Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/323830343a6637343a3a2f33322d3438203d3e20323633353836.roa
File:                     323830343a6637343a3a2f33322d3438203d3e20323633353836.roa (raw, json)
Hash identifier:          52lsjaJNpUCe2AcAV81o+4/grCzfEtC6pQ/EefJtw3A=
Subject key identifier:   B2:0C:21:9A:1E:45:B3:58:E6:F2:CC:B7:C0:3A:D0:D6:50:43:70:C0
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       2D5AE2AB2F5D664565770309360AF8208087AF04
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/323830343a6637343a3a2f33322d3438203d3e20323633353836.roa
Signing time:             Tue 03 Jun 2025 18:22:12 +0000
ROA not before:           Tue 03 Jun 2025 18:17:12 +0000
ROA not after:            Tue 02 Jun 2026 18:22:12 +0000
asID:                     263586
IP address blocks:        2804:f74::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl
                          rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 00:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5a:e2:ab:2f:5d:66:45:65:77:03:09:36:0a:f8:20:80:87:af:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: Jun  3 18:17:12 2025 GMT
            Not After : Jun  2 18:22:12 2026 GMT
        Subject: CN=B20C219A1E45B358E6F2CCB7C03AD0D6504370C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:38:6f:ec:a9:31:e4:21:bd:e2:4f:0a:1c:
                    3d:52:8a:8b:23:21:df:39:8a:73:04:53:4c:7c:f3:
                    d3:bf:46:b2:57:46:5c:02:8a:54:db:32:6d:49:d7:
                    ae:cb:5f:81:5f:bf:66:09:bd:49:18:a4:93:87:fd:
                    c9:8d:7b:2d:59:57:91:be:4b:c0:12:4a:55:13:4e:
                    63:d1:02:9d:e3:6b:65:64:5d:28:13:54:b6:9c:39:
                    67:20:7b:12:6b:c2:27:50:cd:d1:19:f0:7e:53:bb:
                    36:5f:ed:9e:7a:53:f8:68:1f:8a:84:e4:93:23:7a:
                    bf:94:57:0c:98:72:1f:0e:87:1f:9c:d4:e8:15:d3:
                    5c:a2:3b:b9:64:7f:62:c4:54:46:ff:4b:46:27:a5:
                    1c:d2:13:2e:e6:23:3a:d8:1d:5f:b4:d1:25:0d:4c:
                    a5:02:f2:12:62:6d:b0:01:11:5b:21:0c:c2:c1:92:
                    bb:b2:a0:e3:55:03:e7:eb:0f:42:c8:f0:d3:48:a8:
                    72:74:99:20:9f:61:94:b3:2b:55:26:98:51:c9:3c:
                    44:17:1f:e3:44:ff:2a:34:e6:12:a5:f0:e4:3f:0d:
                    84:02:9a:28:62:b0:85:6a:39:4b:65:a3:49:d4:39:
                    35:87:e4:3e:0b:98:08:e9:ba:50:35:e2:c9:68:95:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0C:21:9A:1E:45:B3:58:E6:F2:CC:B7:C0:3A:D0:D6:50:43:70:C0
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/323830343a6637343a3a2f33322d3438203d3e20323633353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f74::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:36:5b:71:ec:94:e1:e8:89:f9:ce:48:6e:50:83:81:cc:
         83:fe:81:56:44:e3:62:d7:b8:fa:ad:81:66:83:a7:01:10:2c:
         9b:cd:44:15:91:8e:16:23:c7:3d:b7:58:ad:57:d6:2d:c7:5f:
         4d:e9:37:ce:ae:6f:3c:7b:25:1f:f6:d4:bc:8c:a5:2a:6d:ae:
         a8:66:11:fc:17:5c:9c:48:18:92:ce:7f:91:3d:bf:52:d4:f5:
         38:d5:d9:b0:d9:c4:65:2d:c5:d3:6b:9e:0e:95:d5:28:86:f0:
         bf:de:52:55:7d:ca:a3:de:b3:8f:91:7c:dc:7a:ca:01:f6:2e:
         cf:28:42:b3:67:21:4c:18:e1:17:4e:1d:f5:5e:28:26:cd:14:
         81:c9:43:ab:f6:96:21:ab:19:1e:88:e9:ac:00:91:8d:f7:b6:
         b2:24:6f:df:1d:51:d0:e0:b5:26:3f:e5:9c:f5:4d:c4:d6:56:
         00:85:1a:94:bf:06:93:93:ad:39:53:c3:cd:a4:21:52:20:d7:
         f5:78:db:4d:ef:79:fe:ff:d1:60:12:db:66:02:6c:8d:bf:66:
         fc:92:d8:95:f4:bf:e2:73:29:2b:f1:d2:5a:7d:84:33:e2:03:
         92:fd:94:5c:37:f6:dc:22:6c:d7:e3:6f:36:21:43:87:ad:44:
         64:49:a7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:51:16 2025 by rpki-client