Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3334203d3e20323731333335.roa
File:                     323830343a373965383a3a2f33322d3334203d3e20323731333335.roa (raw, json)
Hash identifier:          Jq4JyDvQWLFUyPSRoTG0OZv3NH7rqEG/fmaS3t0pMlY=
Subject key identifier:   EB:4A:5D:1E:A0:79:B7:DD:7D:94:EC:31:0A:F3:4D:D6:A1:BF:3D:69
Certificate issuer:       /CN=21C87B27DDDE845BF0C3A3F90965AA4D9BF42778
Certificate serial:       71988391BAAFD9FEFB387492F5E4CB0366B52C52
Authority key identifier: 21:C8:7B:27:DD:DE:84:5B:F0:C3:A3:F9:09:65:AA:4D:9B:F4:27:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3334203d3e20323731333335.roa
Signing time:             Fri 06 Jun 2025 18:12:00 +0000
ROA not before:           Fri 06 Jun 2025 18:07:00 +0000
ROA not after:            Fri 05 Jun 2026 18:12:00 +0000
asID:                     271335
IP address blocks:        2804:79e8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.crl
                          rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 16:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:98:83:91:ba:af:d9:fe:fb:38:74:92:f5:e4:cb:03:66:b5:2c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21C87B27DDDE845BF0C3A3F90965AA4D9BF42778
        Validity
            Not Before: Jun  6 18:07:00 2025 GMT
            Not After : Jun  5 18:12:00 2026 GMT
        Subject: CN=EB4A5D1EA079B7DD7D94EC310AF34DD6A1BF3D69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:c6:dd:37:2b:a9:c1:de:51:71:e6:a5:76:
                    27:b5:95:df:50:de:0c:54:0b:0a:1e:12:d6:dc:05:
                    7a:e9:d1:4e:ef:d1:32:9f:2c:18:1c:6b:70:5d:c6:
                    bf:03:98:3f:c1:c1:11:4c:41:85:8f:db:4d:d3:0f:
                    23:24:b4:17:d2:12:45:82:70:70:c7:83:1e:c7:ec:
                    da:db:f8:5e:b9:b6:25:03:97:ca:ca:ea:83:68:ca:
                    5a:11:ee:d3:75:a0:e3:d3:39:d9:e5:92:3a:e7:52:
                    8a:4d:cb:f4:34:b3:b0:db:9d:b4:a5:a2:43:48:81:
                    29:29:05:a4:1a:bf:3f:6c:7d:01:da:4a:f2:d8:e3:
                    b1:3f:fa:93:ef:d7:cb:11:08:bb:d1:81:99:85:77:
                    fd:cc:19:26:26:68:75:84:f7:ae:b5:66:e7:fb:b5:
                    fd:d4:5b:cd:97:99:02:86:15:c2:2e:3f:9a:61:73:
                    6e:e9:98:93:38:4d:70:8e:cb:7a:bb:ba:b4:83:18:
                    9c:9f:41:a1:b5:69:bc:19:90:f3:6f:65:5a:f6:9e:
                    c6:36:eb:b7:c6:0b:84:ae:2d:23:a4:2f:40:02:4d:
                    c4:ed:35:0e:f2:93:2f:43:f6:49:9c:ef:33:3d:ac:
                    d1:ba:7b:b7:a8:2f:d6:ca:55:c4:34:f4:23:bd:17:
                    e8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4A:5D:1E:A0:79:B7:DD:7D:94:EC:31:0A:F3:4D:D6:A1:BF:3D:69
            X509v3 Authority Key Identifier:
                keyid:21:C8:7B:27:DD:DE:84:5B:F0:C3:A3:F9:09:65:AA:4D:9B:F4:27:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21C87B27DDDE845BF0C3A3F90965AA4D9BF42778.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/323830343a373965383a3a2f33322d3334203d3e20323731333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:58:23:02:fb:d7:97:3c:cf:46:1f:c0:2b:36:64:81:f7:b8:
         a4:c7:9a:e7:0d:ee:62:68:9b:7f:f0:e0:11:f5:3b:62:28:c0:
         c4:f4:e6:a0:86:36:5b:f6:17:7d:c8:74:ba:b7:2a:ec:a2:5d:
         cb:9c:83:ce:d0:62:aa:a4:c2:f2:c1:53:1e:15:25:66:2c:22:
         81:3a:24:c9:02:d8:86:16:25:67:99:1f:1f:3c:9c:e9:c5:6e:
         7a:3b:72:01:19:e6:3f:4e:98:ac:b9:22:34:24:66:68:2a:e4:
         cf:06:a8:d7:82:ef:fd:04:4e:04:66:ef:33:e0:df:9b:49:98:
         4c:d8:31:d2:15:bd:e8:14:4b:75:16:e7:0b:18:49:98:82:ae:
         ae:b3:36:f0:a1:a4:21:17:e3:0a:0a:fe:1c:25:10:8e:e6:71:
         85:68:86:99:ec:58:b8:24:ca:ca:42:d3:a7:df:c0:8a:60:6d:
         3f:fd:df:1d:e5:f8:2d:89:a1:59:9c:17:77:b0:01:c4:65:63:
         27:69:fd:3c:4f:35:73:38:b3:5d:f9:85:93:2b:c9:fc:d1:7a:
         cc:ae:cd:4b:44:4a:58:d7:6c:c5:6b:41:1f:5d:6c:1f:b3:c4:
         f2:f2:fe:f7:e2:e2:f9:b2:c7:f0:f3:c1:c8:b8:e1:4d:c7:7b:
         80:71:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:55:06 2025 by rpki-client