Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3a2f33322d3332203d3e20323636313636.roa
File:                     323830343a336262343a3a2f33322d3332203d3e20323636313636.roa (raw, json)
Hash identifier:          gLe8uvbJAXGdFHOimO7IQFXNbOVwrBmYa6a+XH04mVE=
Subject key identifier:   EC:F9:82:60:87:87:03:5B:31:43:D4:2B:12:D7:1A:B8:7B:E4:F0:97
Certificate issuer:       /CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63
Certificate serial:       1C7D9F54CF6FE02ED50EBF6B3F2FBBC0BD4FB30D
Authority key identifier: A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3a2f33322d3332203d3e20323636313636.roa
Signing time:             Thu 29 May 2025 17:14:41 +0000
ROA not before:           Thu 29 May 2025 17:09:41 +0000
ROA not after:            Thu 28 May 2026 17:14:41 +0000
asID:                     266166
IP address blocks:        2804:3bb4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl
                          rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 04:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7d:9f:54:cf:6f:e0:2e:d5:0e:bf:6b:3f:2f:bb:c0:bd:4f:b3:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63
        Validity
            Not Before: May 29 17:09:41 2025 GMT
            Not After : May 28 17:14:41 2026 GMT
        Subject: CN=ECF982608787035B3143D42B12D71AB87BE4F097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e8:6d:ff:c5:03:7c:3f:6a:08:44:6c:cc:d8:
                    77:83:93:bd:60:3a:69:f6:47:1a:4f:74:6c:22:23:
                    14:af:d1:b6:f4:2e:c0:9b:d9:56:a4:a6:e1:ff:19:
                    a6:10:11:91:e1:69:46:2d:c2:83:6a:40:d7:ef:15:
                    b8:40:b8:8a:04:71:b8:4d:30:8c:74:9e:03:68:a1:
                    3c:c9:db:43:36:38:ca:de:4e:97:69:03:1b:25:d3:
                    49:d2:ae:27:1c:a5:31:b2:9d:ba:44:10:ca:a3:40:
                    ee:e3:51:da:13:4a:36:c1:cc:fc:82:48:b7:1b:25:
                    be:23:f7:18:f0:f4:3a:92:3e:ee:91:b0:26:2c:95:
                    4e:18:95:25:52:2e:cc:83:c1:f2:89:2e:2a:d4:89:
                    91:93:3e:b4:e8:af:2e:fd:4b:1d:86:2b:8a:c4:c8:
                    64:e4:8e:63:a5:3b:16:dd:0f:20:57:b3:96:96:d5:
                    c0:8c:e5:60:74:b0:d1:09:48:a1:0c:3a:77:28:6e:
                    d8:5e:8d:52:5a:7e:f2:66:af:b8:cf:e6:45:c4:eb:
                    ae:12:64:ab:57:d1:e0:42:ec:cb:c6:a1:7a:a0:9a:
                    ec:43:ab:13:ae:e6:ab:9e:d1:68:cd:7d:e9:6d:15:
                    7b:f5:f2:07:5e:20:8a:b5:a2:d2:7f:3b:cd:14:fa:
                    7a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F9:82:60:87:87:03:5B:31:43:D4:2B:12:D7:1A:B8:7B:E4:F0:97
            X509v3 Authority Key Identifier:
                keyid:A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/323830343a336262343a3a2f33322d3332203d3e20323636313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bb4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:c0:b1:62:d6:f0:b0:76:ee:33:bf:73:cf:96:af:44:6e:d6:
         3e:08:44:28:0e:f8:b4:c5:bb:7f:66:75:45:93:61:66:a3:c2:
         f0:f7:2e:fc:e2:3f:25:6d:fa:0e:3d:5a:b6:b9:ac:53:d1:27:
         e0:65:a7:ae:40:91:e5:24:da:5c:54:8c:e1:d9:66:55:71:5f:
         cf:8d:45:70:ee:97:ba:2a:23:cc:04:5c:d8:8b:af:e3:fc:43:
         f7:b8:d4:1b:f3:b5:d6:a6:71:af:9d:5d:c0:c4:7d:29:c3:a6:
         d5:26:5a:54:ed:54:46:e9:0e:e4:6f:c3:05:c8:9c:ea:ff:03:
         de:c2:aa:5f:a8:e6:6a:21:85:2d:e9:48:e4:3e:1e:11:b7:26:
         bf:ce:d5:65:5b:b6:41:75:1f:e6:10:b8:47:b9:77:ba:44:49:
         14:0b:05:09:54:96:87:b0:89:94:95:27:fb:51:ec:ac:10:ed:
         86:5b:7e:d3:fc:9d:e9:5d:77:56:67:82:08:a7:3c:07:4e:07:
         fa:f0:8e:5e:72:72:11:eb:f6:36:d5:9a:17:fc:4c:e6:66:68:
         d7:36:cb:a7:f4:86:7d:f4:1f:ef:5b:40:e9:ce:bd:b1:01:1a:
         e9:29:1d:2d:9d:6a:9b:ab:26:2f:2b:7c:ae:80:ce:c7:7c:94:
         f8:20:e0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:14:56 2025 by rpki-client