Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353330303a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a353330303a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          2ZMnBdp10JUGDgE93Pm4aNAxy82lXoRWZlW3j9Gi/es=
Subject key identifier:   17:47:A5:EE:81:75:55:0F:81:28:5D:F9:5B:CF:36:41:72:E8:09:66
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       51DEA22ACED2DF9C2B6D8DC91FE214F5ED017015
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353330303a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 27 Aug 2025 11:46:18 +0000
ROA not before:           Wed 27 Aug 2025 11:41:18 +0000
ROA not after:            Wed 26 Aug 2026 11:46:18 +0000
asID:                     264344
IP address blocks:        2804:2674:5300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:de:a2:2a:ce:d2:df:9c:2b:6d:8d:c9:1f:e2:14:f5:ed:01:70:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Aug 27 11:41:18 2025 GMT
            Not After : Aug 26 11:46:18 2026 GMT
        Subject: CN=1747A5EE8175550F81285DF95BCF364172E80966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:0a:47:58:1c:8e:44:a6:a1:a0:cf:c3:32:
                    ca:08:18:6d:87:77:fa:39:29:cb:35:3f:26:92:21:
                    88:87:07:36:bc:91:6b:66:1d:fd:40:99:a9:4f:a8:
                    51:7e:d9:5b:5e:ba:83:de:db:55:28:28:e1:c9:28:
                    e1:64:db:8c:d8:54:e0:dd:ba:8b:7e:7a:d3:9d:7a:
                    5e:00:81:d7:44:8b:c6:14:85:34:70:ff:e6:24:55:
                    15:f2:ac:64:38:da:79:70:e9:9f:62:c9:42:b6:b4:
                    1b:86:52:b6:05:6e:f9:90:f0:64:cb:26:01:5b:8a:
                    13:db:c7:37:5c:98:7f:c8:90:12:09:15:bd:dd:f7:
                    33:b0:87:66:1e:f5:6a:ca:72:ed:c6:db:59:6d:4b:
                    7f:13:b5:83:73:51:52:13:cd:2a:33:c7:95:eb:21:
                    38:a2:78:32:f2:55:c4:11:fb:16:7b:e9:33:ab:42:
                    93:a3:76:fb:ed:14:b8:d7:02:b6:05:ed:5b:87:07:
                    50:44:e5:92:1e:36:74:3e:cd:b1:b5:b2:63:ed:24:
                    c7:a3:ca:2a:2b:f7:7b:5d:6c:d3:3e:79:aa:21:5c:
                    ba:ed:4f:a9:b8:a3:1b:3a:f1:10:4e:5c:5b:50:49:
                    c6:f8:a5:80:88:62:39:8e:cc:4c:f4:b1:11:54:8e:
                    32:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:47:A5:EE:81:75:55:0F:81:28:5D:F9:5B:CF:36:41:72:E8:09:66
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a353330303a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:5300::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:79:41:df:f7:c3:2c:e1:de:b9:40:01:97:7a:19:ba:c1:5a:
         52:56:2c:57:1d:69:40:38:c6:61:90:3d:07:71:e1:8d:bc:cb:
         ef:e3:f6:b9:bc:33:ca:5d:3d:f7:24:83:24:89:ab:e9:bb:d6:
         25:80:eb:51:89:86:e0:4a:7a:ca:0a:94:d2:49:f4:75:99:5c:
         f9:a7:6f:48:5b:b4:29:0f:dd:be:aa:d0:97:cf:bb:a0:d4:fb:
         17:df:36:fe:85:75:66:89:39:08:19:4f:3e:61:60:88:16:94:
         5b:40:d8:54:ac:59:e3:67:da:ad:3c:7a:b4:c2:75:29:c6:d8:
         7d:89:d9:16:67:4c:36:c8:a6:69:c0:9c:8f:79:02:19:a3:bf:
         8f:44:5b:6c:65:9a:e7:de:9d:31:7e:d6:f5:5c:1c:1c:8e:54:
         81:53:77:fb:92:59:05:27:81:1c:2e:9b:e3:73:bb:d4:79:67:
         47:88:17:1c:ea:6b:2e:dd:a1:5f:c0:40:7f:11:a8:3b:30:45:
         af:a9:d9:d2:40:34:d2:86:ad:ab:88:6d:6c:5c:a6:5c:1f:76:
         87:a7:08:1d:a6:82:4b:60:f2:dd:da:0a:a1:de:be:42:e6:d7:
         a0:cb:34:1f:de:62:e6:36:8c:5c:5e:f9:64:05:45:dd:00:7b:
         e2:9c:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:53:58 2025 by rpki-client