Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a323030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a323030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          NSNFxb/Hr+X9iY874hjfX4Pe/e+Bf38VOxoHXfc99K0=
Subject key identifier:   0A:73:05:B9:43:FE:49:4C:0A:64:96:EF:63:ED:3B:6A:3A:5E:B0:9F
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       2BDDE13E6D4BEE7DA13DF2E86662A0BB73138E21
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a323030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:08:00 +0000
ROA not before:           Mon 09 Jun 2025 18:03:00 +0000
ROA not after:            Mon 08 Jun 2026 18:08:00 +0000
asID:                     272569
IP address blocks:        2804:8548:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 03:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:dd:e1:3e:6d:4b:ee:7d:a1:3d:f2:e8:66:62:a0:bb:73:13:8e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:03:00 2025 GMT
            Not After : Jun  8 18:08:00 2026 GMT
        Subject: CN=0A7305B943FE494C0A6496EF63ED3B6A3A5EB09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:36:fe:8b:55:97:e1:7c:37:dd:b0:a4:9e:
                    32:e6:2b:29:b3:cc:97:51:3b:9b:b1:26:15:fd:e7:
                    07:38:23:b5:5b:33:08:e3:37:71:ba:88:eb:17:a5:
                    b8:af:af:42:23:1e:26:52:c4:09:82:f6:61:e7:a1:
                    ca:d5:c1:9f:1f:25:03:61:af:f8:ae:ac:00:66:69:
                    c4:f8:8c:1a:3b:8c:2a:c3:77:8e:d7:e5:74:7d:c7:
                    1b:27:e0:d9:32:0b:fe:a1:e1:33:0b:67:e8:d7:64:
                    ab:d2:fc:3c:a1:6a:e0:f5:80:1b:9f:2d:aa:31:a8:
                    42:07:b2:6a:7e:9c:fc:0c:6e:32:c0:ef:76:14:9d:
                    16:1f:e7:0a:da:82:09:0b:d9:22:7d:f1:8e:d6:8f:
                    ce:b4:a9:56:82:15:b4:76:63:d0:90:d1:1c:91:36:
                    42:63:2c:dc:9b:29:82:89:34:e1:f3:ff:bb:f3:cb:
                    88:2d:74:03:ba:99:ff:98:b2:b7:cf:c2:36:c5:27:
                    96:0e:f2:90:5c:53:5a:67:8f:b1:cf:47:bd:ff:9b:
                    e3:b0:e1:50:e8:fc:ea:b2:1a:a3:fb:ff:26:42:2c:
                    b4:41:2b:ee:5a:50:e2:15:c3:f1:d1:8e:f2:bd:15:
                    f1:e6:23:72:0d:f0:65:1d:8f:9b:76:c4:cb:91:c9:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:73:05:B9:43:FE:49:4C:0A:64:96:EF:63:ED:3B:6A:3A:5E:B0:9F
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a323030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         bb:9b:8b:9b:5c:c7:02:73:7d:de:7a:9b:3d:3c:b5:95:15:98:
         95:c3:99:2e:51:1d:f7:7e:d3:65:f2:45:bd:44:1f:0c:39:25:
         be:5b:a7:b3:39:18:fc:b2:53:40:93:8a:6a:9e:22:78:bb:a0:
         ce:c9:c3:c8:0e:7b:71:c0:6a:ee:4c:d9:23:69:3a:c5:2a:7c:
         45:20:ce:40:8a:94:bf:4e:24:d5:0d:32:1d:e0:62:64:fb:de:
         a6:20:97:8e:7c:b7:38:88:22:f3:5c:6f:89:f1:cc:bf:95:9d:
         71:bd:09:b0:ba:a9:97:21:e0:0a:10:44:00:0d:ce:24:b6:71:
         4d:84:82:1c:84:74:bc:78:9b:78:d3:5a:c5:48:21:ab:88:5d:
         7d:ff:a9:d5:9f:ee:a8:8b:15:3b:b1:d9:64:b3:5e:78:b0:a3:
         0d:1d:23:91:75:8c:e2:d1:0a:8d:67:71:c7:9e:a4:aa:17:ce:
         27:a1:8f:1b:12:18:76:56:4f:26:31:e7:de:cc:b5:59:ee:fc:
         2b:5f:be:58:d7:ca:37:9d:40:5d:8b:50:af:2b:7d:13:f2:91:
         74:5f:39:ac:72:7e:5c:0e:10:72:5d:fa:b0:16:03:1f:eb:b2:
         c2:17:22:a0:62:4d:14:ba:5a:de:e5:68:94:c3:75:c1:3e:36:
         1a:cf:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:19:23 2025 by rpki-client