Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a3a2f33322d313238203d3e20323730383538.roa
File:                     323830343a373238343a3a2f33322d313238203d3e20323730383538.roa (raw, json)
Hash identifier:          NrROHY7DpPp9p5WvyT8+JNSXxzHdemq9Qh4ASdYoOOE=
Subject key identifier:   6D:50:B6:38:41:E5:86:0C:11:CD:17:61:5A:7F:41:F0:D5:D2:30:88
Certificate issuer:       /CN=7C19C5BF1E5EB4CA4AD0605269272004B17BAE72
Certificate serial:       36DEF4675E23F7511B9852FBA022E7189157842B
Authority key identifier: 7C:19:C5:BF:1E:5E:B4:CA:4A:D0:60:52:69:27:20:04:B1:7B:AE:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a3a2f33322d313238203d3e20323730383538.roa
Signing time:             Wed 25 Jun 2025 17:01:28 +0000
ROA not before:           Wed 25 Jun 2025 16:56:28 +0000
ROA not after:            Wed 24 Jun 2026 17:01:28 +0000
asID:                     270858
IP address blocks:        2804:7284::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.crl
                          rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 18:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:de:f4:67:5e:23:f7:51:1b:98:52:fb:a0:22:e7:18:91:57:84:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C19C5BF1E5EB4CA4AD0605269272004B17BAE72
        Validity
            Not Before: Jun 25 16:56:28 2025 GMT
            Not After : Jun 24 17:01:28 2026 GMT
        Subject: CN=6D50B63841E5860C11CD17615A7F41F0D5D23088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:bb:1a:d8:56:9d:60:5f:ea:d8:04:70:86:
                    b6:51:09:b0:7f:c6:4d:4f:41:f5:85:6d:6a:2a:26:
                    4d:6c:f5:f4:62:3d:21:08:c6:7c:b2:58:7d:97:06:
                    dd:29:49:e0:21:73:bd:11:d5:0a:22:e4:42:7c:8b:
                    4a:09:81:e5:af:b1:1b:51:9b:04:8b:7e:78:fa:c4:
                    e9:55:bd:ca:0d:86:56:03:01:e2:76:18:01:aa:4d:
                    6b:3b:8a:fe:84:db:fe:e3:f2:aa:62:bb:ed:20:2e:
                    02:b6:ae:11:d3:b0:29:80:67:85:a6:87:d8:d3:0f:
                    b5:27:fa:14:2c:90:2e:72:8a:72:37:12:24:84:1a:
                    65:c1:c2:10:19:2c:3d:16:9d:59:76:70:cc:02:31:
                    2e:98:a1:4f:a8:de:1c:85:e5:6f:cc:2f:3b:95:2e:
                    c2:15:0b:39:1e:7f:81:c4:0f:fc:fb:1c:b7:c4:d7:
                    1f:bc:e6:68:74:fd:c1:c0:74:47:8f:26:3d:7f:fb:
                    cb:6a:fb:0a:09:b5:4c:3b:5d:6f:88:5b:2b:b9:77:
                    18:78:62:d5:d9:75:5e:2e:a7:55:f1:89:28:62:36:
                    72:23:a3:a5:c7:5c:31:c9:8c:e2:1b:40:0b:7e:32:
                    f2:37:f3:2f:8e:3c:47:1a:7f:a4:8e:ff:13:45:d3:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:50:B6:38:41:E5:86:0C:11:CD:17:61:5A:7F:41:F0:D5:D2:30:88
            X509v3 Authority Key Identifier:
                keyid:7C:19:C5:BF:1E:5E:B4:CA:4A:D0:60:52:69:27:20:04:B1:7B:AE:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C19C5BF1E5EB4CA4AD0605269272004B17BAE72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4yKT7tGkbDyw3qTy4Ez27ovuDquWwVjfN5AZ8wTf6Ni/0/323830343a373238343a3a2f33322d313238203d3e20323730383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7284::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:a8:82:0d:1b:4d:45:c7:e2:fa:67:5d:03:2c:28:df:7a:
         97:12:04:fd:01:1c:9b:2d:8e:56:66:58:fa:ae:1e:ae:9b:37:
         2c:69:bd:cc:65:57:ba:bd:5b:35:97:c0:49:9e:c4:ca:23:3d:
         58:8d:04:ff:cf:18:99:b3:81:99:d9:55:e7:1f:53:ea:31:ff:
         4c:c5:2c:e9:5c:6a:9e:20:51:57:b1:79:03:fe:ad:52:15:54:
         70:0d:e9:72:ca:7e:9f:43:b2:23:44:93:dc:b7:a8:2a:2c:30:
         e3:b1:6f:a5:f7:fa:5b:31:e4:81:ca:c9:cc:54:d9:b8:c2:ff:
         0c:57:84:61:fc:75:98:71:94:73:d3:a7:90:d3:f6:ff:65:20:
         f6:a1:43:4b:6c:1e:d6:3d:e7:9a:fc:f7:43:b1:aa:10:e5:7a:
         6a:73:97:9f:ff:c6:dc:55:31:c2:d6:48:b7:22:9c:be:49:2f:
         5d:6d:9e:f1:5d:e5:e7:84:72:04:ca:59:52:b5:37:c1:5f:82:
         5d:ae:71:a5:5b:29:e2:72:1b:9a:d9:0f:fc:88:95:6a:2d:3b:
         b7:fd:71:fd:0d:7f:11:38:54:4a:10:e9:87:fa:50:86:d9:6d:
         02:d0:64:90:93:21:59:db:87:f0:5b:de:c7:a8:41:d8:de:62:
         fd:c9:cc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:14:46 2025 by rpki-client