Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a623a3a2f34382d3438203d3e20323635333330.roa
File:                     323830343a326533303a623a3a2f34382d3438203d3e20323635333330.roa (raw, json)
Hash identifier:          XfOvpwEUXJdBCeOzLyO222poouE1WXTrRWqaii0sA98=
Subject key identifier:   69:EE:E8:DE:1E:61:9A:E3:0C:60:48:58:76:F4:58:98:A4:4A:B9:B0
Certificate issuer:       /CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
Certificate serial:       7553C268C046A366A39334A2174E1906B46AF681
Authority key identifier: A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a623a3a2f34382d3438203d3e20323635333330.roa
Signing time:             Thu 05 Jun 2025 01:05:49 +0000
ROA not before:           Thu 05 Jun 2025 01:00:49 +0000
ROA not after:            Thu 04 Jun 2026 01:05:49 +0000
asID:                     265330
IP address blocks:        2804:2e30:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl
                          rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 10:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:53:c2:68:c0:46:a3:66:a3:93:34:a2:17:4e:19:06:b4:6a:f6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4A432E63DF7D41D50FADC5A6469974D42C44738
        Validity
            Not Before: Jun  5 01:00:49 2025 GMT
            Not After : Jun  4 01:05:49 2026 GMT
        Subject: CN=69EEE8DE1E619AE30C60485876F45898A44AB9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a0:44:f3:e0:d3:18:5c:9c:03:30:cb:1d:ce:
                    16:f2:88:5b:f9:6d:14:29:e2:1d:ae:c5:eb:ca:a0:
                    7d:14:7b:71:20:c0:61:15:4a:86:5c:c2:e1:de:8a:
                    37:c3:85:28:d0:19:39:9c:34:fb:06:2d:b4:11:ce:
                    d8:dd:d9:bf:cc:26:79:50:14:4b:fe:21:0b:a8:fc:
                    bc:96:8b:65:e7:47:c3:38:e3:ec:b7:bd:18:85:57:
                    23:97:c6:b2:6d:c3:4f:3c:14:cf:69:1b:15:32:10:
                    19:f1:71:9d:36:cb:30:10:9b:86:f6:87:2b:c1:d4:
                    66:15:35:b1:8d:d9:ed:da:64:88:30:cf:8d:05:a9:
                    29:83:2b:d1:af:89:9d:8e:6f:cf:9a:e7:f3:02:61:
                    6c:ef:7e:0b:5e:4b:4b:12:10:63:a3:10:2e:06:9b:
                    37:1d:ae:80:35:bc:8e:9e:65:84:c8:d3:52:24:55:
                    38:d3:96:97:d3:17:93:73:32:54:aa:4a:60:d7:70:
                    3c:ad:e9:fd:98:95:ad:ea:d5:a7:c6:3b:2f:68:31:
                    11:73:44:c6:82:82:ce:20:74:66:75:2c:4f:46:fc:
                    27:51:9f:64:cf:7b:d5:19:5c:64:93:00:17:e6:bb:
                    9a:4f:e6:b8:32:6c:52:c9:62:2c:f1:74:72:8c:a0:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EE:E8:DE:1E:61:9A:E3:0C:60:48:58:76:F4:58:98:A4:4A:B9:B0
            X509v3 Authority Key Identifier:
                keyid:A4:A4:32:E6:3D:F7:D4:1D:50:FA:DC:5A:64:69:97:4D:42:C4:47:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/A4A432E63DF7D41D50FADC5A6469974D42C44738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4A432E63DF7D41D50FADC5A6469974D42C44738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/323830343a326533303a623a3a2f34382d3438203d3e20323635333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e30:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:0b:95:d6:dc:0e:f7:a7:f0:0d:9a:22:c0:13:78:6f:d4:d3:
         3a:54:ef:d0:e4:3f:cc:c1:01:46:94:91:54:66:2b:e7:bf:32:
         01:9e:4c:60:cf:6f:33:21:23:54:90:1f:7d:4c:0a:21:13:79:
         17:67:16:3b:5a:59:8f:36:c4:ea:f0:bc:7b:4f:5c:90:62:49:
         ee:a8:64:35:21:a5:ce:c2:2e:9f:2c:b0:4d:08:9f:9f:52:b8:
         41:a5:b1:d1:6f:40:6c:79:ef:77:32:0a:15:0d:b4:85:c2:98:
         65:f5:5c:be:5c:56:73:9f:60:12:37:ad:c6:04:79:3f:b3:27:
         72:92:7c:c8:f4:aa:99:97:1b:35:e3:9a:f8:4b:b7:ed:f6:a4:
         9c:a7:80:6e:77:68:2b:d9:82:3a:48:84:d2:dc:44:93:08:7d:
         52:f4:fe:b1:f1:d4:0b:bc:c6:ac:84:8a:19:92:f5:c8:8d:e6:
         08:64:16:3c:cd:df:70:66:3d:58:18:3e:a7:13:66:84:02:75:
         99:d3:43:ef:a0:e4:6b:99:8e:ad:0a:ed:16:29:85:d9:d5:19:
         45:4e:11:eb:d1:9b:bd:dc:2d:4a:8c:a7:3a:f9:cb:e3:32:98:
         8f:a3:75:d4:57:98:3c:df:a3:7f:d9:be:9b:b5:4a:90:c4:c9:
         c9:5e:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:09:16 2025 by rpki-client