Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330353a3a2f34382d3438203d3e20323637343639.roa
File:                     323830343a343166383a663330353a3a2f34382d3438203d3e20323637343639.roa (raw, json)
Hash identifier:          9KgcZ/j4MNaj0qE9xIkcQkqojHOyI4bokZ82wFMUVu4=
Subject key identifier:   38:B6:49:9F:25:6E:A9:67:D5:71:1F:39:F9:DB:14:14:95:BA:26:EB
Certificate issuer:       /CN=1EC4A5745561FAC5CF8B803011305131CF20490C
Certificate serial:       796440DE6C5ABA786575C596DFCB69AC2CF93273
Authority key identifier: 1E:C4:A5:74:55:61:FA:C5:CF:8B:80:30:11:30:51:31:CF:20:49:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC4A5745561FAC5CF8B803011305131CF20490C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330353a3a2f34382d3438203d3e20323637343639.roa
Signing time:             Fri 27 Jun 2025 19:59:32 +0000
ROA not before:           Fri 27 Jun 2025 19:54:32 +0000
ROA not after:            Fri 26 Jun 2026 19:59:32 +0000
asID:                     267469
IP address blocks:        2804:41f8:f305::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/1EC4A5745561FAC5CF8B803011305131CF20490C.crl
                          rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/1EC4A5745561FAC5CF8B803011305131CF20490C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC4A5745561FAC5CF8B803011305131CF20490C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 11:33:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:64:40:de:6c:5a:ba:78:65:75:c5:96:df:cb:69:ac:2c:f9:32:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EC4A5745561FAC5CF8B803011305131CF20490C
        Validity
            Not Before: Jun 27 19:54:32 2025 GMT
            Not After : Jun 26 19:59:32 2026 GMT
        Subject: CN=38B6499F256EA967D5711F39F9DB141495BA26EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:56:b2:50:ba:f3:f8:43:22:2f:b4:86:a9:
                    30:49:31:a1:de:1b:fc:bd:04:20:b3:f0:3d:29:e0:
                    45:fb:06:ab:a2:85:a9:46:f4:d7:fd:0d:0a:76:0a:
                    1d:75:b2:01:9b:d1:62:5c:c3:96:70:d3:0c:dc:42:
                    fe:1d:8a:58:34:1e:47:9b:04:32:18:1e:94:24:01:
                    d3:07:7d:23:6e:76:8c:6f:3c:95:81:17:41:3f:8a:
                    0b:4c:84:2b:a2:17:f4:00:d0:2a:0c:c5:bd:45:7c:
                    d9:f0:e0:51:66:64:0e:9e:98:67:4e:9c:f3:e0:f7:
                    c3:75:33:45:8b:fb:fb:38:ae:e3:8b:74:06:3a:74:
                    1d:7f:b1:e8:68:48:13:63:f1:73:c0:9b:30:d8:ad:
                    e5:b4:2c:c7:26:fa:bb:bc:a5:90:49:8a:a9:1c:5a:
                    d7:bc:1a:bf:8a:3a:18:06:da:58:58:9d:0f:b5:29:
                    04:f0:1b:68:92:2e:7c:ce:08:0a:5f:b7:fc:1b:bd:
                    88:de:b8:cf:c4:1d:7f:75:1b:c4:4a:c3:88:ab:e9:
                    f8:f3:c3:bc:da:77:f2:99:de:1e:9e:1d:62:e0:ae:
                    3e:b4:e5:63:da:2d:4b:36:ab:2b:1b:48:37:38:d5:
                    91:6b:5e:88:95:80:54:2e:0b:b7:2b:3b:32:06:7b:
                    93:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B6:49:9F:25:6E:A9:67:D5:71:1F:39:F9:DB:14:14:95:BA:26:EB
            X509v3 Authority Key Identifier:
                keyid:1E:C4:A5:74:55:61:FA:C5:CF:8B:80:30:11:30:51:31:CF:20:49:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/1EC4A5745561FAC5CF8B803011305131CF20490C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EC4A5745561FAC5CF8B803011305131CF20490C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/323830343a343166383a663330353a3a2f34382d3438203d3e20323637343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41f8:f305::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:9c:b7:e0:aa:8c:fa:98:83:88:20:19:11:78:bb:6f:e6:83:
         cb:b8:3c:aa:2f:b6:c4:27:9d:8d:85:79:d0:6a:58:91:41:5b:
         4f:13:71:9b:e5:47:f2:5c:9a:1f:99:8e:65:cc:f3:1a:8e:94:
         24:92:84:2d:0d:36:4f:8f:b8:f6:9f:43:12:06:88:ee:b8:41:
         b6:35:9c:1e:7a:24:9f:bb:83:ba:35:e4:41:d5:0c:04:ab:b7:
         70:72:4a:b9:fc:60:10:07:b3:3b:d4:92:44:d2:b9:47:29:67:
         17:33:ee:88:59:35:cb:45:8c:0b:df:be:47:43:fe:cd:3a:25:
         b2:7e:69:b6:a3:de:68:4a:52:0d:53:6e:e4:2e:de:33:54:78:
         a9:ea:74:61:3f:86:f5:1c:c1:5b:91:02:3c:7a:d5:11:77:17:
         39:d7:d8:cb:ad:4c:19:4e:0a:ed:a9:e7:c2:5b:a1:2e:8c:3c:
         65:d5:53:a6:d4:e2:25:ae:7c:d8:ae:c2:bc:c2:48:c2:bd:16:
         b3:d6:37:37:9f:ef:11:72:64:b9:b8:61:45:d1:5a:6f:11:8a:
         8e:ed:0b:8b:66:04:20:09:72:2b:54:eb:a0:9d:11:49:c8:c5:
         65:99:67:38:1b:00:ad:5b:3f:d6:23:79:98:c5:3b:de:95:a1:
         e0:3d:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 19:34:27 2025 by rpki-client