Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          YVud9oxybh7f5LBZ2WcKYhXZCfiLtE78R659LyfbxRE=
Subject key identifier:   7D:99:A6:25:F0:49:F9:3E:63:3B:99:7A:E1:48:07:82:B7:E6:2D:57
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       6EF1F9C9BAD2009BDC9793F8B4C6D2E3597299C2
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:06:48 +0000
ROA not before:           Mon 09 Jun 2025 18:01:48 +0000
ROA not after:            Mon 08 Jun 2026 18:06:48 +0000
asID:                     272569
IP address blocks:        2804:8548::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 21:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f1:f9:c9:ba:d2:00:9b:dc:97:93:f8:b4:c6:d2:e3:59:72:99:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:01:48 2025 GMT
            Not After : Jun  8 18:06:48 2026 GMT
        Subject: CN=7D99A625F049F93E633B997AE1480782B7E62D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1a:84:ed:a0:77:84:f3:1c:1a:42:ad:b4:4f:
                    e6:9d:1b:b3:48:57:4b:24:54:36:00:52:63:44:03:
                    90:73:43:bb:5a:a0:2f:69:57:81:02:ed:50:3a:9f:
                    0d:c7:c3:29:3c:ae:1e:01:14:18:c6:93:1d:d4:4a:
                    b0:47:cd:43:ea:90:7e:e2:40:fb:ad:bd:94:10:70:
                    a8:64:6b:e1:09:df:7f:ff:82:b2:74:9a:85:19:88:
                    f9:27:53:d1:ff:64:bd:ea:f3:12:e2:f6:a3:27:5c:
                    4e:71:76:47:68:e6:54:5c:60:47:6d:e8:50:f8:e2:
                    2d:b8:89:6d:bd:5b:28:b0:d8:a3:4f:5d:c0:60:f1:
                    fd:bb:0c:38:bc:8e:78:87:0f:4d:9d:5e:cd:1a:85:
                    d7:d7:2a:20:a5:6d:36:1b:8e:1e:f9:2d:d0:77:44:
                    3b:44:55:c4:cf:95:75:77:61:46:64:f3:b8:08:05:
                    9d:b4:24:e3:0a:d7:d2:9c:70:90:d3:61:46:ab:00:
                    5a:bf:fa:c1:04:7f:9a:ed:25:dd:be:b5:cb:a1:5f:
                    bb:8b:df:6d:a8:57:75:f6:62:19:f6:9e:81:34:03:
                    b4:33:47:a1:99:ea:76:4a:78:6a:08:e1:fa:89:19:
                    7b:77:8d:00:b4:13:c1:ce:6c:68:f8:ac:e8:de:2c:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:99:A6:25:F0:49:F9:3E:63:3B:99:7A:E1:48:07:82:B7:E6:2D:57
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548::/36

    Signature Algorithm: sha256WithRSAEncryption
         86:96:3d:db:04:dd:3a:94:c1:bd:70:b5:c8:22:10:7f:57:ef:
         8a:e7:6a:ad:25:92:6e:5a:31:a2:96:92:1e:6a:40:64:40:54:
         a3:48:55:aa:cf:0f:05:87:03:ec:1f:8e:38:6b:2c:af:70:3e:
         18:f6:5f:9c:37:4a:82:ba:ac:1c:37:c8:33:16:df:f0:44:b7:
         e9:05:b3:14:fc:c1:88:c9:c6:98:a1:36:ed:46:c5:8c:e8:b8:
         0d:a0:d4:40:c9:31:bb:a8:f4:af:99:37:7c:6e:9f:0b:b9:ee:
         d3:ad:05:a3:14:d1:58:60:05:f2:d7:4f:76:ab:97:89:d6:98:
         b5:c4:f8:fd:36:fd:bc:ff:0a:19:83:31:be:3d:06:a0:5c:fc:
         32:1e:1d:a2:93:32:52:7a:ae:c2:f0:7e:88:9e:f8:f1:9d:c0:
         31:5d:2a:2a:58:ed:f9:39:ea:58:c2:36:57:00:93:89:45:e6:
         f4:83:61:30:91:24:74:17:74:a2:c2:b3:1f:89:55:7f:63:bf:
         43:0e:10:15:bf:db:20:4f:ad:12:72:83:ca:94:2b:bc:a0:c9:
         25:47:30:3a:47:45:35:b3:ea:3c:54:aa:1e:ef:96:91:90:67:
         e6:87:02:af:b4:64:c1:c2:fb:83:ee:71:0a:1b:12:a1:d6:5c:
         ad:73:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:29:03 2025 by rpki-client