Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d313238203d3e20323639343636.roa
File:                     323830343a363531303a3a2f33322d313238203d3e20323639343636.roa (raw, json)
Hash identifier:          qOzvepeYB4SgcxILUF0Q01e0sHd3JbhsDo/vJwbNY1s=
Subject key identifier:   B6:10:90:CB:43:C7:9D:29:05:DE:76:81:DA:BF:97:96:68:FE:FE:0C
Certificate issuer:       /CN=5B76E3AFE2960F32C3E4F7C7E44723E97E800A75
Certificate serial:       0C336FD09A792F215DDF17DAAB470AC772522196
Authority key identifier: 5B:76:E3:AF:E2:96:0F:32:C3:E4:F7:C7:E4:47:23:E9:7E:80:0A:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d313238203d3e20323639343636.roa
Signing time:             Fri 30 May 2025 11:38:20 +0000
ROA not before:           Fri 30 May 2025 11:33:20 +0000
ROA not after:            Fri 29 May 2026 11:38:20 +0000
asID:                     269466
IP address blocks:        2804:6510::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.crl
                          rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 04:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:33:6f:d0:9a:79:2f:21:5d:df:17:da:ab:47:0a:c7:72:52:21:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B76E3AFE2960F32C3E4F7C7E44723E97E800A75
        Validity
            Not Before: May 30 11:33:20 2025 GMT
            Not After : May 29 11:38:20 2026 GMT
        Subject: CN=B61090CB43C79D2905DE7681DABF979668FEFE0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:9a:92:bd:ca:a2:37:00:1e:7a:84:f7:63:
                    4a:94:b6:52:a3:4c:de:7b:08:a7:f6:e9:4b:ba:50:
                    87:23:88:05:8f:c0:f8:ea:a2:1b:ed:a0:1c:1d:b4:
                    67:f2:5c:99:a8:5f:03:9c:d7:b4:a4:bf:63:55:e0:
                    59:79:49:29:54:f0:d2:ef:2d:62:0d:9c:6a:ce:b5:
                    83:2b:7d:ac:23:93:f0:64:2c:3f:3a:55:1b:fc:d5:
                    ea:eb:92:07:45:65:be:ec:37:7a:08:08:7b:23:ef:
                    df:29:e6:e8:1f:74:c5:89:64:e7:a9:e2:15:1a:d2:
                    56:19:53:32:87:c5:7c:fa:84:bc:20:c8:dd:8d:18:
                    73:b1:ee:d7:2d:0a:35:10:83:32:cf:c5:a2:81:25:
                    36:54:68:4e:18:93:89:a6:91:9b:3b:f2:07:a2:04:
                    43:50:ee:10:aa:c3:20:22:7b:ae:c2:f3:b2:1b:c8:
                    ce:3c:90:68:ee:b9:a8:23:7b:dd:ad:a5:a8:81:bf:
                    be:c5:7e:1d:c3:b0:ca:4f:5a:d6:57:c4:1b:f4:a5:
                    d3:80:27:21:13:18:c2:71:13:06:2d:ad:a9:44:c5:
                    a3:61:d1:a8:33:23:6a:9e:2e:d5:d9:40:7f:26:15:
                    46:21:e6:14:a9:24:b9:9d:3b:23:3c:43:fd:33:c4:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:10:90:CB:43:C7:9D:29:05:DE:76:81:DA:BF:97:96:68:FE:FE:0C
            X509v3 Authority Key Identifier:
                keyid:5B:76:E3:AF:E2:96:0F:32:C3:E4:F7:C7:E4:47:23:E9:7E:80:0A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B76E3AFE2960F32C3E4F7C7E44723E97E800A75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RVUXnbvrbygmTLX711yhEYs3BkMA2ycsn34r3y6bU7m/0/323830343a363531303a3a2f33322d313238203d3e20323639343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6510::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:e5:41:3b:5f:31:77:8d:a5:b9:27:01:88:51:f3:57:77:21:
         a9:92:56:3d:21:b5:82:b9:cf:4d:10:0e:d1:98:4a:1e:36:f6:
         ca:cf:3b:4c:94:6b:4a:8c:ce:fe:67:a4:08:41:c0:57:f4:54:
         44:66:f0:3f:11:55:d7:c0:92:2a:1a:86:ea:b2:24:5f:33:1b:
         a7:d9:e5:40:c3:7b:ac:0c:d5:69:04:be:9b:92:92:48:6d:6f:
         60:0c:9d:1c:47:7d:b2:81:28:5c:8c:7e:f7:cc:d2:08:26:18:
         c5:f0:47:23:bd:f3:f8:02:c6:a2:5f:bb:25:45:86:07:86:ba:
         20:4b:0e:2f:f5:b4:23:9e:32:f4:9a:1c:9d:e3:dc:6f:5f:19:
         55:7e:c0:a0:9b:41:a2:7c:c2:80:21:b8:f1:65:d4:48:ee:12:
         a4:a4:02:a6:bf:88:46:63:38:b9:70:88:2a:c3:49:7a:70:cc:
         ae:7c:fb:a1:24:70:f0:85:0c:85:3c:93:78:b0:04:70:ef:db:
         47:9e:ca:2e:d0:57:fb:46:69:1a:b3:dd:bb:5a:d5:30:5a:a0:
         8a:f5:b0:7a:9c:1c:53:45:a2:7f:72:fb:2e:f4:49:67:0f:a1:
         1c:77:8d:f1:05:da:d6:ea:cf:cd:43:a4:e4:cb:e4:a8:da:6f:
         43:cf:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:01:32 2025 by rpki-client