Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/323830343a363939633a3a2f33322d3438203d3e20323730323830.roa
File:                     323830343a363939633a3a2f33322d3438203d3e20323730323830.roa (raw, json)
Hash identifier:          Y6PjBaQg4MvncK8pQuzBSfeGA0CeIo1JJ4fGdQl+P5I=
Subject key identifier:   93:41:35:44:19:00:23:D4:79:99:99:54:D2:61:0E:9C:CC:0F:A6:FE
Certificate issuer:       /CN=A740A7A96036C4D621D5040D884971C669EFC62A
Certificate serial:       4BC4158DFFB46E01DAA7D89A3BBEEC0DDD8B28B6
Authority key identifier: A7:40:A7:A9:60:36:C4:D6:21:D5:04:0D:88:49:71:C6:69:EF:C6:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A740A7A96036C4D621D5040D884971C669EFC62A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/323830343a363939633a3a2f33322d3438203d3e20323730323830.roa
Signing time:             Tue 27 May 2025 12:40:56 +0000
ROA not before:           Tue 27 May 2025 12:35:56 +0000
ROA not after:            Tue 26 May 2026 12:40:56 +0000
asID:                     270280
IP address blocks:        2804:699c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/A740A7A96036C4D621D5040D884971C669EFC62A.crl
                          rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/A740A7A96036C4D621D5040D884971C669EFC62A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A740A7A96036C4D621D5040D884971C669EFC62A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 09:11:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c4:15:8d:ff:b4:6e:01:da:a7:d8:9a:3b:be:ec:0d:dd:8b:28:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A740A7A96036C4D621D5040D884971C669EFC62A
        Validity
            Not Before: May 27 12:35:56 2025 GMT
            Not After : May 26 12:40:56 2026 GMT
        Subject: CN=93413544190023D479999954D2610E9CCC0FA6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:78:44:74:ed:97:2d:1e:8e:3f:44:27:6c:
                    1e:08:88:6c:1a:fc:71:c1:55:b9:7e:35:e1:03:5a:
                    7b:01:60:84:14:f9:f3:40:73:4f:dd:cf:b5:e1:f2:
                    55:3f:79:7e:ba:2a:86:62:95:0d:ec:72:55:00:2f:
                    f2:af:2e:a0:f5:42:25:b4:4c:c7:49:30:fa:14:a0:
                    1a:ba:89:ee:31:d8:16:72:31:9c:b6:cb:46:52:dc:
                    f7:6a:e9:33:76:fd:e5:74:00:6d:1f:01:8f:c2:9e:
                    eb:38:ae:6f:ee:14:c4:c9:49:e5:07:98:e6:d9:43:
                    ef:0d:62:3c:82:42:06:e1:37:1b:3a:4a:4c:9d:a5:
                    0e:25:15:8a:3a:d6:a8:36:46:64:39:2c:bc:98:7f:
                    24:89:ed:9f:ae:82:eb:76:0a:f8:59:3e:22:d9:a3:
                    e3:af:e9:17:43:2e:ca:d1:ca:69:c8:a8:02:b8:86:
                    3e:76:10:f9:e9:27:cf:45:df:16:7f:c9:0a:2e:73:
                    97:16:bf:5e:35:32:85:25:58:b0:15:fd:72:cf:58:
                    87:83:39:d3:97:00:18:8e:b4:68:4f:de:bc:12:ce:
                    e2:e0:64:97:fd:6b:72:ce:5d:64:c6:fc:d8:69:5c:
                    90:5f:eb:d5:80:1c:71:60:07:00:b3:7f:4f:e0:97:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:41:35:44:19:00:23:D4:79:99:99:54:D2:61:0E:9C:CC:0F:A6:FE
            X509v3 Authority Key Identifier:
                keyid:A7:40:A7:A9:60:36:C4:D6:21:D5:04:0D:88:49:71:C6:69:EF:C6:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/A740A7A96036C4D621D5040D884971C669EFC62A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A740A7A96036C4D621D5040D884971C669EFC62A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5S7R5AZN7FRZVPhY3NYX3m6Nh8CFqHTdBdEBnr31fFW/0/323830343a363939633a3a2f33322d3438203d3e20323730323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:699c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:07:35:c5:a8:5e:cb:1c:91:b7:a6:d1:40:82:26:8d:74:60:
         a4:7d:be:0a:41:05:ba:19:1c:13:35:42:2f:f7:0f:c8:20:2f:
         56:69:a0:88:53:1d:06:1b:f1:a8:33:88:f8:dc:23:4c:dc:73:
         20:0d:27:f7:26:de:10:da:37:99:47:3c:62:ee:49:54:fa:2e:
         d4:1d:6f:00:2e:61:b3:7b:03:28:b0:19:47:42:e2:1f:61:99:
         c7:94:97:c9:8b:26:11:39:49:4a:6e:ff:62:90:3d:39:49:4f:
         38:f4:21:41:61:3e:83:f6:c4:78:4d:cd:6d:2e:85:d0:2a:fb:
         26:b4:75:7b:03:ef:36:d2:da:f3:ed:c5:d4:57:90:72:b7:12:
         54:65:9b:5e:fd:10:da:de:2f:9e:df:cd:6f:6b:34:9a:c6:d3:
         04:5a:8d:1a:43:90:37:dc:1d:3a:d4:40:52:ea:a5:97:72:01:
         e7:79:2f:2e:d7:d8:a8:0d:af:69:9c:50:f0:54:be:54:c0:4b:
         26:2c:d9:8a:1d:84:54:ca:db:fa:b7:fc:ee:c5:91:63:e1:c9:
         87:71:f1:e8:79:e6:52:62:c9:b5:b8:aa:7a:b4:d2:e8:40:bd:
         7b:f7:62:df:d7:d8:2a:17:60:99:01:6d:4a:68:2c:ca:b1:12:
         3f:a7:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:38:57 2025 by rpki-client