Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/323830343a376233383a343030303a3a2f33342d3334203d3e20323731343138.roa
File:                     323830343a376233383a343030303a3a2f33342d3334203d3e20323731343138.roa (raw, json)
Hash identifier:          OZBSa0rda+mVt27oG3qtHk3AmOeTONTPjnJnhvfOWlU=
Subject key identifier:   E7:6E:DC:48:A2:33:A0:4D:E6:F9:4F:38:CF:F8:91:21:B7:49:02:94
Certificate issuer:       /CN=46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31
Certificate serial:       54C4908CE60BA4459AE2434225A68CBA24950498
Authority key identifier: 46:DA:2E:CF:EB:E8:D4:82:3B:B8:F1:6C:65:1B:0C:6E:2A:3F:5F:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/323830343a376233383a343030303a3a2f33342d3334203d3e20323731343138.roa
Signing time:             Tue 03 Jun 2025 13:22:56 +0000
ROA not before:           Tue 03 Jun 2025 13:17:56 +0000
ROA not after:            Tue 02 Jun 2026 13:22:56 +0000
asID:                     271418
IP address blocks:        2804:7b38:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.crl
                          rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 06:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c4:90:8c:e6:0b:a4:45:9a:e2:43:42:25:a6:8c:ba:24:95:04:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31
        Validity
            Not Before: Jun  3 13:17:56 2025 GMT
            Not After : Jun  2 13:22:56 2026 GMT
        Subject: CN=E76EDC48A233A04DE6F94F38CFF89121B7490294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a7:b2:3b:02:86:59:79:a6:d3:a2:22:86:db:
                    5d:76:1d:53:c3:21:3c:5f:80:92:48:c4:2a:ee:4c:
                    97:49:93:0d:eb:99:d5:16:da:10:1e:55:dc:21:ae:
                    3a:73:79:ce:29:3e:cb:b8:89:18:57:a2:56:86:04:
                    b0:47:d9:24:07:fc:05:46:07:a2:16:0e:e0:42:d0:
                    87:83:fe:f4:08:4e:4e:21:ae:e0:fe:f4:03:01:1a:
                    32:b3:28:16:11:38:82:73:ad:f0:3d:3d:da:78:24:
                    48:5b:67:e0:9f:d1:93:48:d7:34:51:87:d3:fd:8c:
                    38:99:03:7e:cb:c9:22:52:21:90:d7:cc:d7:7a:63:
                    32:80:cc:bd:b0:35:42:c4:d2:a1:66:84:3e:e0:a2:
                    78:90:0c:0f:90:63:90:f3:62:d2:df:49:4f:c2:36:
                    7c:63:0b:37:c5:47:e7:f8:57:27:e8:61:92:1d:d5:
                    5e:01:ee:16:cf:16:dd:d2:51:05:61:ca:d4:7d:19:
                    1a:e8:a2:76:87:79:92:6d:30:38:9a:f4:61:36:36:
                    46:77:11:d3:8f:f2:b7:8c:7a:b7:24:c0:15:4f:82:
                    c8:ad:4d:7a:50:5a:30:a5:72:5d:57:7b:f0:a0:e0:
                    46:2c:e0:83:36:e1:7f:a9:3e:94:8e:6c:96:eb:54:
                    c5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6E:DC:48:A2:33:A0:4D:E6:F9:4F:38:CF:F8:91:21:B7:49:02:94
            X509v3 Authority Key Identifier:
                keyid:46:DA:2E:CF:EB:E8:D4:82:3B:B8:F1:6C:65:1B:0C:6E:2A:3F:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46DA2ECFEBE8D4823BB8F16C651B0C6E2A3F5F31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/323830343a376233383a343030303a3a2f33342d3334203d3e20323731343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b38:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:01:ba:cd:3f:54:70:ba:7d:23:37:85:21:ff:5f:6e:54:
         64:14:91:69:ae:4f:d2:9f:4e:ee:38:44:81:ea:c2:03:f6:4b:
         90:f1:f1:b2:9c:fd:c6:1c:53:75:1d:62:4b:45:98:33:36:a7:
         a6:b3:e7:49:b6:0b:e0:73:8f:53:c2:cc:1d:5b:a4:55:64:6e:
         54:ce:16:f6:6f:2a:f6:df:87:28:88:ab:91:44:f1:a1:ee:82:
         51:5e:d8:e8:41:4d:d8:65:8c:f2:48:15:33:7b:f0:53:8a:a4:
         46:a6:7e:59:ab:fb:5e:c3:2b:b5:17:03:25:ca:63:96:d6:08:
         01:e3:37:19:68:fd:69:e8:1b:66:d8:3b:ef:f9:65:fa:59:22:
         ce:b1:75:6f:ab:fc:5b:a6:82:96:af:9d:b8:35:7d:41:f6:57:
         ee:08:87:b0:9e:8b:e2:19:60:10:be:bb:4d:94:a9:02:4c:22:
         97:7b:8e:06:78:ae:bc:63:74:af:22:3f:ef:97:8a:65:3e:25:
         c1:a6:35:76:7b:af:c2:97:3d:c1:22:ad:34:b0:c7:0d:65:81:
         25:2a:8a:f1:b4:6b:a7:50:dc:8e:8f:64:b5:81:1f:fc:1a:6f:
         f3:3d:cc:4c:c0:b5:64:75:b4:be:37:10:13:b0:c2:ae:02:ca:
         11:ef:db:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:59:26 2025 by rpki-client