Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a31303a3a2f34382d3438203d3e20323635333330.roa
File:                     323830343a326533303a31303a3a2f34382d3438203d3e20323635333330.roa (raw, json)
Hash identifier:          8DlROoVJoqf2k33hknlOoY6C6+HdG4T7GjTXS4cBbbg=
Subject key identifier:   34:76:E9:D8:20:00:E6:07:06:2B:2F:E3:00:B6:66:EB:D1:A3:79:4A
Certificate issuer:       /CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
Certificate serial:       5EE9A2A849C9FC4EF02A3EA1640737AEB16FEC92
Authority key identifier: A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a31303a3a2f34382d3438203d3e20323635333330.roa
Signing time:             Thu 05 Jun 2025 01:05:48 +0000
ROA not before:           Thu 05 Jun 2025 01:00:48 +0000
ROA not after:            Thu 04 Jun 2026 01:05:48 +0000
asID:                     265330
IP address blocks:        2804:2e30:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl
                          rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e9:a2:a8:49:c9:fc:4e:f0:2a:3e:a1:64:07:37:ae:b1:6f:ec:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
        Validity
            Not Before: Jun  5 01:00:48 2025 GMT
            Not After : Jun  4 01:05:48 2026 GMT
        Subject: CN=3476E9D82000E607062B2FE300B666EBD1A3794A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:29:d3:c8:40:cc:94:ce:2f:98:63:a0:ba:
                    9e:6d:ec:79:58:94:d8:e2:0f:8c:91:53:3d:e4:57:
                    09:ab:ad:f3:28:90:3b:61:ff:cb:24:20:d3:96:fd:
                    60:5c:12:20:fb:4d:30:b5:d9:f0:44:6b:c4:6f:1e:
                    39:03:02:31:b7:21:5c:10:9a:36:94:49:20:94:5d:
                    f9:63:20:09:dc:90:09:15:7c:07:af:e4:32:b0:74:
                    7a:5e:5d:e6:b1:7c:0e:0a:f1:e4:f6:dd:a5:19:27:
                    e2:20:74:11:1c:41:21:f5:8f:ba:37:d7:43:6a:76:
                    5d:45:1a:49:44:a5:3c:a4:0c:17:2f:a9:b7:3e:6a:
                    46:c3:04:2f:ba:42:e0:f2:85:77:0a:bf:e9:73:fd:
                    41:2f:84:5d:31:fd:63:f5:70:76:fd:b6:33:e2:10:
                    2c:dc:37:98:b4:2c:d9:05:83:74:fe:64:04:84:86:
                    a0:69:71:20:bf:4e:2e:8f:66:65:ed:fe:8f:0d:d8:
                    16:19:f8:d0:b0:83:d7:b1:fc:b9:90:34:7b:fb:2b:
                    9f:c2:e9:ab:73:9a:1f:96:c4:cc:ae:07:33:02:96:
                    40:05:af:62:e1:0e:1a:be:cb:14:d4:af:93:9f:f9:
                    fd:99:90:e8:27:49:fd:2a:c1:a5:ff:33:3e:3b:c0:
                    a5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:76:E9:D8:20:00:E6:07:06:2B:2F:E3:00:B6:66:EB:D1:A3:79:4A
            X509v3 Authority Key Identifier:
                keyid:A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a31303a3a2f34382d3438203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:c8:7b:65:ff:5b:52:83:dd:c9:67:9e:09:22:b7:78:09:f1:
         5c:3b:5c:d5:9b:3d:b4:7d:00:75:70:ae:f2:4c:81:b4:ca:e6:
         01:52:ce:73:1b:fa:08:6f:ec:b0:30:81:2e:7e:02:fb:e4:3a:
         8e:a6:3c:6a:94:fe:b4:86:c1:cb:09:64:2a:03:ba:6a:74:31:
         f5:70:ea:80:cc:80:a6:8c:69:c6:5d:a6:83:b8:00:c7:e8:9c:
         a6:01:60:80:b2:3e:51:ba:35:c2:35:13:fe:cf:95:2d:bd:aa:
         ea:8d:54:2f:f1:0e:79:3d:5a:a8:d4:16:f2:a5:ff:29:a9:ff:
         ff:92:37:28:b9:d2:78:ff:6c:2c:44:6a:a9:6c:50:9e:dc:0f:
         24:47:b7:3c:f7:d2:55:42:e3:6a:79:3c:38:f7:7b:f2:dd:9c:
         cb:78:a5:b5:e0:e2:c7:d0:36:e1:c0:3e:64:ca:05:55:af:82:
         e3:9d:ee:73:5f:5d:f3:67:5c:5a:61:3d:f1:de:d0:4b:96:ff:
         26:fd:6a:40:e0:d9:cd:8c:f7:b3:16:91:d7:a3:d2:fb:f4:9f:
         93:19:40:61:92:43:1c:30:2c:ad:7f:0a:74:c4:f7:c7:77:af:
         26:5e:16:0c:6a:bb:b5:89:c2:0f:75:a6:2d:32:28:e0:32:71:
         f2:60:b8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:34:26 2025 by rpki-client