Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa
File:                     323830343a313762303a3a2f33322d313238203d3e20323633313635.roa (raw, json)
Hash identifier:          yHwQH8fRpSg4pIHUyXd/10PmEceqNUTlRTs7r4+NAWg=
Subject key identifier:   7D:71:71:DA:AF:2B:E5:75:32:00:81:2F:2D:C7:43:F2:6E:C9:AD:0F
Certificate issuer:       /CN=D6AC23F65ED5E489A22BDEDB300FBBF83742C594
Certificate serial:       12CB7B78CFBB88AD100DF5DA5C19CB80971C485A
Authority key identifier: D6:AC:23:F6:5E:D5:E4:89:A2:2B:DE:DB:30:0F:BB:F8:37:42:C5:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6AC23F65ED5E489A22BDEDB300FBBF83742C594.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa
Signing time:             Wed 04 Jun 2025 14:28:46 +0000
ROA not before:           Wed 04 Jun 2025 14:23:46 +0000
ROA not after:            Wed 03 Jun 2026 14:28:46 +0000
asID:                     263165
IP address blocks:        2804:17b0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/D6AC23F65ED5E489A22BDEDB300FBBF83742C594.crl
                          rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/D6AC23F65ED5E489A22BDEDB300FBBF83742C594.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6AC23F65ED5E489A22BDEDB300FBBF83742C594.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 15:17:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cb:7b:78:cf:bb:88:ad:10:0d:f5:da:5c:19:cb:80:97:1c:48:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6AC23F65ED5E489A22BDEDB300FBBF83742C594
        Validity
            Not Before: Jun  4 14:23:46 2025 GMT
            Not After : Jun  3 14:28:46 2026 GMT
        Subject: CN=7D7171DAAF2BE5753200812F2DC743F26EC9AD0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:f4:6d:c0:80:11:8d:9a:ef:40:2b:60:7c:
                    65:12:84:89:97:fd:3d:4d:5b:cc:54:a4:a9:d5:bf:
                    89:1e:92:05:d0:0f:92:50:79:55:e4:36:66:1c:6a:
                    0b:d9:ad:d4:8a:8c:c0:ca:ac:78:48:1b:e7:62:60:
                    a7:c2:e9:ff:38:2a:fc:d4:33:44:0a:d5:f1:da:73:
                    30:de:e3:12:07:fb:e4:ff:83:b0:2e:c4:f5:96:4e:
                    88:5f:30:49:95:eb:17:05:a2:fd:68:98:ed:f2:8c:
                    ce:65:e9:95:19:c5:f6:ea:5c:7d:8d:54:ab:14:32:
                    0e:ef:09:f5:31:07:75:3b:23:96:5e:c4:3f:28:2f:
                    f6:47:bf:f7:09:14:f3:c0:37:9a:15:92:60:53:dd:
                    67:2d:c5:fb:b0:7d:c7:1f:c2:e3:f5:66:3e:74:c5:
                    2a:e3:cd:fa:4a:2f:ee:bb:e6:ea:a4:12:b1:e5:b6:
                    5a:75:2b:d7:ef:12:3a:de:58:80:26:57:ae:e3:d7:
                    95:82:ec:aa:d2:05:5d:cf:c6:9f:d5:5f:4c:13:a3:
                    d9:e4:06:54:0c:f9:2f:75:87:7c:78:62:28:9a:c6:
                    53:e7:a1:fc:86:23:36:6e:24:8f:ce:32:da:3b:80:
                    57:06:9c:29:e7:9c:5a:6e:a4:0c:34:94:aa:09:fb:
                    7d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:71:71:DA:AF:2B:E5:75:32:00:81:2F:2D:C7:43:F2:6E:C9:AD:0F
            X509v3 Authority Key Identifier:
                keyid:D6:AC:23:F6:5E:D5:E4:89:A2:2B:DE:DB:30:0F:BB:F8:37:42:C5:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/D6AC23F65ED5E489A22BDEDB300FBBF83742C594.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6AC23F65ED5E489A22BDEDB300FBBF83742C594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqzHZ2ES3m3wGDJNvxDLgHMyxrSDpSESbLcnLVQJpyCf/0/323830343a313762303a3a2f33322d313238203d3e20323633313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:94:aa:cd:60:49:d3:12:11:6b:02:4e:91:52:ee:70:d1:
         cc:9a:b8:67:3c:65:4c:49:6d:67:dc:61:8e:ff:a7:1a:39:a8:
         12:43:88:c0:5c:3c:88:13:e3:cd:d9:9d:24:7a:ad:d3:b7:1e:
         b2:08:3f:71:60:85:44:1e:1d:a0:4e:62:4c:22:1b:f2:29:f7:
         5a:02:12:f2:e4:39:b3:ca:4f:40:13:58:cf:d2:07:58:21:84:
         2a:4d:a0:b4:d3:c4:39:ec:91:07:c7:74:74:ff:47:bb:8f:f2:
         5d:e7:99:2a:2b:4a:e2:39:18:c5:12:7c:1d:48:1f:96:12:33:
         4c:9f:dd:54:68:11:69:46:ee:91:3a:31:e4:c0:cd:e9:6a:16:
         01:df:94:44:58:77:55:b1:cf:ce:74:42:db:32:44:bb:6d:b1:
         ad:67:8e:7d:9d:92:d1:be:98:aa:51:a3:9e:08:14:c0:b9:a0:
         57:bb:c0:bb:ea:f6:34:df:a0:8e:e6:39:35:31:fa:47:71:8f:
         c8:29:ab:d6:40:f1:64:2b:a7:c6:6a:b4:05:fc:26:25:65:f8:
         bb:7e:a7:d3:56:c9:44:45:50:d1:54:03:be:d8:b7:ff:e3:02:
         19:b5:b4:64:c3:49:a2:79:c7:29:87:6b:7a:6b:b0:7d:7e:76:
         a1:67:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:11:26 2025 by rpki-client