Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a383030303a3a2f33342d3334203d3e20323731303530.roa
File:                     323830343a373537633a383030303a3a2f33342d3334203d3e20323731303530.roa (raw, json)
Hash identifier:          djhbS9CkYvsCMckAD2LlOhpPaelrLslLp56i7Q434As=
Subject key identifier:   B9:43:2F:84:CA:5D:7D:64:4E:82:B5:FB:7D:32:88:3D:7E:5F:7F:82
Certificate issuer:       /CN=77FC05774545175D19D108F204EAE421372252B0
Certificate serial:       0D5AAE6A3B9590D3E170B86C6CE68BD4DA592706
Authority key identifier: 77:FC:05:77:45:45:17:5D:19:D1:08:F2:04:EA:E4:21:37:22:52:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a383030303a3a2f33342d3334203d3e20323731303530.roa
Signing time:             Thu 05 Jun 2025 16:11:34 +0000
ROA not before:           Thu 05 Jun 2025 16:06:34 +0000
ROA not after:            Thu 04 Jun 2026 16:11:34 +0000
asID:                     271050
IP address blocks:        2804:757c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.crl
                          rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:5a:ae:6a:3b:95:90:d3:e1:70:b8:6c:6c:e6:8b:d4:da:59:27:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77FC05774545175D19D108F204EAE421372252B0
        Validity
            Not Before: Jun  5 16:06:34 2025 GMT
            Not After : Jun  4 16:11:34 2026 GMT
        Subject: CN=B9432F84CA5D7D644E82B5FB7D32883D7E5F7F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:02:a7:12:4a:76:84:cf:ad:f5:dd:45:ae:
                    27:c8:8f:eb:d2:ac:da:42:47:7e:9d:c9:21:a1:4f:
                    52:bd:02:8b:9e:9a:0b:32:df:fc:61:37:50:dc:9c:
                    48:9e:cf:7a:25:6b:88:bb:1d:68:4c:50:f7:0a:e2:
                    d9:d2:36:30:cf:d9:c4:1f:df:e2:a2:26:63:c9:6e:
                    3e:da:2d:8e:b0:40:09:f6:61:27:9c:25:45:d5:bb:
                    4c:f8:2d:b2:df:66:df:72:41:e3:e8:a2:ae:bd:7a:
                    1c:82:df:70:59:aa:ba:d5:c1:08:c6:bf:81:08:42:
                    48:46:c3:3d:bd:2d:b5:3e:69:46:bf:33:61:54:c0:
                    75:a3:03:aa:40:a4:af:0e:ba:92:32:d9:37:ed:d1:
                    4e:c8:ea:77:5f:7a:3e:0f:e1:23:24:26:e7:74:1c:
                    39:8f:e3:9e:06:6f:ef:ad:fc:ac:e1:ce:e8:28:54:
                    4c:3e:59:6d:1d:aa:90:5c:01:8b:69:a3:68:8b:9a:
                    6c:ac:19:72:07:3c:b1:62:e5:94:42:60:63:8e:8d:
                    a1:7e:63:b3:b8:d4:a3:32:57:71:e0:1f:7d:18:77:
                    94:e3:bc:b2:40:1b:df:5a:83:a5:4e:0d:61:18:92:
                    f7:a5:f3:35:2b:9f:2b:4b:4f:d2:2f:91:21:7b:80:
                    69:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:43:2F:84:CA:5D:7D:64:4E:82:B5:FB:7D:32:88:3D:7E:5F:7F:82
            X509v3 Authority Key Identifier:
                keyid:77:FC:05:77:45:45:17:5D:19:D1:08:F2:04:EA:E4:21:37:22:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a383030303a3a2f33342d3334203d3e20323731303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:757c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:41:12:74:1f:75:4e:88:fe:52:cb:21:6e:26:1a:ca:f0:58:
         9d:65:32:9e:67:23:0c:b5:75:a8:3f:33:f6:dc:ab:38:59:b7:
         ff:6d:60:b3:2f:db:c4:5b:cd:7d:1f:3c:26:63:43:8b:5c:85:
         11:ab:5f:92:d9:84:1d:1a:e7:ba:a2:70:ba:2f:3d:4d:6f:a2:
         37:c7:60:97:bf:6f:73:ea:c0:05:8c:ed:05:ce:1b:20:89:e7:
         1c:ae:b8:58:cc:7d:9e:48:6b:02:33:52:91:3a:7d:1d:94:fa:
         14:b7:93:80:64:ff:67:7b:c2:3d:67:b2:eb:43:18:b4:41:96:
         eb:37:83:0e:ca:5a:2d:2c:91:9d:9b:0a:68:1e:f8:cc:3c:d5:
         86:47:5e:5f:19:94:be:d7:e1:56:26:44:ff:74:76:88:02:73:
         41:36:43:f1:96:a3:e3:0d:42:8c:dd:13:89:99:7c:cd:44:4c:
         4b:03:10:1e:1d:71:52:ce:41:4a:bf:35:6b:43:2d:5c:aa:ea:
         af:7f:96:d0:3f:16:ff:d8:8f:32:b7:1e:5e:d1:47:ad:a7:d1:
         56:94:ad:bb:94:40:c1:18:9c:53:e0:bc:43:ee:a7:35:66:76:
         ef:44:ea:5d:94:92:6a:63:2e:66:ef:fa:29:05:6e:e1:3a:2b:
         ae:f6:24:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:03:43 2025 by rpki-client