Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/323830343a6337343a3a2f33322d3333203d3e203532373039.roa
File:                     323830343a6337343a3a2f33322d3333203d3e203532373039.roa (raw, json)
Hash identifier:          Kt+6MJz9ddyhnkkhUlFxePeM9cXl8ZQm6pXGGGniaRk=
Subject key identifier:   DF:C8:B1:DB:65:8F:91:A2:CB:23:19:27:B9:FE:5A:84:9B:F2:FE:15
Certificate issuer:       /CN=3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380
Certificate serial:       1C379AAB4BB4CA154CEAC3C04FF6A4445EF12050
Authority key identifier: 3D:6D:9C:C5:9A:D7:D4:E2:DF:69:7C:11:85:CA:EA:C0:32:6C:13:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/323830343a6337343a3a2f33322d3333203d3e203532373039.roa
Signing time:             Thu 22 May 2025 20:05:33 +0000
ROA not before:           Thu 22 May 2025 20:00:33 +0000
ROA not after:            Thu 21 May 2026 20:05:33 +0000
asID:                     52709
IP address blocks:        2804:c74::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.crl
                          rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 19:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:37:9a:ab:4b:b4:ca:15:4c:ea:c3:c0:4f:f6:a4:44:5e:f1:20:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380
        Validity
            Not Before: May 22 20:00:33 2025 GMT
            Not After : May 21 20:05:33 2026 GMT
        Subject: CN=DFC8B1DB658F91A2CB231927B9FE5A849BF2FE15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:14:ea:11:34:42:78:bd:9c:85:38:1a:26:
                    e0:ba:cd:35:48:89:3e:d5:05:f1:98:2c:06:f7:ac:
                    3a:49:e5:09:90:6d:c9:ae:60:9d:44:73:88:2c:fa:
                    07:13:52:ce:5a:e4:d8:8c:19:6b:43:15:5c:87:fa:
                    e5:f1:81:2c:a5:61:f7:7b:e5:00:02:35:0c:61:f5:
                    c2:37:cc:9a:bd:d5:d0:f8:ac:92:ba:a9:32:f1:6e:
                    9b:43:ed:24:b1:c9:b3:83:3f:c7:12:26:4e:51:83:
                    e5:4e:ea:8d:99:e0:99:20:4d:d7:95:e9:f5:ee:29:
                    e4:5c:c6:4b:b9:a9:3f:1a:73:54:d0:a3:b4:a1:6a:
                    bb:74:1e:62:c0:3a:37:2f:c1:a5:2e:34:f9:1a:a1:
                    d4:64:d1:48:25:c6:40:06:97:3c:a6:42:48:05:b9:
                    60:bf:e9:94:d8:18:f6:84:7a:09:b6:3b:24:e4:75:
                    49:94:8d:87:a7:56:7a:7b:34:6f:06:5f:c1:27:2b:
                    8d:48:da:8e:72:ad:02:29:83:62:af:e3:ac:99:b5:
                    d5:a5:cc:83:67:01:1b:13:8f:f5:0c:dd:19:f9:42:
                    9e:48:96:d0:4a:bc:f3:b7:b9:f1:c4:07:a6:40:f7:
                    54:d3:37:e7:0f:b6:0c:33:23:33:13:ce:6e:fc:e0:
                    7f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C8:B1:DB:65:8F:91:A2:CB:23:19:27:B9:FE:5A:84:9B:F2:FE:15
            X509v3 Authority Key Identifier:
                keyid:3D:6D:9C:C5:9A:D7:D4:E2:DF:69:7C:11:85:CA:EA:C0:32:6C:13:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D6D9CC59AD7D4E2DF697C1185CAEAC0326C1380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgxwe34E35FQj8PKz4eeo7gPxrf1E7GMSLMrx6b6z9p/0/323830343a6337343a3a2f33322d3333203d3e203532373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c74::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:82:e3:bf:a4:65:8a:be:c0:cc:28:e1:cd:7c:f4:3c:1a:e4:
         b6:04:3d:b7:66:a5:49:86:da:45:97:f8:cf:56:6f:15:3b:61:
         3c:db:b3:0c:d9:8a:e9:60:c7:24:e0:bc:72:1a:cb:f3:ef:41:
         09:fe:1b:03:1c:36:8c:f6:b4:4f:fc:cf:bd:cf:cb:b0:04:55:
         ee:d5:d9:ce:78:40:73:a0:34:9f:92:76:b3:4b:c4:1f:80:44:
         ae:06:fa:bf:51:a1:0c:97:e1:82:3d:23:ec:82:69:72:46:34:
         e8:47:0b:80:bb:26:6f:e5:9f:14:9d:81:cb:bd:fa:db:b1:7c:
         c8:e2:be:10:fc:5b:ab:71:fa:80:a7:91:28:46:e3:fb:d0:d1:
         67:3e:6d:61:00:7b:c6:f1:d1:8a:87:f5:e7:a9:ce:e2:44:c1:
         1c:8f:dc:ba:0e:39:06:1c:85:35:55:f6:a0:ec:72:f2:45:31:
         65:f8:11:0c:b3:5a:09:1f:13:a4:8d:36:05:13:84:fe:3e:cb:
         7c:23:02:07:7f:91:01:a9:c1:c7:c3:11:84:03:dd:ba:1f:8d:
         06:d6:20:12:5e:cc:46:25:d4:17:8a:25:5e:fa:bd:92:d5:e6:
         d6:ac:75:d1:95:c9:e2:7c:68:12:7f:15:9b:af:a3:16:9d:a7:
         19:f0:75:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:52:35 2025 by rpki-client