Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353030303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a353030303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          rTa4HfCsmXvBoSllstcS41F90vMSuc4/2zDezRsKyUo=
Subject key identifier:   16:42:23:35:E3:97:E9:22:3C:85:FB:85:3E:6B:40:39:AF:78:DC:54
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       1EFB9640BD66CD2AD76B08DC5F3F131A883C110C
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353030303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:32 +0000
ROA not before:           Tue 03 Jun 2025 16:50:32 +0000
ROA not after:            Tue 02 Jun 2026 16:55:32 +0000
asID:                     264344
IP address blocks:        2804:2674:5000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 15:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fb:96:40:bd:66:cd:2a:d7:6b:08:dc:5f:3f:13:1a:88:3c:11:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:32 2025 GMT
            Not After : Jun  2 16:55:32 2026 GMT
        Subject: CN=16422335E397E9223C85FB853E6B4039AF78DC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:b0:28:55:88:d9:cf:98:c1:28:36:25:2d:
                    48:ab:3c:87:3b:ee:6c:8d:1a:15:c8:ae:d4:29:b2:
                    f1:af:ed:15:73:c1:4c:29:d1:c9:62:4a:6e:56:20:
                    0b:1d:1c:be:17:4f:6c:22:d5:93:fc:52:1e:a7:9e:
                    b3:f5:a0:ba:9e:08:b4:18:36:0a:de:bd:59:fb:78:
                    b6:f3:12:09:51:5d:1c:56:d4:ad:0e:a6:08:4f:43:
                    69:01:4f:37:0d:64:12:c6:11:10:06:91:56:03:42:
                    98:a2:3e:6f:4e:a5:2c:ac:f9:e0:7d:d3:4e:f4:00:
                    bc:33:96:2a:48:d6:1e:c3:5e:9f:ea:9b:72:b0:ac:
                    1a:32:17:33:93:79:81:dd:4d:b7:c6:a1:bc:c6:fc:
                    23:0d:0e:b1:d8:1a:26:08:aa:55:eb:55:63:63:32:
                    0d:32:8b:30:da:0f:dd:11:0d:61:1f:72:a6:45:1d:
                    c2:c1:42:c5:94:ac:41:7e:63:74:ba:26:e5:63:16:
                    f1:fa:cc:7c:ae:e1:c9:fa:2f:6f:41:09:d7:98:00:
                    6d:23:57:f3:75:3c:94:d2:71:84:96:a1:c8:03:5b:
                    24:ac:2c:e2:34:65:8a:c7:23:ea:b5:ca:af:1b:f9:
                    cb:94:f3:fe:dc:ef:d5:7c:8b:74:f2:ed:8e:5e:95:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:42:23:35:E3:97:E9:22:3C:85:FB:85:3E:6B:40:39:AF:78:DC:54
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353030303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:26:49:ee:f4:a2:2c:fe:aa:62:22:f8:19:aa:8a:2c:53:5d:
         aa:bd:7e:e8:dd:45:b9:8e:5d:7c:1c:13:2c:e4:15:a3:9d:51:
         7e:81:09:e7:6a:74:af:87:89:b0:84:33:43:70:c2:86:53:3c:
         c3:c1:03:94:53:54:e9:ee:ee:dc:20:79:a2:b2:18:4e:c8:e6:
         6c:ab:62:34:cb:96:f6:cd:90:5e:c6:c2:0d:61:24:c7:76:20:
         cb:45:b9:4b:f4:03:8a:21:8c:52:3c:04:e7:43:0b:54:31:f0:
         e4:c2:ea:29:18:9f:8e:20:e4:17:54:42:b3:05:e1:25:e1:8c:
         03:94:e9:85:6f:5e:68:63:01:05:63:62:7b:87:6b:96:06:8b:
         b6:8a:99:cc:c7:b7:d8:0b:e8:2b:6e:52:e0:f9:e9:07:0a:79:
         9b:0a:36:6f:b0:9b:73:a3:e6:30:8e:c5:9f:fd:83:54:3d:3a:
         d8:a5:e3:28:ad:6f:c3:9d:f6:e2:63:a4:7b:c8:87:71:0f:d0:
         31:24:2a:2b:37:95:bf:26:76:be:84:80:75:b2:e9:eb:c1:fe:
         7f:03:2e:9e:2e:b7:62:44:39:01:21:2d:22:3d:a2:96:2e:05:
         b8:b2:57:90:01:10:2e:1e:08:75:f6:10:ac:72:f7:a9:7c:0e:
         14:0f:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:15:27 2025 by rpki-client