Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a363030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a363030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          dCyWyaaALIn/2O9b0pRNPWQ04Y7HoJsAdHDjoW/POms=
Subject key identifier:   82:53:DE:5D:07:BF:06:41:6F:09:28:BA:37:38:46:55:4A:48:64:07
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       0EE3F536581395177399B175BF6E3E2E8CD96970
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a363030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:12:05 +0000
ROA not before:           Mon 09 Jun 2025 18:07:05 +0000
ROA not after:            Mon 08 Jun 2026 18:12:05 +0000
asID:                     272569
IP address blocks:        2804:8548:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 03:10:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e3:f5:36:58:13:95:17:73:99:b1:75:bf:6e:3e:2e:8c:d9:69:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:07:05 2025 GMT
            Not After : Jun  8 18:12:05 2026 GMT
        Subject: CN=8253DE5D07BF06416F0928BA373846554A486407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:63:31:70:2a:62:8c:0a:a2:c7:1f:a2:6d:
                    6c:10:df:32:03:a3:8c:e8:fb:3e:6b:79:3d:76:02:
                    2e:0f:b3:a7:c5:6a:1d:3a:3f:b8:2f:06:f8:f5:1e:
                    07:b9:ec:9a:fa:e9:5f:a4:78:52:19:66:36:db:4d:
                    52:22:35:2e:50:7e:6e:e2:93:a4:27:a9:2b:3f:02:
                    8b:66:fc:fe:fd:10:af:c3:ff:5d:22:bb:0a:7f:1f:
                    ab:30:35:dc:ba:6d:ee:cd:c9:ed:bb:c7:0b:b8:d5:
                    3c:00:d6:08:91:13:cc:86:9c:e7:c8:f4:1c:f0:30:
                    1c:98:6c:72:1b:6e:d4:02:0a:8f:62:0e:d6:89:57:
                    aa:dd:5f:02:92:da:5d:49:ca:44:f5:1c:23:20:4c:
                    c2:31:5f:93:c9:d3:21:f1:86:a1:c3:94:4a:5f:07:
                    21:68:5a:df:3e:81:77:bb:3f:b6:4f:87:61:65:23:
                    e9:7e:64:cd:ae:88:e8:8f:d1:a6:32:fc:99:c0:3a:
                    9f:3a:8f:b2:ed:50:37:2a:a8:5f:98:dc:b0:7b:81:
                    24:76:4e:5d:5e:47:32:92:d6:dc:14:a0:95:96:ba:
                    75:ef:b8:13:09:ea:7f:2a:8e:c0:0e:e8:fb:c7:17:
                    ec:2d:b3:5c:65:ec:5f:a0:f4:2a:f8:77:21:17:a3:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:DE:5D:07:BF:06:41:6F:09:28:BA:37:38:46:55:4A:48:64:07
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a363030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c1:ad:a1:db:16:7d:0f:bf:4f:ed:ba:96:d6:e7:bf:18:2f:f1:
         ee:fb:8a:c6:23:d7:44:cc:b5:ab:45:48:6c:73:74:7b:d5:c7:
         7e:ff:bb:57:12:f4:11:aa:84:5d:7a:2a:b0:6f:cd:97:07:e6:
         5a:a0:3b:38:ea:30:ca:08:76:7e:77:05:d7:4b:0e:74:1f:38:
         09:0d:8c:d0:56:6b:6b:86:e1:ec:46:2f:9a:66:9c:02:62:89:
         9a:51:30:1b:95:a7:c5:1c:29:40:07:56:83:a8:31:3a:71:a1:
         63:be:a4:68:79:78:15:0f:73:74:cb:99:6a:e6:05:91:fe:15:
         2a:96:66:12:26:c9:94:22:ac:f1:47:5a:5e:63:eb:c6:9b:1e:
         76:d2:36:96:de:e3:91:4e:52:22:83:ee:e0:8d:94:58:43:37:
         91:92:20:9e:a6:b1:12:33:39:07:c5:15:df:92:57:22:ab:7b:
         4f:54:d6:b3:e6:e7:59:c5:64:6e:d1:df:ad:67:f3:b3:0f:ca:
         35:f2:43:63:37:bd:45:b2:3e:87:b1:be:99:67:6b:e3:2a:c3:
         44:68:e2:e8:89:f9:df:c1:93:cd:3b:ff:7c:73:5b:f3:a5:cb:
         92:02:ff:09:16:85:9b:ba:f9:07:c9:5c:01:ef:90:4a:bc:b0:
         c2:9c:56:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:33:48 2025 by rpki-client