Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          uIsKR+raHmHuyyBo/pQ+Rzt8zmYYjgetQhKyJlcxgMg=
Subject key identifier:   C9:1D:91:69:36:FD:CF:3F:29:D2:4F:35:FA:82:AD:6B:B5:C7:F5:EA
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       3785FC9DBBF208ACC6538A697FDB40B3A91872D5
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a3a2f33362d3336203d3e203631353932.roa
Signing time:             Fri 28 Mar 2025 19:34:11 +0000
ROA not before:           Fri 28 Mar 2025 19:29:11 +0000
ROA not after:            Fri 27 Mar 2026 19:34:11 +0000
asID:                     61592
IP address blocks:        2804:4c34::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:85:fc:9d:bb:f2:08:ac:c6:53:8a:69:7f:db:40:b3:a9:18:72:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Mar 28 19:29:11 2025 GMT
            Not After : Mar 27 19:34:11 2026 GMT
        Subject: CN=C91D916936FDCF3F29D24F35FA82AD6BB5C7F5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:7d:d8:b9:26:ee:0b:ea:49:8b:8a:fa:92:
                    b1:c0:f1:9c:d9:45:46:79:79:36:c6:47:07:1c:d7:
                    68:86:75:5c:bf:0e:f4:4f:8c:1e:78:a5:cb:cd:3a:
                    0b:81:3f:17:6a:37:3f:4f:cb:4f:91:b3:44:9b:15:
                    ba:cd:68:83:db:08:0d:2c:0b:21:a0:0c:8e:56:df:
                    98:71:c2:4b:00:92:3d:2f:9a:7a:91:74:e4:4d:d0:
                    06:ee:5c:71:75:14:82:8c:4d:80:d9:37:8f:04:9c:
                    b0:f1:5f:57:ba:b4:19:70:79:05:d7:a8:7c:2a:58:
                    ea:ad:06:b9:f8:26:b2:8e:b2:6a:f9:cf:89:31:f8:
                    68:63:ab:ff:c9:a1:76:5c:1a:77:f3:d9:4e:24:fa:
                    2d:1e:f2:9d:6c:15:16:30:86:e3:ca:cc:9d:fe:bd:
                    12:af:04:07:46:53:ca:2a:db:ed:c2:eb:b5:da:69:
                    f2:4b:8f:d7:c7:0a:66:33:5f:8f:0e:21:3c:df:85:
                    43:b3:1b:94:31:1d:a2:55:3d:55:54:37:10:10:8a:
                    7d:92:9d:89:a7:47:48:36:b2:03:fd:e6:3c:b0:03:
                    ec:80:59:c2:e6:09:2e:ad:c1:78:c4:c5:b6:cd:cc:
                    03:d1:81:73:e9:21:74:34:b1:b7:34:ec:da:2e:b1:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1D:91:69:36:FD:CF:3F:29:D2:4F:35:FA:82:AD:6B:B5:C7:F5:EA
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34::/36

    Signature Algorithm: sha256WithRSAEncryption
         64:e4:83:1b:7e:da:4c:d9:19:62:b4:ab:71:fd:d1:fb:7e:26:
         23:20:95:3d:e9:f7:d6:d4:6b:50:f1:99:5c:ae:9b:0a:c2:80:
         5d:58:aa:fb:af:e2:dc:a8:10:35:0d:68:11:a7:66:07:b5:30:
         e9:cc:69:9a:be:3b:72:e4:ef:b8:db:07:68:93:9f:c8:d9:cc:
         cf:0d:aa:2e:62:68:86:5c:eb:f8:2f:82:d1:70:5f:79:2e:0a:
         c3:1f:ea:37:bc:7c:c8:dd:c6:41:f8:80:b8:ea:77:bd:f1:d7:
         e1:d3:b7:aa:d9:68:9a:02:4c:d3:d2:77:8e:7c:8a:aa:e1:5d:
         39:8d:7b:9e:cf:f7:10:7f:a6:16:ff:28:54:5c:80:5c:ba:d2:
         60:d5:4a:0d:35:e1:db:37:5c:15:55:3d:72:b4:ca:ad:9e:a0:
         d9:60:b0:cd:ce:20:24:fe:86:d8:41:d8:1a:40:b7:8a:71:ed:
         16:0a:65:d2:77:dd:ee:f3:3c:74:cf:81:3f:a1:dd:22:97:f0:
         32:f7:f7:02:63:ce:bb:e7:05:f1:63:4b:01:3f:3f:6e:4a:61:
         b3:a0:03:39:ba:7e:23:d7:e1:38:12:80:b2:7d:18:d8:08:c3:
         7a:be:a8:21:e1:35:8a:b9:76:e2:cf:8c:a4:c4:30:2c:ee:1c:
         24:b6:ab:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:00:23 2025 by rpki-client