Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a363030303a3a2f34302d3430203d3e20323635393139.roa
File:                     323830343a336664383a363030303a3a2f34302d3430203d3e20323635393139.roa (raw, json)
Hash identifier:          lj/aTHUFgPxhQ35buCKujKWUPEBs2s845BWiz2TsmOc=
Subject key identifier:   94:C7:7C:A4:11:C0:9C:C3:48:88:D6:8C:F9:F6:E0:53:10:96:B9:D8
Certificate issuer:       /CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
Certificate serial:       730EADAC948E1CBC3B964CA34110C350655BB12D
Authority key identifier: 17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a363030303a3a2f34302d3430203d3e20323635393139.roa
Signing time:             Thu 26 Jun 2025 00:39:20 +0000
ROA not before:           Thu 26 Jun 2025 00:34:20 +0000
ROA not after:            Thu 25 Jun 2026 00:39:20 +0000
asID:                     265919
IP address blocks:        2804:3fd8:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 21:11:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0e:ad:ac:94:8e:1c:bc:3b:96:4c:a3:41:10:c3:50:65:5b:b1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17461A5AF98839DE20C2D7F7A0A8537C77AC52B2
        Validity
            Not Before: Jun 26 00:34:20 2025 GMT
            Not After : Jun 25 00:39:20 2026 GMT
        Subject: CN=94C77CA411C09CC34888D68CF9F6E0531096B9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b0:d2:05:9c:4c:c3:0e:ee:56:5d:da:4a:30:
                    96:78:e8:63:39:62:ba:4e:36:77:6a:db:b7:9b:d8:
                    fc:08:64:e4:db:a7:1f:4c:f3:84:65:25:fc:81:aa:
                    fe:01:c2:9e:97:d5:22:94:dd:52:86:c9:30:e8:d1:
                    61:5b:4c:ea:3c:8f:a2:44:c9:94:e8:d6:d0:01:fc:
                    35:0f:a3:43:40:3b:f4:38:a2:8e:08:5a:ec:5a:3e:
                    4e:78:ca:80:fe:16:5c:7c:c1:1c:b2:e8:58:ef:11:
                    c2:e1:06:05:32:b4:78:e5:f1:c7:9e:bc:31:ee:0a:
                    c9:d0:02:93:e4:85:8c:5c:a0:d9:8c:1d:83:1f:25:
                    b4:75:1a:ed:ee:09:14:ad:3f:ff:a5:7d:fc:28:c4:
                    fd:ee:d4:61:39:4d:15:b4:98:77:70:7e:4f:9c:32:
                    35:eb:f8:b0:c3:38:f3:e7:6d:c1:69:ee:49:0b:82:
                    b3:eb:7d:18:02:c4:f4:16:09:4c:16:00:0c:db:4a:
                    ed:c1:81:ed:c6:3a:b5:e2:42:55:44:a5:c3:24:7f:
                    46:53:72:33:70:3c:16:23:72:4d:75:11:6f:48:e2:
                    8d:c3:95:55:1d:3e:8f:5b:87:ad:7c:89:7a:7a:7b:
                    65:41:8f:e1:35:e0:a3:52:da:31:3f:a0:1e:c0:96:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C7:7C:A4:11:C0:9C:C3:48:88:D6:8C:F9:F6:E0:53:10:96:B9:D8
            X509v3 Authority Key Identifier:
                keyid:17:46:1A:5A:F9:88:39:DE:20:C2:D7:F7:A0:A8:53:7C:77:AC:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17461A5AF98839DE20C2D7F7A0A8537C77AC52B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a363030303a3a2f34302d3430203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         cf:2c:03:cc:e0:d4:99:50:66:ae:2a:47:74:4b:33:44:64:84:
         bc:2f:3f:4d:2e:37:d9:37:13:ef:1a:a8:d2:fe:f0:4e:32:4d:
         41:e7:27:d1:2e:33:eb:31:e5:46:73:e7:3d:e0:61:1b:cb:cd:
         81:07:7f:4e:1d:7c:38:a4:4f:13:31:85:90:43:27:b8:b3:41:
         0d:05:e9:37:a1:38:d8:ee:81:fc:92:16:c3:5e:ea:a8:05:f4:
         7c:b1:87:fd:12:83:95:8a:ec:d5:73:3e:a6:7a:d6:f0:53:1f:
         36:a8:12:f1:94:09:24:ec:d1:e1:cf:98:e0:5b:66:45:53:09:
         70:da:61:cb:e7:55:da:04:24:18:5c:cc:05:e5:35:d5:86:d0:
         1a:17:59:e3:0f:71:e9:7f:f0:c8:d0:fc:27:15:5a:c4:cb:1f:
         0b:fd:c4:84:26:c2:0b:57:6c:58:9b:cb:32:fb:37:73:95:3e:
         12:0c:f1:95:f5:96:b5:3b:dc:cb:ac:2d:42:d2:a9:df:74:e9:
         a7:3d:9b:14:b2:ea:d5:96:c4:94:fc:f3:0e:31:f0:90:d8:4c:
         32:11:d1:c9:b3:05:30:a6:35:e3:73:78:dc:71:33:51:51:ff:
         eb:3b:16:82:e7:23:c7:aa:2b:52:d1:fa:00:b9:89:9d:f3:59:
         af:68:b3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:25:03 2025 by rpki-client