Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/323830343a346361633a3a2f33322d3438203d3e20323637333834.roa
File:                     323830343a346361633a3a2f33322d3438203d3e20323637333834.roa (raw, json)
Hash identifier:          t6jbj4HLelhdH6/ApBMCV7zp4HcuYLMfNFUM5xitfJ0=
Subject key identifier:   28:C3:8A:A6:7B:44:29:E4:B3:D4:C8:1D:90:63:ED:1A:41:BC:B1:47
Certificate issuer:       /CN=493AAEADB4F3959F5789F4A239132BFE3E440B79
Certificate serial:       7F4C667ECF7C5E8CD66841684181E30904F7722B
Authority key identifier: 49:3A:AE:AD:B4:F3:95:9F:57:89:F4:A2:39:13:2B:FE:3E:44:0B:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/493AAEADB4F3959F5789F4A239132BFE3E440B79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/323830343a346361633a3a2f33322d3438203d3e20323637333834.roa
Signing time:             Tue 17 Jun 2025 20:22:40 +0000
ROA not before:           Tue 17 Jun 2025 20:17:40 +0000
ROA not after:            Tue 16 Jun 2026 20:22:40 +0000
asID:                     267384
IP address blocks:        2804:4cac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/493AAEADB4F3959F5789F4A239132BFE3E440B79.crl
                          rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/493AAEADB4F3959F5789F4A239132BFE3E440B79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/493AAEADB4F3959F5789F4A239132BFE3E440B79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 14:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4c:66:7e:cf:7c:5e:8c:d6:68:41:68:41:81:e3:09:04:f7:72:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=493AAEADB4F3959F5789F4A239132BFE3E440B79
        Validity
            Not Before: Jun 17 20:17:40 2025 GMT
            Not After : Jun 16 20:22:40 2026 GMT
        Subject: CN=28C38AA67B4429E4B3D4C81D9063ED1A41BCB147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:6f:9f:5d:62:84:a2:3b:0c:91:eb:22:e7:
                    d7:c2:37:26:cc:28:6b:61:38:da:0e:44:9d:18:d5:
                    59:5a:ed:ec:76:bf:8f:1c:de:2e:21:2d:ad:45:9c:
                    5f:4a:b2:fa:ba:b5:f9:05:6f:13:17:b8:a0:36:58:
                    0a:07:69:6b:4d:64:a3:c5:3e:a8:f8:9d:b9:7d:d1:
                    4d:55:cf:72:25:38:62:27:6c:53:c1:fa:27:a9:60:
                    fa:48:b0:66:f5:9f:03:d9:5a:9f:d9:50:e6:f4:c6:
                    5c:ed:2c:23:18:7b:63:f0:da:d0:01:f6:8a:f1:a6:
                    53:97:d0:f9:12:51:46:cf:44:e5:1c:cc:1d:ae:19:
                    2e:dd:64:58:cb:91:83:5e:bc:5a:39:c6:a8:eb:13:
                    3d:91:ff:23:b5:0c:d7:25:57:1e:90:8c:ba:f9:e4:
                    3a:ef:8e:61:af:fe:ce:7f:3b:40:f0:5c:7b:06:dd:
                    3f:5a:1c:b1:7e:5a:4e:41:c3:ba:d5:dc:4d:f3:05:
                    74:83:a0:7d:2b:a3:43:65:34:0b:ae:c9:54:fb:a3:
                    c4:dc:2e:59:4e:0f:7f:0d:53:d2:ff:ec:e9:4c:c7:
                    c5:e0:31:b2:a1:2e:c2:1e:9b:c7:04:98:2f:50:14:
                    8f:bd:7a:8d:2a:67:b8:cc:0a:df:2f:f0:d2:4f:47:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C3:8A:A6:7B:44:29:E4:B3:D4:C8:1D:90:63:ED:1A:41:BC:B1:47
            X509v3 Authority Key Identifier:
                keyid:49:3A:AE:AD:B4:F3:95:9F:57:89:F4:A2:39:13:2B:FE:3E:44:0B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/493AAEADB4F3959F5789F4A239132BFE3E440B79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/493AAEADB4F3959F5789F4A239132BFE3E440B79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENUz4iakany2yxvUkeZzLRxoWwCCvxKNSCbBAoKsnbkn/0/323830343a346361633a3a2f33322d3438203d3e20323637333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cac::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:94:87:57:16:f5:ad:3a:5e:94:95:03:4b:61:38:f3:b1:88:
         ef:2d:75:10:84:c3:a4:3f:a6:bf:bb:33:65:32:67:bb:93:0b:
         c2:88:35:dc:3c:84:88:63:34:c3:a5:90:21:32:0a:9e:6d:f3:
         ad:df:4a:82:96:74:ca:3b:55:e9:77:cc:38:c3:40:20:d4:51:
         7b:54:bf:60:9a:55:c4:7d:cc:f6:69:65:6c:1a:22:4d:ca:3e:
         ea:18:51:97:d6:01:38:7f:8a:1b:9c:f4:62:49:c6:a0:4e:b1:
         51:88:40:85:46:42:6b:0c:e8:21:c6:c4:26:ba:23:ac:e0:f0:
         cf:5c:6b:1e:1a:d0:9d:8a:cc:e1:85:52:d4:18:56:dd:10:89:
         c8:ac:26:6e:57:c5:f2:91:dc:4c:af:07:ba:fe:0f:e3:b0:1d:
         25:53:1c:c6:1b:c5:d9:ee:20:77:cc:ad:4f:69:fe:91:2d:56:
         a0:44:a0:e3:d1:97:d1:38:40:75:87:e1:ea:ac:ff:89:d0:54:
         5f:32:03:57:aa:62:60:6b:11:62:0b:a9:6f:76:8e:a1:a8:1e:
         71:11:b3:c2:ab:bd:bd:ed:69:e1:16:3d:10:36:37:8f:d5:74:
         e1:db:be:4e:8e:b3:0d:a6:5b:2f:a4:77:e4:ac:72:5b:4f:01:
         8a:5c:f0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:04:18 2025 by rpki-client