Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          5SPiK2HCqFOnHynyREnKR6lwUh9fN9B7nhnaPUpCV/c=
Subject key identifier:   9A:4D:80:77:C6:AB:60:EB:FA:21:27:5D:6E:6D:C3:CE:F9:CD:38:60
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       452738D242AD68395C3CC37DE84FADC9DF6516C5
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:32 +0000
ROA not before:           Tue 03 Jun 2025 16:50:32 +0000
ROA not after:            Tue 02 Jun 2026 16:55:32 +0000
asID:                     264344
IP address blocks:        2804:2674:4300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 03:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:27:38:d2:42:ad:68:39:5c:3c:c3:7d:e8:4f:ad:c9:df:65:16:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:32 2025 GMT
            Not After : Jun  2 16:55:32 2026 GMT
        Subject: CN=9A4D8077C6AB60EBFA21275D6E6DC3CEF9CD3860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:da:c8:65:db:c7:e3:c5:35:3c:6a:20:1d:
                    71:01:64:1b:25:30:73:69:3a:2d:66:82:72:f4:eb:
                    61:ac:c4:10:b6:a6:0b:61:d5:f8:c1:dd:bb:32:09:
                    58:11:8b:a7:0b:c3:22:74:69:b9:ef:20:04:0f:c0:
                    16:4c:a8:2c:72:f9:d6:68:50:6e:0e:5b:99:f7:47:
                    8c:db:04:43:3e:37:5d:7b:0e:bd:15:37:54:b9:9a:
                    20:70:61:bb:38:2c:ac:8a:a0:ea:fc:24:b2:3e:3c:
                    fe:e0:76:c1:76:da:c0:e3:65:5d:20:36:c9:f6:39:
                    c1:92:1d:46:b4:b5:6f:ca:12:b1:eb:50:22:c2:55:
                    17:de:3d:e1:6f:aa:34:f2:a2:7c:a0:4f:a5:95:ae:
                    d3:6c:df:1c:f5:ab:ef:b1:b4:5f:76:78:b3:56:14:
                    b0:79:40:d6:53:c3:5c:20:6b:3b:1a:3b:01:76:6e:
                    18:66:ea:9e:eb:1f:19:ef:82:fc:3b:d4:fa:b4:de:
                    0d:54:ee:7e:42:c1:d1:0f:4a:7a:3d:97:0a:1c:37:
                    ec:09:0f:11:be:ab:30:af:b9:d3:38:4d:7e:1b:63:
                    09:cd:43:2f:b7:c2:2d:af:14:39:c9:e9:21:08:a0:
                    18:b5:76:39:0b:81:03:91:64:c0:dc:35:4d:03:89:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4D:80:77:C6:AB:60:EB:FA:21:27:5D:6E:6D:C3:CE:F9:CD:38:60
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343330303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4300::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:a3:72:47:07:26:62:f0:d9:e7:0b:b8:09:07:c5:7c:4d:93:
         0c:3a:7a:e6:5d:e8:03:10:2a:5a:50:9f:7c:83:76:85:72:53:
         cc:1a:75:e6:be:f7:45:27:db:d6:a0:ce:60:45:22:fe:1f:58:
         a3:a3:58:8e:5f:dc:6e:2c:f9:8a:b4:e7:5e:c2:97:f1:1a:c9:
         5a:8b:45:52:05:54:8b:e9:87:16:11:40:4d:26:9a:a4:76:e0:
         9d:40:59:a1:74:aa:23:8d:8c:6d:68:90:aa:dc:b9:e9:91:ee:
         30:08:b9:f6:b1:5a:5c:09:2e:b5:60:43:ed:31:93:e1:fe:3a:
         fd:e1:8c:1b:66:a8:57:25:4c:2a:fb:96:e2:36:d2:b8:a4:d9:
         23:fa:c6:1b:17:4c:58:fa:c8:d8:5c:71:68:12:ec:51:45:bd:
         75:76:74:f8:00:5f:cf:7f:87:45:8c:c3:2a:0a:cc:85:35:2a:
         38:b3:57:6f:3b:b2:64:76:12:3d:b5:fc:a0:f6:8d:f3:a0:f3:
         3f:7a:a5:b8:db:b0:ed:54:fe:a6:fc:7f:2e:23:44:64:e6:25:
         ef:75:29:a7:0e:1b:a8:32:b4:7f:a4:84:65:22:4b:d5:2f:af:
         df:1c:38:6e:14:65:56:f8:83:f8:9e:14:fd:b4:f2:38:0b:83:
         04:79:57:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:59:48 2025 by rpki-client