Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33322d3332203d3e20323732353639.roa
File:                     323830343a383534383a3a2f33322d3332203d3e20323732353639.roa (raw, json)
Hash identifier:          U4laCmqraqK9FJ6ceIbYzWbNEYB+4eokM8jF7Vjrn6o=
Subject key identifier:   BA:88:89:59:2B:BF:09:08:96:3A:0B:82:8C:7C:38:F6:54:01:8F:5A
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       4A19A67FDA75F214219162BACA95C4D8D2D9EA22
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33322d3332203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:24:23 +0000
ROA not before:           Mon 09 Jun 2025 18:19:23 +0000
ROA not after:            Mon 08 Jun 2026 18:24:23 +0000
asID:                     272569
IP address blocks:        2804:8548::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 15:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:19:a6:7f:da:75:f2:14:21:91:62:ba:ca:95:c4:d8:d2:d9:ea:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:19:23 2025 GMT
            Not After : Jun  8 18:24:23 2026 GMT
        Subject: CN=BA8889592BBF0908963A0B828C7C38F654018F5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:82:32:b9:b7:75:d4:03:09:75:84:ae:db:
                    5e:e3:a9:7b:b3:e9:a2:49:cc:11:e7:18:92:83:15:
                    3d:3a:e1:b0:61:bc:14:b6:d4:9c:d9:e1:a2:ec:db:
                    e1:29:d9:a0:7b:43:e4:26:45:35:d9:c3:8a:64:1d:
                    22:40:23:64:58:18:3a:dc:5b:c6:58:36:8a:2a:28:
                    01:5a:b8:b1:8e:95:4b:e3:24:6f:f6:75:0f:ed:11:
                    b6:95:96:fa:92:47:fc:6e:fe:d6:58:d2:4e:e1:7c:
                    10:78:8a:f8:94:f2:93:c9:ce:2a:3a:67:78:2f:eb:
                    9d:2a:51:7e:83:6d:9f:bf:be:e8:6c:05:31:9e:f2:
                    1a:83:48:72:c4:81:c9:89:22:9b:cb:29:07:61:b3:
                    db:67:cd:f6:6d:44:ab:e4:dc:57:fe:22:f1:3d:e2:
                    e3:3d:91:59:39:96:06:fd:67:f9:4b:56:fb:c4:5e:
                    42:9e:7d:ee:33:f6:c6:e3:07:0d:09:fe:eb:33:07:
                    a4:82:a6:6d:e5:6a:c2:ec:8b:a4:13:9e:b1:3f:4d:
                    18:6f:13:b1:f4:95:7e:af:eb:c6:c0:56:c4:68:f5:
                    3d:1b:98:1d:91:43:d2:5b:f2:48:cd:a3:0c:72:2a:
                    3c:a4:2b:6c:8f:bd:12:cf:dd:d0:d1:3b:1e:95:c6:
                    cc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:88:89:59:2B:BF:09:08:96:3A:0B:82:8C:7C:38:F6:54:01:8F:5A
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33322d3332203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:d3:c3:6d:5f:92:1b:17:b4:c9:09:61:4b:23:97:31:dc:4b:
         b5:ef:21:0f:77:2b:b6:26:19:85:4c:1c:55:a1:2a:b9:5c:90:
         5a:de:eb:f4:8c:16:af:42:59:1e:51:b7:3b:66:2d:d6:15:21:
         54:7a:a8:7b:45:66:2f:0f:3e:e0:e7:a9:2a:4d:08:bb:93:51:
         ce:c8:3c:ba:34:fc:12:2b:2d:ba:1c:15:7e:9a:54:fa:dc:a1:
         91:c5:9d:75:84:80:ed:fd:ca:47:53:7a:51:8f:a7:5d:0e:fc:
         54:68:36:8e:75:e4:08:f9:fd:a4:17:c0:69:06:20:8c:72:50:
         37:a2:84:e8:b6:05:49:90:73:4e:06:1c:f3:4d:cf:ba:15:9b:
         88:ab:19:cb:51:10:c8:66:35:aa:0f:49:73:98:1c:3a:a2:6c:
         87:26:04:84:bb:16:fe:36:a7:d0:a0:c0:ca:23:14:60:1d:1c:
         10:d4:74:95:2d:2e:37:2a:80:0a:4c:c4:37:ce:24:32:7b:f3:
         aa:f1:6f:06:20:91:7a:5a:f0:86:cd:7c:b2:4d:26:19:21:5e:
         50:5b:44:90:ca:ef:cd:b3:ef:0d:04:55:31:8e:c8:1b:b5:d6:
         9f:de:5c:c4:ab:b7:82:ed:3a:a1:1f:5d:71:89:7c:58:9e:70:
         a5:09:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:30:47 2025 by rpki-client