6:
         ee:39:2c:25:30:67:50:7f:82:ae:c8:ae:4f:7f:ce:0b:46:4a:
         f2:2f:a2:da:aa:03:03:59:aa:5b:a9:56:7b:71:b8:70:25:d2:
         88:23:ef:3e:e4:b5:44:62:5f:da:31:c6:d8:10:0b:ae:99:60:
         f4:51:7b:c7:9b:5c:3c:3a:2d:6c:2f:f9:02:fd:3c:5a:1c:ce:
         4e:1c:7f:f4:64:47:b2:1b:04:2c:ee:b1:39:b3:34:7a:d4:8b:
         6a:58:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:36:55 2025 by rpki-client