Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343130303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343130303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          DDlFlfr6M14S7YLEGD/e2Hel5duqKGevFBR0zZJ9izs=
Subject key identifier:   04:BD:A6:B2:35:6F:3E:29:54:2D:3B:4D:BD:23:31:DF:CC:12:FD:C0
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       31E95A81F42E08812B50412CB06762B66AA09225
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343130303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:32 +0000
ROA not before:           Tue 03 Jun 2025 16:50:32 +0000
ROA not after:            Tue 02 Jun 2026 16:55:32 +0000
asID:                     264344
IP address blocks:        2804:2674:4100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 00:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e9:5a:81:f4:2e:08:81:2b:50:41:2c:b0:67:62:b6:6a:a0:92:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:32 2025 GMT
            Not After : Jun  2 16:55:32 2026 GMT
        Subject: CN=04BDA6B2356F3E29542D3B4DBD2331DFCC12FDC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:d3:a6:69:df:5b:cb:65:d3:4c:e4:19:b7:
                    23:f9:01:d5:37:04:25:4c:a2:c4:52:bd:88:44:67:
                    0a:6a:ca:81:f8:52:2d:83:df:28:4f:7d:c2:94:dd:
                    f1:35:3b:df:49:3c:9a:8c:b2:7d:62:bb:9a:43:99:
                    e2:71:1c:ed:90:9b:f9:d4:9a:80:4e:eb:66:80:b8:
                    29:71:de:ba:f9:5c:7c:fb:2c:f4:51:f3:ed:f8:7e:
                    9c:a6:70:41:33:f2:2a:85:85:dc:23:88:bf:6f:f1:
                    ee:8e:92:3e:fa:87:d9:79:68:21:ba:62:77:5e:1e:
                    5e:f7:96:6a:35:cc:1f:7b:40:14:f3:51:52:98:c3:
                    2e:97:09:00:9e:31:9b:9d:f8:8d:a2:d1:86:b0:4b:
                    1b:8e:fd:d0:4d:57:68:77:f6:50:77:d7:38:66:d9:
                    36:b9:6e:38:f6:16:95:5e:15:d5:ab:07:97:4c:ab:
                    a1:d2:2e:70:aa:85:6e:69:75:fb:98:1d:45:f3:8e:
                    8a:5a:76:ba:7e:5b:f2:77:a6:59:73:53:bf:7f:e8:
                    59:f8:32:d2:1c:9d:95:64:3f:b1:62:27:c5:62:a0:
                    d5:e0:92:12:2b:a9:c3:54:5d:1d:59:c7:05:80:cb:
                    c0:96:8a:5b:16:b5:cb:71:84:3a:f6:46:69:eb:1a:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BD:A6:B2:35:6F:3E:29:54:2D:3B:4D:BD:23:31:DF:CC:12:FD:C0
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343130303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:05:d0:79:09:41:25:47:2a:4a:3b:52:1d:2a:2a:4e:15:d1:
         cf:85:e0:e4:1c:48:b4:e1:0a:78:03:4e:bb:be:eb:03:32:79:
         9b:17:db:2b:0b:fb:fe:a0:2e:20:d2:dc:66:9b:0e:fd:2f:e3:
         5a:d6:1c:92:37:2c:8b:77:9d:3c:cc:5f:c6:4b:5d:58:c8:2c:
         e7:9e:20:64:3e:7f:c4:44:fb:a1:45:5a:a9:5b:cb:d0:a5:c0:
         87:73:56:07:05:2b:1d:16:7d:90:42:3a:b6:5e:b5:07:a0:62:
         23:c6:85:5d:dc:76:0e:00:6d:fd:9d:2d:25:1c:57:cc:12:0f:
         46:45:84:b6:e7:11:56:7a:e5:38:36:9e:95:f2:6f:ca:32:95:
         13:cc:83:a6:ae:77:36:1b:8c:61:20:df:13:8d:eb:ca:7a:d3:
         90:8a:8b:16:92:d7:57:7b:4f:14:39:14:5f:fb:7a:65:47:a4:
         e0:28:62:1f:60:43:53:89:07:6c:ef:e6:bd:5b:80:14:f0:af:
         dd:32:42:ae:62:12:49:56:8b:04:7a:a3:65:c9:c6:66:01:d5:
         17:24:c1:27:18:47:60:32:86:60:95:6e:01:b4:b7:6b:b3:04:
         f9:6e:66:f6:80:78:04:ed:1d:35:68:ad:94:dd:34:58:63:3f:
         2b:40:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:57:51 2025 by rpki-client