Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/323830343a326663303a3a2f33322d3338203d3e20323634393130.roa
File:                     323830343a326663303a3a2f33322d3338203d3e20323634393130.roa (raw, json)
Hash identifier:          8Ep3WF6ZnDPQRWKddXMUUJmL+VJUuDGH9HMY4xyo5n4=
Subject key identifier:   42:86:D2:E2:C3:BA:C2:95:A3:DB:AE:C9:AF:2D:AC:B9:23:30:99:D6
Certificate issuer:       /CN=E3B2C2BA6AE2D2DE3C8D530D3C366B32F18E6191
Certificate serial:       01959ED4F8318D288E26939BA45C33EDBB9395BA
Authority key identifier: E3:B2:C2:BA:6A:E2:D2:DE:3C:8D:53:0D:3C:36:6B:32:F1:8E:61:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3B2C2BA6AE2D2DE3C8D530D3C366B32F18E6191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/323830343a326663303a3a2f33322d3338203d3e20323634393130.roa
Signing time:             Wed 28 May 2025 20:57:00 +0000
ROA not before:           Wed 28 May 2025 20:52:00 +0000
ROA not after:            Wed 27 May 2026 20:57:00 +0000
asID:                     264910
IP address blocks:        2804:2fc0::/32 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/E3B2C2BA6AE2D2DE3C8D530D3C366B32F18E6191.crl
                          rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/E3B2C2BA6AE2D2DE3C8D530D3C366B32F18E6191.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3B2C2BA6AE2D2DE3C8D530D3C366B32F18E6191.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 03:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:9e:d4:f8:31:8d:28:8e:26:93:9b:a4:5c:33:ed:bb:93:95:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3B2C2BA6AE2D2DE3C8D530D3C366B32F18E6191
        Validity
            Not Before: May 28 20:52:00 2025 GMT
            Not After : May 27 20:57:00 2026 GMT
        Subject: CN=4286D2E2C3BAC295A3DBAEC9AF2DACB9233099D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:5b:06:94:18:30:70:73:b8:89:57:16:11:
                    9c:54:17:fd:d2:d7:55:a4:3b:90:19:52:23:2e:ed:
                    c5:f4:5a:56:8d:98:9f:32:d5:7b:41:51:b4:1d:7b:
                    dd:af:d1:a5:67:81:ef:4e:95:93:19:9a:ed:34:bb:
                    35:16:73:fc:9d:e9:e5:b3:98:36:fc:c6:39:85:eb:
                    97:67:25:3e:42:4a:c2:50:b2:b1:f8:5c:36:09:5f:
                    d6:6a:f6:c8:3f:b1:80:9a:a4:bc:7a:3c:78:87:9a:
                    4a:00:37:58:96:87:a1:a0:f5:b0:f6:80:20:05:09:
                    5c:99:3b:72:37:e7:b0:af:0a:36:e4:d7:40:e5:b1:
                    9d:ca:96:c4:84:94:6e:d4:28:bd:7f:1e:2d:22:95:
                    47:97:b6:1a:f0:13:00:60:89:a5:f0:dd:82:d7:88:
                    a0:0b:1d:09:0b:1f:64:64:56:f2:36:94:8d:98:96:
                    d4:be:d7:29:d5:df:4e:4b:9b:9d:3a:41:bd:70:2e:
                    82:46:4b:58:6c:38:97:65:6c:c0:71:26:09:5e:74:
                    6e:3d:fd:79:fe:c5:77:53:b6:9e:8e:7d:16:e0:44:
                    68:08:06:d0:5c:28:8e:9b:10:d7:be:71:0e:23:53:
                    56:c7:ba:ef:f9:ec:90:1c:e9:a0:a8:a9:5a:8c:b1:
                    44:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:86:D2:E2:C3:BA:C2:95:A3:DB:AE:C9:AF:2D:AC:B9:23:30:99:D6
            X509v3 Authority Key Identifier:
                keyid:E3:B2:C2:BA:6A:E2:D2:DE:3C:8D:53:0D:3C:36:6B:32:F1:8E:61:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/E3B2C2BA6AE2D2DE3C8D530D3C366B32F18E6191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3B2C2BA6AE2D2DE3C8D530D3C366B32F18E6191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3cinK9nXL69fN9kBHYWsETXQVAkwppcdDJApfF5exKtQ/0/323830343a326663303a3a2f33322d3338203d3e20323634393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:ca:8d:b3:14:3e:d3:b2:82:24:22:8b:93:09:c9:f2:a3:89:
         67:19:5f:27:d6:06:60:1f:14:77:8d:96:4f:dc:df:0b:40:86:
         39:03:9d:91:43:f2:2b:f7:89:c5:cb:f3:78:19:53:ed:30:a0:
         dd:e3:95:78:89:48:f4:66:7e:62:85:9d:0a:24:77:cd:ec:98:
         17:45:35:ff:7e:ac:dd:b9:9e:d6:a5:c1:a4:c0:88:84:f5:f2:
         52:7e:99:4b:80:aa:7f:92:1f:f0:99:bf:cd:cf:02:1e:75:81:
         e0:98:ad:18:2c:30:b4:98:e8:59:a7:87:f9:29:66:82:f8:79:
         8c:aa:d1:3d:9f:04:71:ce:74:4e:29:9a:30:5f:06:f0:53:d0:
         c4:2a:8e:0a:84:41:6a:d1:47:72:e7:20:4c:cb:b6:70:30:98:
         82:da:36:34:33:f7:b6:ac:ae:f3:13:3b:23:2d:94:46:80:09:
         0d:1b:ea:85:94:97:55:ba:9c:8a:d2:6c:de:fe:f3:85:c7:92:
         1c:da:58:4a:68:b2:5e:7b:42:b1:4d:4a:74:3c:6e:81:9a:f2:
         11:e5:34:47:04:f9:7f:00:40:88:87:44:ce:37:53:08:64:a2:
         3f:89:84:0f:db:25:af:be:74:3b:44:9e:13:e0:db:5c:eb:4d:
         17:c5:fa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:46:43 2025 by rpki-client