Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f33332d3333203d3e20323634333434.roa
File:                     323830343a323637343a383030303a3a2f33332d3333203d3e20323634333434.roa (raw, json)
Hash identifier:          783+SFLIx2ATZoz9p8uwjWZrncac90tiUeAhv4PpYVU=
Subject key identifier:   7A:B1:A2:3F:B1:F0:1A:19:9C:B7:8B:50:45:F8:3E:FD:55:61:25:D6
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       54D4E215EDF50AEADC9091DE9AD15E2BAD2FA7F8
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f33332d3333203d3e20323634333434.roa
Signing time:             Tue 03 Jun 2025 16:55:31 +0000
ROA not before:           Tue 03 Jun 2025 16:50:31 +0000
ROA not after:            Tue 02 Jun 2026 16:55:31 +0000
asID:                     264344
IP address blocks:        2804:2674:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 03:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d4:e2:15:ed:f5:0a:ea:dc:90:91:de:9a:d1:5e:2b:ad:2f:a7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  3 16:50:31 2025 GMT
            Not After : Jun  2 16:55:31 2026 GMT
        Subject: CN=7AB1A23FB1F01A199CB78B5045F83EFD556125D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:90:f0:cf:13:17:bc:3f:68:38:4b:d2:de:3d:
                    45:f3:85:4f:eb:be:88:f5:77:ce:6e:04:3f:89:be:
                    13:76:e6:d7:35:25:b9:69:d3:9b:08:a5:8d:6f:c1:
                    f0:8f:09:67:70:80:ad:90:c9:49:03:bf:07:7a:d2:
                    16:af:39:95:e6:17:57:95:0f:16:6d:68:01:d2:74:
                    5b:42:44:d0:2c:4e:a6:7f:04:61:5d:34:6a:75:43:
                    ce:77:4c:1f:76:61:bb:e8:4f:87:cc:fe:b6:80:89:
                    a7:1b:a6:a8:7f:2c:f2:7b:5d:8c:74:83:ce:03:5f:
                    df:4c:75:0d:30:f9:76:d1:ae:3a:ff:60:de:58:2a:
                    17:d6:59:b1:30:47:e4:7c:58:c5:ca:1e:ce:9f:4b:
                    30:5e:70:b9:23:ef:86:5a:c6:0d:72:5f:2d:eb:38:
                    99:ab:96:72:7b:e3:e5:e1:c2:12:2d:c9:d9:5a:3f:
                    3f:85:ce:96:36:39:0c:88:74:3d:0f:7d:8b:71:65:
                    0e:6f:eb:97:ca:d3:69:25:ea:d1:29:3c:7a:9f:7b:
                    94:ec:00:b1:7a:9d:6f:00:eb:77:52:42:11:f8:8d:
                    a5:17:93:3c:07:1a:e2:f7:c7:9f:10:be:8c:57:ea:
                    f8:28:aa:da:62:70:a0:b4:cd:a9:fd:e5:9b:46:04:
                    5e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B1:A2:3F:B1:F0:1A:19:9C:B7:8B:50:45:F8:3E:FD:55:61:25:D6
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a383030303a3a2f33332d3333203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         61:63:aa:80:69:fb:8f:32:f4:87:8b:d1:fa:40:12:23:c9:0f:
         cc:9a:be:38:c0:af:99:1c:ea:cb:5b:fd:7b:6c:f8:f8:25:f6:
         f0:6f:1d:a8:1a:1a:f1:7a:35:c1:ba:45:e6:ab:8e:f0:3d:47:
         94:b5:d7:1d:6e:cf:47:bc:ad:87:ad:e5:60:a7:4b:04:4e:1c:
         7f:f3:25:85:8f:fc:e2:db:fa:27:e2:58:dd:90:97:c9:ad:cb:
         da:b0:cb:64:3c:6a:22:f2:3c:ec:e8:46:55:e4:a4:8b:e3:aa:
         12:c7:e0:c8:3f:83:64:e1:72:2a:91:84:d6:d6:ed:b7:0c:ca:
         99:01:6e:da:07:a7:a7:06:3a:34:39:63:4f:40:42:9b:23:c6:
         8b:55:f6:93:d1:01:a2:b1:d9:52:69:c1:5a:b9:6a:84:2e:77:
         cf:fe:cb:54:50:5b:2c:bd:28:48:04:e1:73:ff:8f:34:63:00:
         c3:72:da:5c:3c:ff:82:a0:93:cb:63:b7:45:97:2e:8d:50:28:
         bd:5b:c2:da:d4:fe:93:b6:5b:da:9e:6c:33:7c:2e:a9:6d:91:
         21:f3:d6:d7:cb:98:d9:da:ae:d8:d1:29:09:5a:25:34:5b:dc:
         f7:20:4b:7a:09:8c:3b:30:18:0e:61:73:c4:a3:89:98:8f:29:
         84:3e:5a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:05:58 2025 by rpki-client