Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/323830343a313537343a3a2f33362d3336203d3e20323633333839.roa
File:                     323830343a313537343a3a2f33362d3336203d3e20323633333839.roa (raw, json)
Hash identifier:          uSNRybZd4V/DqcFfrwelb0a9/RccOaTEQFt4DWYztmo=
Subject key identifier:   F1:5E:BD:F3:77:70:CB:86:03:1E:63:18:69:59:30:3A:BB:0B:87:ED
Certificate issuer:       /CN=11A3253369B722D4E05779F8F48046A43B02EAD1
Certificate serial:       1FADA39FC2F009630CCC8930E0CC62E8ACC75C81
Authority key identifier: 11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/323830343a313537343a3a2f33362d3336203d3e20323633333839.roa
Signing time:             Tue 10 Jun 2025 15:00:54 +0000
ROA not before:           Tue 10 Jun 2025 14:55:54 +0000
ROA not after:            Tue 09 Jun 2026 15:00:54 +0000
asID:                     263389
IP address blocks:        2804:1574::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl
                          rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 03:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ad:a3:9f:c2:f0:09:63:0c:cc:89:30:e0:cc:62:e8:ac:c7:5c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A3253369B722D4E05779F8F48046A43B02EAD1
        Validity
            Not Before: Jun 10 14:55:54 2025 GMT
            Not After : Jun  9 15:00:54 2026 GMT
        Subject: CN=F15EBDF37770CB86031E63186959303ABB0B87ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:e3:26:fe:89:97:80:00:58:1d:c2:4e:55:
                    01:5e:26:8b:66:77:cd:23:d5:3e:29:97:e0:33:e2:
                    3e:5e:1c:44:c5:08:f2:22:f5:fd:07:43:1e:ca:af:
                    39:bc:21:3f:e4:89:55:19:c8:1a:01:6d:2b:51:7f:
                    33:2b:87:2a:c9:ab:de:5c:33:bc:f4:88:36:c7:6d:
                    4f:68:14:5c:ba:b9:37:89:f0:d5:cd:5b:4a:f4:d1:
                    66:d0:5d:f0:a2:48:07:b1:59:cd:29:29:1b:89:31:
                    07:84:4b:ff:8d:0d:72:99:b9:8d:7c:a7:9f:b3:72:
                    75:f6:b2:65:25:e5:0e:bd:a0:85:c3:16:9b:df:05:
                    68:03:f0:ea:a6:fa:5f:05:00:59:6c:fc:be:de:bf:
                    30:d7:0c:a3:d1:3f:58:1d:29:60:bb:cc:da:f5:f7:
                    57:03:9b:92:98:79:5f:d1:1c:e9:2b:ba:17:7b:f2:
                    a3:ce:d2:94:82:4d:2b:19:fa:2f:d5:91:3a:ba:5f:
                    f2:fc:b2:42:4d:75:f7:7c:da:76:52:52:66:52:f2:
                    04:e3:2c:b8:76:bc:9f:0d:19:5d:bd:a9:c7:0f:b7:
                    9a:55:17:1b:18:87:76:0f:a9:3f:dd:60:64:0b:97:
                    b9:19:59:50:ed:19:0b:1b:25:67:8d:4f:67:96:76:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5E:BD:F3:77:70:CB:86:03:1E:63:18:69:59:30:3A:BB:0B:87:ED
            X509v3 Authority Key Identifier:
                keyid:11:A3:25:33:69:B7:22:D4:E0:57:79:F8:F4:80:46:A4:3B:02:EA:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/11A3253369B722D4E05779F8F48046A43B02EAD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A3253369B722D4E05779F8F48046A43B02EAD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyfGgxa5tqS3gg8Le6toYwELjnHRs9ibZqf2RveDSGwo/0/323830343a313537343a3a2f33362d3336203d3e20323633333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1574::/36

    Signature Algorithm: sha256WithRSAEncryption
         14:62:d3:ee:c0:5c:39:4c:9a:2a:7c:94:6c:f6:ba:e6:64:5b:
         4f:9a:f5:92:a6:0b:23:25:25:bc:fb:01:b3:e7:1a:70:bb:24:
         b4:1d:36:8c:8d:94:99:cd:6e:f1:8d:24:45:5e:26:94:91:cd:
         04:b4:e2:f5:04:69:68:0a:fc:87:0a:55:88:7d:17:66:85:fd:
         bd:f7:cc:cf:ce:6e:57:9a:f8:35:bc:14:7a:8b:fe:c2:c8:8a:
         1f:ab:36:6e:7b:7a:77:6a:fa:04:b4:05:24:ee:36:f0:87:86:
         5b:b1:1a:08:f5:4a:33:da:d9:2d:e6:60:ff:58:a0:2e:ad:07:
         ef:9d:97:12:d7:c2:6a:dc:d8:3a:a6:da:c6:d8:84:17:33:0b:
         46:d2:c5:bc:be:ac:51:44:1b:36:a8:de:5b:f5:70:91:ce:ca:
         5c:7e:83:8e:ce:35:f9:c4:e7:91:e1:fb:a3:51:65:cf:eb:1f:
         2f:18:35:5f:d9:09:4e:f7:43:8f:19:17:7c:91:98:d9:d0:91:
         09:fb:7a:5e:97:64:d8:a5:c4:c6:92:67:a6:19:de:2c:2f:64:
         7c:d9:be:82:1b:79:5d:5e:26:99:c0:1e:91:dc:52:2b:41:25:
         e2:18:ce:d7:97:6f:3b:0c:bc:7b:72:ab:65:81:31:7d:7c:07:
         63:ed:61:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 10:53:46 2025 by rpki-client