Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa
File:                     323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa (raw, json)
Hash identifier:          5vmsMPNDibrrIsSSUVR/ZjGp+PYIAh0SrtEOVOgjR/g=
Subject key identifier:   51:4B:15:12:5E:0C:A7:A5:3D:01:58:42:69:C1:D2:0E:BC:28:A3:47
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       0EBF6FB114F501D69E2BB5A0F1E910D6C00A2027
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:09:39 +0000
ROA not before:           Mon 09 Jun 2025 18:04:39 +0000
ROA not after:            Mon 08 Jun 2026 18:09:39 +0000
asID:                     272569
IP address blocks:        2804:8548:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 21:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bf:6f:b1:14:f5:01:d6:9e:2b:b5:a0:f1:e9:10:d6:c0:0a:20:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:04:39 2025 GMT
            Not After : Jun  8 18:09:39 2026 GMT
        Subject: CN=514B15125E0CA7A53D01584269C1D20EBC28A347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cd:98:a2:be:3a:50:61:df:34:95:79:b2:ff:
                    c0:80:5a:f0:f6:24:70:d6:e4:3b:c9:14:71:7c:c0:
                    df:9d:ff:ce:76:a2:70:20:41:ed:7d:5d:a9:32:ad:
                    b3:7a:05:fb:b3:b6:b8:d7:12:3a:d0:6d:1f:fd:aa:
                    4f:9a:c8:69:1f:b1:c1:3d:12:cf:d7:ba:d7:f2:97:
                    bf:d1:12:df:d5:c9:7e:7d:ea:d6:f4:6f:4e:6d:11:
                    88:1a:1b:c3:ff:b0:12:71:87:92:d3:7c:13:c4:88:
                    c9:83:fe:c1:df:1a:a7:fc:6e:16:6a:2e:e8:c0:3c:
                    1c:ca:03:2d:67:a1:11:83:eb:75:f2:23:4f:23:75:
                    99:60:99:b7:51:9c:16:a1:3e:e2:da:53:92:b2:c9:
                    c6:67:2d:0f:d0:0c:82:3d:41:e7:20:00:50:77:f4:
                    4f:66:bd:8c:af:7d:8f:b6:17:08:31:43:41:90:4b:
                    b9:52:07:00:6a:4d:57:05:34:b6:df:65:0c:21:f4:
                    63:e6:13:fb:8a:e0:bf:25:f3:26:57:9c:62:e8:e1:
                    a1:6d:43:d3:aa:2f:b2:2e:d4:27:f0:9a:31:33:8e:
                    96:35:92:10:5b:4a:02:83:10:4b:51:7b:bd:b8:36:
                    7d:e1:42:35:dd:09:16:1f:bb:96:5c:07:f1:9e:b8:
                    f7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4B:15:12:5E:0C:A7:A5:3D:01:58:42:69:C1:D2:0E:BC:28:A3:47
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a343030303a3a2f33342d3334203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:07:99:c9:8f:91:bd:b2:b3:a1:df:44:37:3c:5d:e4:3f:87:
         be:cf:b4:b4:d7:60:03:f3:e4:3f:c8:56:f3:40:ba:0d:bd:09:
         58:21:61:63:9e:a2:26:90:3a:4e:c0:72:5e:a4:40:e4:41:9a:
         34:4c:b6:92:19:46:18:71:95:e2:0f:d0:b7:e5:13:4b:4f:47:
         7a:68:12:a5:ca:ed:3b:81:a4:60:9d:ef:f3:98:c5:f9:1a:44:
         26:c3:69:be:21:2e:8c:86:9b:9d:3b:9d:15:32:a0:1b:85:66:
         7b:8f:05:49:1a:db:27:1b:dd:0b:1e:19:e3:b5:60:8c:89:1c:
         c6:8d:04:9f:77:a1:5d:3d:13:1c:78:7c:32:35:36:cb:09:df:
         ab:28:a5:fc:0e:b3:63:9d:10:94:21:09:43:09:83:66:ed:c3:
         fb:c9:ea:1e:07:a6:0c:73:d0:34:6d:b0:9d:35:dc:f6:2a:55:
         4a:da:58:89:5d:af:a4:66:37:15:3b:eb:81:cf:1c:9b:f9:d5:
         a6:1d:82:70:9e:68:44:92:19:06:18:f5:7c:f1:d6:a2:99:d0:
         1a:f3:50:a0:85:f2:d5:9f:74:39:ba:dd:5d:9f:57:cf:f4:6b:
         be:b8:03:b2:6d:b5:3b:32:55:0e:59:4d:36:85:02:58:20:02:
         71:03:03:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:30:57 2025 by rpki-client