Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33372d3337203d3e20323639323632.roa
File:                     323830343a363165303a3a2f33372d3337203d3e20323639323632.roa (raw, json)
Hash identifier:          Vo51ChU4nWcP+BLOP7/b9astUY6PkSY4rtWO0wea8jI=
Subject key identifier:   EE:33:8E:95:74:68:5F:24:FB:4E:F7:1C:50:D6:39:F7:65:DA:CE:6C
Certificate issuer:       /CN=EEA8B3997AFF147B3B052397FB3F022EC39DAAAA
Certificate serial:       776D256769DF43AC1BA0625AB88831794EFBEC9F
Authority key identifier: EE:A8:B3:99:7A:FF:14:7B:3B:05:23:97:FB:3F:02:2E:C3:9D:AA:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33372d3337203d3e20323639323632.roa
Signing time:             Thu 01 May 2025 20:44:53 +0000
ROA not before:           Thu 01 May 2025 20:39:53 +0000
ROA not after:            Thu 30 Apr 2026 20:44:53 +0000
asID:                     269262
IP address blocks:        2804:61e0::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.crl
                          rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 00:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6d:25:67:69:df:43:ac:1b:a0:62:5a:b8:88:31:79:4e:fb:ec:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA8B3997AFF147B3B052397FB3F022EC39DAAAA
        Validity
            Not Before: May  1 20:39:53 2025 GMT
            Not After : Apr 30 20:44:53 2026 GMT
        Subject: CN=EE338E9574685F24FB4EF71C50D639F765DACE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:b1:c4:c8:7f:77:de:c2:65:22:4f:f9:e1:
                    10:fa:33:c4:b7:db:c1:25:64:5a:ba:dd:c6:9d:bd:
                    36:40:c9:4a:2b:fd:e4:3a:58:74:57:c8:c8:29:60:
                    5c:a2:15:3d:28:ea:e4:d4:a9:b2:be:05:a7:e0:92:
                    9b:87:c8:f9:c7:fb:75:9a:43:2e:98:02:77:50:94:
                    a5:05:42:65:3a:12:ac:88:78:07:5d:26:97:4d:31:
                    4f:74:6c:41:5f:4d:52:e5:56:b6:5d:ec:bc:34:94:
                    30:c8:28:2d:13:a2:04:6a:09:d0:fe:4b:7e:f8:b0:
                    6b:51:57:f5:13:5c:b7:c1:49:2f:75:11:1d:6c:47:
                    f4:9a:3c:a0:c3:d6:0e:96:95:dc:22:de:8c:38:89:
                    a7:9b:ee:3b:bc:1b:ad:1f:a4:19:7f:6f:9c:05:5d:
                    7e:a5:3e:21:a8:97:72:77:aa:c1:a5:cf:d3:62:53:
                    ab:18:b5:2d:bc:c8:60:c1:26:f9:59:2f:61:c4:73:
                    5e:8a:3b:92:0c:a0:e7:26:1b:37:21:c6:a1:9d:63:
                    30:4b:20:44:a4:2c:a4:12:e8:f2:a1:c4:3b:ad:32:
                    5e:ff:1e:86:ec:28:e7:55:1b:f3:0e:39:b7:ba:d3:
                    8f:52:2b:db:3d:39:e7:68:b7:47:88:15:e7:da:8c:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:33:8E:95:74:68:5F:24:FB:4E:F7:1C:50:D6:39:F7:65:DA:CE:6C
            X509v3 Authority Key Identifier:
                keyid:EE:A8:B3:99:7A:FF:14:7B:3B:05:23:97:FB:3F:02:2E:C3:9D:AA:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EEA8B3997AFF147B3B052397FB3F022EC39DAAAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/2/323830343a363165303a3a2f33372d3337203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61e0::/37

    Signature Algorithm: sha256WithRSAEncryption
         68:55:8f:09:b6:5a:40:5b:51:a1:37:20:1c:87:53:00:65:11:
         c9:74:c6:7a:ed:9b:18:50:06:89:b4:d0:35:b4:2a:42:e6:86:
         28:8a:82:4d:89:70:0b:29:ac:33:a6:65:96:f5:e8:73:ee:1f:
         39:28:7a:b2:02:90:c3:e1:f4:82:f1:c7:58:e8:25:03:3c:7e:
         05:6a:46:91:a2:f1:9c:eb:d2:c2:95:8d:d8:f8:08:18:a8:d1:
         9a:eb:40:9e:04:f4:a8:c7:8d:31:88:4e:9e:b7:cc:35:ce:a3:
         56:59:8a:d0:b1:f5:7e:0a:c6:36:6c:3e:f9:d2:e3:10:45:92:
         71:8f:89:dc:ab:d6:7e:f4:49:dd:e6:97:d9:cd:70:fe:8e:e4:
         58:ee:1d:3e:30:0e:be:ef:f0:41:f6:c8:e2:b0:b3:3f:8b:5f:
         21:70:de:b2:3a:5d:b9:e8:61:6a:f7:6a:2e:de:65:3e:6b:75:
         ec:24:f7:1a:ff:0f:0d:8d:90:13:f8:58:32:c1:bd:4f:4b:cd:
         ac:dd:77:41:41:18:82:38:b9:0d:17:b7:1c:d6:b7:ec:28:73:
         7a:83:24:a4:ad:31:3c:e3:d8:b1:5c:95:29:af:aa:30:b9:be:
         17:34:10:5e:db:25:2b:b7:62:71:6a:d2:ea:3c:25:8a:61:a8:
         39:8e:bc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:50:43 2025 by rpki-client