Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a3a2f34382d3438203d3e20323634333434.roa
File:                     323830343a323637343a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier:          Wy29dWA+F4YU4rPmIm06dckK6mzDq1BE+gWXmhyd4JU=
Subject key identifier:   E2:73:B4:AF:A7:B2:6C:5E:0D:CA:EC:8D:85:AD:90:E4:2E:95:D7:20
Certificate issuer:       /CN=0C2F2329378A15830C150C031943DAA0473FEA42
Certificate serial:       0DC9FDEC40222BDFB9E4317A2EC85C36574514C5
Authority key identifier: 0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a3a2f34382d3438203d3e20323634333434.roa
Signing time:             Wed 04 Jun 2025 15:41:23 +0000
ROA not before:           Wed 04 Jun 2025 15:36:23 +0000
ROA not after:            Wed 03 Jun 2026 15:41:23 +0000
asID:                     264344
IP address blocks:        2804:2674::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl
                          rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 03:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c9:fd:ec:40:22:2b:df:b9:e4:31:7a:2e:c8:5c:36:57:45:14:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2F2329378A15830C150C031943DAA0473FEA42
        Validity
            Not Before: Jun  4 15:36:23 2025 GMT
            Not After : Jun  3 15:41:23 2026 GMT
        Subject: CN=E273B4AFA7B26C5E0DCAEC8D85AD90E42E95D720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:23:d3:29:9d:cd:b2:6c:ee:70:56:f8:80:
                    65:9f:8f:27:2f:29:8a:1e:30:12:01:c6:44:67:22:
                    72:dd:06:50:67:3f:b0:1b:97:e9:3b:df:c3:0d:4b:
                    15:d1:5c:8e:90:71:85:24:81:8c:4f:30:87:3b:32:
                    ed:06:3b:08:01:23:64:c4:b6:b5:b1:52:1d:83:22:
                    8d:ca:f4:7d:1e:d8:ec:1a:9d:33:2e:54:6f:d5:e5:
                    1a:1d:47:1a:5d:f9:7d:9f:b4:39:aa:47:d0:9e:d9:
                    b0:5c:d3:6f:89:89:a8:e5:e0:92:49:34:c3:d1:fc:
                    07:37:04:63:62:b5:ec:92:f9:bc:65:a8:10:bb:f8:
                    c7:2d:af:18:e5:91:9a:bb:29:7a:5c:7a:57:b0:d4:
                    61:10:16:10:b6:e7:eb:94:4c:22:df:34:e4:1a:ac:
                    cc:c6:1e:5d:30:2c:81:81:6d:cb:f5:f4:3c:c8:c4:
                    bb:da:ee:73:12:62:23:96:36:3b:b6:67:f1:d1:42:
                    69:e0:e9:31:dd:36:8a:88:cf:34:c6:16:89:d6:39:
                    41:f1:c7:77:b2:15:a5:5f:b2:56:ca:68:a9:22:d8:
                    bf:16:ad:09:0d:77:77:29:eb:a8:c5:71:d9:87:73:
                    f2:39:b6:b3:02:13:5b:aa:ed:b3:d9:79:62:3c:56:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:73:B4:AF:A7:B2:6C:5E:0D:CA:EC:8D:85:AD:90:E4:2E:95:D7:20
            X509v3 Authority Key Identifier:
                keyid:0C:2F:23:29:37:8A:15:83:0C:15:0C:03:19:43:DA:A0:47:3F:EA:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/0C2F2329378A15830C150C031943DAA0473FEA42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C2F2329378A15830C150C031943DAA0473FEA42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a3a2f34382d3438203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:7f:8b:7c:ca:81:a2:da:23:1b:2a:b1:43:a2:2e:bf:4c:27:
         3e:30:b8:28:80:42:ee:99:3a:c9:fd:9e:ac:b7:fe:d8:d3:e8:
         2c:e3:df:1d:a7:78:83:cc:2c:bd:65:b1:99:7c:5f:c0:1c:a5:
         cd:78:1c:52:d1:d7:49:25:fb:98:7b:e7:d7:80:19:80:67:ee:
         55:a7:8b:16:c3:ea:56:a8:56:34:81:ac:42:dd:9d:6b:81:c6:
         61:69:f6:2b:fa:8d:d2:16:c1:28:2b:ae:2c:36:5b:52:c8:59:
         69:d9:1e:46:70:8f:fd:7d:2b:1f:85:9e:3c:33:41:f5:7d:f6:
         50:47:ba:ad:19:de:db:4f:f7:9c:17:47:f2:f9:93:f3:49:12:
         5b:68:3e:58:ee:b2:4f:06:03:4b:18:e5:70:cb:b4:31:7d:28:
         49:02:60:ac:5c:50:07:2f:90:42:ca:05:f8:c3:34:e9:96:7b:
         1d:67:bc:97:d1:a0:b0:2d:c4:e7:de:0d:32:76:30:1f:a9:4e:
         39:47:63:88:bc:ac:95:58:4d:10:db:ad:f3:82:38:ff:85:1f:
         d0:23:6b:9f:f1:1c:01:b2:37:34:11:57:58:22:74:05:2c:bd:
         c4:0f:83:f8:2d:ba:da:52:bb:12:0d:e0:ac:3d:05:9b:59:ef:
         3f:81:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:42:53 2025 by rpki-client