Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d3438203d3e20323731363232.roa
File:                     323830343a376536383a3a2f33322d3438203d3e20323731363232.roa (raw, json)
Hash identifier:          Wnja5SI2cSuzJuVft2aF03j0UEH4Hp+Rldf2a26pEHM=
Subject key identifier:   0F:9E:40:5D:D6:29:DC:2D:5B:A1:40:0A:06:A5:6B:DC:E5:C3:C1:4B
Certificate issuer:       /CN=E9AECF3699200359BC938C47C511F48ECC7D354F
Certificate serial:       160A182C43AB366ECC1114073E4CDFD38CA7B591
Authority key identifier: E9:AE:CF:36:99:20:03:59:BC:93:8C:47:C5:11:F4:8E:CC:7D:35:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AECF3699200359BC938C47C511F48ECC7D354F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d3438203d3e20323731363232.roa
Signing time:             Thu 29 May 2025 11:51:32 +0000
ROA not before:           Thu 29 May 2025 11:46:32 +0000
ROA not after:            Thu 28 May 2026 11:51:32 +0000
asID:                     271622
IP address blocks:        2804:7e68::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/E9AECF3699200359BC938C47C511F48ECC7D354F.crl
                          rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/E9AECF3699200359BC938C47C511F48ECC7D354F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AECF3699200359BC938C47C511F48ECC7D354F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 06:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0a:18:2c:43:ab:36:6e:cc:11:14:07:3e:4c:df:d3:8c:a7:b5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AECF3699200359BC938C47C511F48ECC7D354F
        Validity
            Not Before: May 29 11:46:32 2025 GMT
            Not After : May 28 11:51:32 2026 GMT
        Subject: CN=0F9E405DD629DC2D5BA1400A06A56BDCE5C3C14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:27:e2:0e:06:7e:3e:82:04:23:76:6d:0f:
                    3a:7e:1f:2e:3d:77:4f:fd:45:81:9a:a0:cd:b1:20:
                    18:a2:4b:71:ba:e1:88:05:4a:7f:e7:20:1b:8a:a7:
                    1a:1a:34:98:c0:56:f7:6f:ed:71:2e:3e:ef:d2:f1:
                    94:d6:0b:49:b0:22:8b:3c:a2:f7:7f:51:64:7e:d0:
                    32:77:4c:33:3e:b8:db:63:ab:a4:f6:fa:03:fe:ff:
                    04:a1:dd:c9:6b:44:c9:bd:d6:87:5b:5e:00:d4:52:
                    33:d9:a4:30:0e:e1:07:20:55:28:7c:19:ff:2e:cc:
                    1b:57:4e:33:80:0f:05:9b:ad:ae:ab:5b:f4:35:a2:
                    e4:a0:af:70:ab:da:10:39:5d:16:77:f6:58:bb:49:
                    31:aa:a7:be:b6:10:fa:c7:4c:d0:37:bc:14:99:37:
                    73:e2:f0:25:28:13:db:23:de:8e:02:48:55:7c:e9:
                    06:a3:99:8d:4c:e9:51:92:9c:d2:d5:55:ad:a3:f0:
                    3c:d1:65:14:32:df:46:3a:bf:54:ef:02:f8:1f:59:
                    97:d6:d3:66:cb:0b:c0:6e:9a:e4:97:80:ee:8e:06:
                    cb:46:75:60:00:8d:9a:20:33:3b:4d:cc:11:12:b5:
                    d0:ec:9f:ec:14:c0:ef:cd:6f:5a:26:e0:6e:79:b8:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9E:40:5D:D6:29:DC:2D:5B:A1:40:0A:06:A5:6B:DC:E5:C3:C1:4B
            X509v3 Authority Key Identifier:
                keyid:E9:AE:CF:36:99:20:03:59:BC:93:8C:47:C5:11:F4:8E:CC:7D:35:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/E9AECF3699200359BC938C47C511F48ECC7D354F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AECF3699200359BC938C47C511F48ECC7D354F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2eou6jzjq8K2JgGZ511bHoV8jhxrc3MUrHPTCR1VhAPb/0/323830343a376536383a3a2f33322d3438203d3e20323731363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e68::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:7a:6f:72:2e:9a:a0:e6:d9:ae:75:8e:33:a5:f2:65:1a:c7:
         b8:10:81:f5:5c:00:1a:b9:de:bd:37:c4:90:4f:cb:58:03:e7:
         5a:93:bf:81:75:36:28:2d:b5:d0:e8:5e:3e:3f:bf:1f:10:a6:
         57:4d:69:df:07:16:2a:91:0f:af:c4:1c:d1:41:af:58:1d:f3:
         75:69:03:e9:70:35:c0:13:70:7e:3d:66:8b:f1:79:8c:ee:bd:
         7d:c6:5c:13:38:07:1e:ca:5e:21:dd:f9:50:03:f5:e6:2c:62:
         20:e6:9f:3e:99:2e:12:ae:b6:af:50:19:8e:68:28:64:af:c2:
         65:23:88:91:89:cd:53:b7:83:14:96:fa:2a:b7:25:34:1e:0d:
         e4:10:23:de:e8:6c:3d:52:e9:41:7e:88:b1:e2:61:08:13:9b:
         23:b1:19:55:da:6f:44:73:df:90:5e:b1:da:3d:50:d0:5e:45:
         37:a7:33:fe:a8:c5:31:0a:eb:b9:cc:fa:00:4d:29:24:46:2e:
         1a:6e:6f:01:9c:90:06:ec:a5:56:87:8c:77:ca:02:49:fb:1a:
         95:40:85:c7:e5:ec:cc:fd:f0:82:86:db:c6:35:71:c9:c7:94:
         ec:0d:1f:9f:6e:5c:6b:e0:a0:bf:04:b7:20:52:4f:54:81:8e:
         a2:64:77:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:44:45 2025 by rpki-client