Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33353a3a2f34382d3438203d3e20323635333330.roa
File:                     323830343a326533303a33353a3a2f34382d3438203d3e20323635333330.roa (raw, json)
Hash identifier:          xvRlQ6fkcp4rNjq7VU/qA3lZI/B0JI9g49bn4rWHBf8=
Subject key identifier:   3A:1D:FC:37:0C:61:7A:72:66:FB:06:5C:8C:B4:32:3C:04:86:D4:42
Certificate issuer:       /CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
Certificate serial:       5FA0FB55BF7193E0D92C6E721CAF33FE35B9DFD5
Authority key identifier: A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33353a3a2f34382d3438203d3e20323635333330.roa
Signing time:             Thu 05 Jun 2025 01:05:48 +0000
ROA not before:           Thu 05 Jun 2025 01:00:48 +0000
ROA not after:            Thu 04 Jun 2026 01:05:48 +0000
asID:                     265330
IP address blocks:        2804:2e30:35::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl
                          rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 14:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a0:fb:55:bf:71:93:e0:d9:2c:6e:72:1c:af:33:fe:35:b9:df:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
        Validity
            Not Before: Jun  5 01:00:48 2025 GMT
            Not After : Jun  4 01:05:48 2026 GMT
        Subject: CN=3A1DFC370C617A7266FB065C8CB4323C0486D442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7d:75:d6:a5:f7:13:db:38:bd:c6:e8:23:48:
                    ff:2c:76:63:f7:ce:e2:a2:bb:6f:47:fc:2a:96:7b:
                    4f:f3:26:85:3b:03:30:43:a6:5f:fa:5e:8b:46:eb:
                    ef:49:e7:b9:f1:4c:02:2d:be:85:fd:fd:1e:e5:42:
                    19:c6:64:6a:60:6d:1b:e2:9d:8a:58:d3:42:ed:c9:
                    95:2a:ba:bd:88:a7:ad:9b:23:d5:22:4c:9d:4f:dc:
                    ce:2b:6c:40:d2:30:6b:f4:ec:bf:48:c9:c6:a4:a4:
                    a7:9a:98:9d:12:e2:d5:fd:aa:db:ab:7a:4e:d5:7d:
                    07:ff:aa:0c:69:88:bc:00:6a:f3:99:cd:51:6e:da:
                    b2:10:95:65:e8:29:0f:42:dc:ef:4e:72:67:b5:00:
                    42:ae:9a:e4:ac:a5:00:90:66:76:9a:e9:38:f1:ea:
                    b8:98:3a:0d:7c:b3:87:b7:53:55:3e:57:4b:d3:83:
                    68:f9:87:4f:f1:bf:f1:e2:12:f1:15:bb:a5:b9:d8:
                    cf:75:b7:20:50:3d:8c:42:f0:1a:51:ae:42:b8:c9:
                    3d:b4:04:76:22:bf:cc:58:66:a0:18:17:eb:cb:d1:
                    d4:95:93:a3:72:f3:d5:1e:0a:8c:90:77:b1:e6:eb:
                    6b:49:26:0e:0c:ba:49:d8:96:f1:a5:06:ea:78:76:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1D:FC:37:0C:61:7A:72:66:FB:06:5C:8C:B4:32:3C:04:86:D4:42
            X509v3 Authority Key Identifier:
                keyid:A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a33353a3a2f34382d3438203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30:35::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:57:fc:0a:a8:f9:0b:d1:f3:79:90:27:c4:d8:29:7c:ad:51:
         3e:ca:e9:69:03:47:ad:9e:e1:3c:76:fc:1e:8f:c6:26:b8:79:
         3e:d7:d3:b0:0d:41:7f:61:11:c4:15:4b:6d:a1:af:af:5a:cb:
         f1:a0:e8:ce:c6:cb:a2:5d:a1:0a:47:0b:07:5a:49:35:e4:20:
         9d:93:8f:d7:99:cc:57:d0:7a:81:d7:8e:55:22:81:e4:79:d7:
         ca:bb:6a:ba:31:38:d9:bc:57:40:da:16:bd:26:88:b7:73:d1:
         40:2b:74:73:32:d7:15:06:48:1a:41:91:21:5e:1b:2c:ea:47:
         10:2d:4c:24:25:74:6e:8c:67:35:d7:2c:54:92:0d:f0:e8:95:
         f1:df:93:e1:04:31:4c:7b:a4:b7:36:2c:35:3f:e9:a2:9f:b9:
         15:2b:65:8c:0c:10:97:cf:f2:b8:5d:35:e6:a6:07:b9:47:3a:
         35:90:29:61:65:28:f2:7b:99:bc:84:96:ec:90:5c:d0:ea:c9:
         73:dd:80:9c:e6:42:29:2d:58:73:3c:f9:58:6a:57:d7:ff:2c:
         7f:b6:c8:27:81:79:93:a2:98:f1:a1:4b:40:27:b8:4f:70:22:
         50:63:9d:c7:60:3d:7b:c0:74:0f:53:c3:b4:5b:f5:48:7e:43:
         a4:43:1e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:56:28 2025 by rpki-client