Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
File:                     323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier:          J5wJ0lvSow9Z7dojhlgycTGycoBqGTdaISvGyzsDyy8=
Subject key identifier:   F1:F5:E7:C4:64:C9:A1:2A:46:9D:AA:DC:E8:EB:9C:D0:DE:47:42:92
Certificate issuer:       /CN=2043B8FB38968B048E58247F12DDC4C0CE395D2B
Certificate serial:       74E45443860AFBE3CEEA984CEE00153B654B6557
Authority key identifier: 20:43:B8:FB:38:96:8B:04:8E:58:24:7F:12:DD:C4:C0:CE:39:5D:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2043B8FB38968B048E58247F12DDC4C0CE395D2B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa
Signing time:             Mon 07 Jul 2025 02:13:59 +0000
ROA not before:           Mon 07 Jul 2025 02:08:59 +0000
ROA not after:            Mon 06 Jul 2026 02:13:59 +0000
asID:                     273728
IP address blocks:        2804:8b5c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/2043B8FB38968B048E58247F12DDC4C0CE395D2B.crl
                          rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/2043B8FB38968B048E58247F12DDC4C0CE395D2B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2043B8FB38968B048E58247F12DDC4C0CE395D2B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 23:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e4:54:43:86:0a:fb:e3:ce:ea:98:4c:ee:00:15:3b:65:4b:65:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2043B8FB38968B048E58247F12DDC4C0CE395D2B
        Validity
            Not Before: Jul  7 02:08:59 2025 GMT
            Not After : Jul  6 02:13:59 2026 GMT
        Subject: CN=F1F5E7C464C9A12A469DAADCE8EB9CD0DE474292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5c:9a:8a:1e:cf:07:bd:69:3d:f8:f7:16:d9:
                    ec:f5:05:8f:dc:be:1a:8f:83:11:37:58:d9:35:96:
                    4c:34:7a:2a:b8:e3:0d:bd:48:40:e0:6b:76:dd:3f:
                    96:7d:36:3d:c5:31:ed:58:1c:fe:dd:b3:c6:f0:19:
                    2b:55:7d:42:46:f3:3b:18:db:45:4e:eb:71:e3:53:
                    50:9b:24:c8:6a:d0:25:e5:c6:7d:6f:c1:35:02:6b:
                    04:24:38:99:c4:44:1a:49:e4:10:5d:e4:8f:c9:5b:
                    84:73:88:c1:f1:69:84:80:2e:b0:db:16:74:80:6d:
                    72:3b:e3:93:43:52:ba:48:53:e4:1c:4d:4a:36:dc:
                    16:be:f5:cf:c4:ec:67:1e:4f:b5:7a:29:b5:1b:1a:
                    a1:16:99:a4:d6:84:52:97:bb:de:33:51:1c:a7:31:
                    1a:22:09:fc:d9:1b:60:f0:2a:3b:03:1b:96:d2:8a:
                    b7:81:4b:8c:3e:8d:be:5d:60:ac:0e:82:f2:f8:bc:
                    fa:35:42:a6:8c:59:dc:8c:29:eb:1b:62:f5:dd:5d:
                    bf:90:c3:c0:6e:c7:e5:ef:28:0a:d9:0d:76:ae:46:
                    5c:0f:34:f3:65:cb:26:8f:3b:1a:aa:4c:4e:38:29:
                    58:5d:ec:86:16:ac:81:1e:d3:18:b0:13:64:87:bd:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F5:E7:C4:64:C9:A1:2A:46:9D:AA:DC:E8:EB:9C:D0:DE:47:42:92
            X509v3 Authority Key Identifier:
                keyid:20:43:B8:FB:38:96:8B:04:8E:58:24:7F:12:DD:C4:C0:CE:39:5D:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/2043B8FB38968B048E58247F12DDC4C0CE395D2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2043B8FB38968B048E58247F12DDC4C0CE395D2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/0/323830343a386235633a633030303a3a2f33342d3334203d3e20323733373238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:9c:8c:4a:6d:0b:93:c0:a0:1f:a2:10:67:e7:91:3e:f6:d5:
         1d:38:0b:5e:13:18:38:1f:5e:46:e1:eb:49:d5:54:73:a1:91:
         b0:81:67:08:70:da:a3:7f:1e:8e:95:8a:5c:ec:2e:d3:4d:c3:
         54:f4:4c:24:35:26:22:f4:a3:67:f7:16:98:a4:ed:30:88:a1:
         85:2b:c8:1f:be:b1:bf:e6:94:aa:94:59:3c:6e:a7:3d:bf:1b:
         9b:be:5a:07:58:56:9c:dd:78:91:ef:ae:fe:2d:bb:9e:92:98:
         aa:a5:c9:fb:5e:7f:9c:81:3d:bc:02:cf:73:e2:45:c5:a8:6e:
         d4:04:29:c2:36:92:32:2d:49:0f:83:2b:55:0f:19:4c:fd:f1:
         15:f8:ce:e6:1b:d9:25:41:99:f1:a4:dc:8d:fe:c8:fd:f2:b1:
         c9:31:7f:9d:ac:e9:7d:3b:02:73:45:f3:53:49:bd:c9:a6:ab:
         bf:ff:c3:29:6c:02:31:06:23:33:91:87:7e:11:ed:b2:96:46:
         58:22:32:0b:5d:a8:1d:8c:94:db:68:61:c1:0c:77:36:81:21:
         72:e6:cd:7c:c1:83:5d:4c:bc:28:94:8a:cc:ee:89:07:5d:f2:
         da:6c:ac:0b:7e:af:ea:ed:f2:1b:4c:55:1d:c2:91:b9:57:22:
         59:21:9a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:06:32 2025 by rpki-client