Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f34302d3430203d3e20323632323933.roa
File:                     323830343a6138303a3a2f34302d3430203d3e20323632323933.roa (raw, json)
Hash identifier:          c+25400uB1nRLZ73+OlmUm9vwJ5s4SShBXCExBWEfS8=
Subject key identifier:   0F:2B:AB:C2:FB:86:4B:46:94:41:8C:B4:E7:35:89:53:CB:E7:2C:87
Certificate issuer:       /CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
Certificate serial:       5BD1C8EF98A04C522B405AD7F7EAFB9E8989EFF2
Authority key identifier: 98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f34302d3430203d3e20323632323933.roa
Signing time:             Sun 08 Jun 2025 11:24:47 +0000
ROA not before:           Sun 08 Jun 2025 11:19:47 +0000
ROA not after:            Sun 07 Jun 2026 11:24:47 +0000
asID:                     262293
IP address blocks:        2804:a80::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 19:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d1:c8:ef:98:a0:4c:52:2b:40:5a:d7:f7:ea:fb:9e:89:89:ef:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9810FFB4CD98A64E67D0C5B6F994D1A79711DF65
        Validity
            Not Before: Jun  8 11:19:47 2025 GMT
            Not After : Jun  7 11:24:47 2026 GMT
        Subject: CN=0F2BABC2FB864B4694418CB4E7358953CBE72C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:d5:cd:80:6f:fb:d1:0a:4f:99:00:e1:39:
                    fd:40:eb:22:ae:19:ee:87:91:b7:d3:e8:1d:7c:42:
                    e0:60:d9:03:97:be:a7:63:b3:e2:8e:18:fb:ee:e5:
                    d8:89:9f:37:31:c5:0e:66:4a:f6:36:bb:8e:36:f3:
                    ac:88:78:07:14:c3:64:31:d7:01:6b:00:cd:79:b7:
                    ed:3e:52:13:d6:02:65:70:49:06:78:ae:04:1d:3c:
                    31:f6:c4:3e:eb:6c:43:49:b6:d0:d2:b1:9b:5c:74:
                    5f:99:60:e7:ad:7b:d6:e3:b2:93:8c:0d:82:30:df:
                    c3:5b:33:d9:f8:65:b8:11:43:68:e5:ba:c1:3d:9c:
                    81:28:08:ec:20:ef:40:72:1c:6d:6f:9f:d7:80:bf:
                    a4:72:3c:47:59:f5:8e:bd:4e:35:27:a5:97:e5:bd:
                    16:05:57:4f:bb:86:3f:1c:08:4f:ec:e1:e6:76:6b:
                    50:e4:78:80:58:f1:58:46:2b:ba:c6:64:8f:1f:68:
                    60:a2:db:b2:17:0e:39:d9:4c:11:7d:2a:08:6e:cc:
                    c8:a2:96:8c:e4:92:57:1d:21:4a:85:e4:d9:38:84:
                    d6:20:e7:30:9e:35:8f:1f:55:ef:ae:46:75:bc:d3:
                    26:85:2c:1b:4e:87:25:d5:0c:72:63:38:c9:cc:3a:
                    6b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2B:AB:C2:FB:86:4B:46:94:41:8C:B4:E7:35:89:53:CB:E7:2C:87
            X509v3 Authority Key Identifier:
                keyid:98:10:FF:B4:CD:98:A6:4E:67:D0:C5:B6:F9:94:D1:A7:97:11:DF:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9810FFB4CD98A64E67D0C5B6F994D1A79711DF65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f34302d3430203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a80::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:9c:a2:48:b9:d0:e1:26:18:aa:e0:1e:d8:60:06:7d:1b:35:
         07:3c:31:c5:cf:ab:7b:59:28:0f:3c:b6:05:87:0c:a2:a9:99:
         bc:bc:ab:63:12:97:88:4f:27:98:2f:88:91:5e:77:bd:56:57:
         65:03:57:2b:c1:dd:ee:5a:55:bb:8b:ef:49:f7:89:ba:c0:7e:
         09:84:ee:87:98:46:cd:58:4f:9e:d3:98:36:67:87:3a:ff:fe:
         9f:da:f0:92:12:3e:e5:7d:57:3e:71:06:80:9e:ff:b2:2d:39:
         81:e1:21:e9:3b:c3:4c:92:02:05:60:a6:e2:8c:9b:60:ab:0c:
         64:a7:88:5c:8f:36:6d:2c:d7:1b:55:dd:9a:98:1b:7a:c6:d8:
         08:e2:24:99:3b:7a:2a:7b:1b:34:df:57:5e:e6:8f:a9:b0:08:
         11:90:92:8e:35:b3:53:0b:02:a3:7f:55:4e:49:e2:b2:d7:3c:
         d9:44:14:bc:ef:88:0d:83:8b:ff:8b:9b:4a:9b:5b:23:f0:cd:
         7e:47:c0:30:80:99:7e:91:2c:c8:38:c7:dc:56:7f:50:81:1d:
         4e:0d:f0:42:be:41:68:7c:0c:1e:b3:6c:0d:72:4b:c7:06:12:
         b0:b3:cc:73:71:bc:b4:78:a1:fb:23:f9:22:90:29:a5:96:54:
         48:6b:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:31:43 2025 by rpki-client