Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a613030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a613030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          uj7qNhT0DubV+QH6Q+Oj2HXz2R7iv/34NMKmg+UwPsU=
Subject key identifier:   B6:98:4E:19:33:C6:B6:ED:02:38:31:96:11:42:B5:2B:F7:83:5F:42
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       0AE70B6D7FC1A40F1581B466D9CF84058BE72705
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a613030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:18:00 +0000
ROA not before:           Mon 09 Jun 2025 18:13:00 +0000
ROA not after:            Mon 08 Jun 2026 18:18:00 +0000
asID:                     272569
IP address blocks:        2804:8548:a000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 22:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e7:0b:6d:7f:c1:a4:0f:15:81:b4:66:d9:cf:84:05:8b:e7:27:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:13:00 2025 GMT
            Not After : Jun  8 18:18:00 2026 GMT
        Subject: CN=B6984E1933C6B6ED023831961142B52BF7835F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:8a:bb:ce:fc:1f:e7:fc:b0:7a:60:5e:27:
                    0f:c1:f6:d2:af:00:59:24:6e:7a:e8:6d:b8:b8:73:
                    f2:4e:c4:1d:94:5d:fa:f5:dd:17:fb:ed:7e:b5:e0:
                    42:5c:16:e6:ce:8a:49:e1:f7:c3:2d:63:a7:6f:42:
                    64:02:4f:df:fa:f5:7a:e7:d7:16:79:0c:2c:d1:b9:
                    e9:96:f0:ea:bd:c6:6d:b0:12:25:6f:ff:a3:74:09:
                    79:e1:04:eb:ed:2c:20:f8:1d:b7:83:b9:89:d2:0b:
                    f0:db:c0:1f:c9:06:4f:14:57:3d:0f:18:84:d0:d1:
                    1e:31:c9:23:5d:f0:c5:de:07:c3:88:2f:eb:62:00:
                    cf:37:ff:49:6e:e5:40:df:39:a5:f6:ca:8b:02:29:
                    2b:c3:e9:c0:09:f8:ec:d2:c0:90:73:ab:47:36:69:
                    72:f3:44:b6:1c:ff:86:14:cb:41:25:26:69:ca:0a:
                    48:10:7a:7c:bc:30:c0:c4:27:f7:fd:01:8d:54:9e:
                    f5:c8:6d:bb:77:58:ec:70:31:a6:dc:7a:bd:2b:d4:
                    32:c3:03:a7:ca:80:37:d0:e1:3b:92:9a:fb:b1:3b:
                    3d:b7:e0:b7:75:e4:56:d2:c7:36:fb:b5:2a:ca:74:
                    4f:ce:72:e9:2e:60:49:db:e5:1e:82:b3:02:82:df:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:98:4E:19:33:C6:B6:ED:02:38:31:96:11:42:B5:2B:F7:83:5F:42
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a613030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:84:72:d9:e6:19:27:d0:8e:c2:f3:bf:c1:bd:e0:07:5e:
         ad:45:51:18:1f:c2:4e:96:3d:a9:b4:89:a7:0b:e1:09:b0:5b:
         4b:74:f9:68:b6:24:ae:c3:d8:b1:92:ba:4a:2c:40:54:6c:b5:
         86:e8:57:d9:88:4a:92:62:a1:b8:25:98:ef:e4:82:b7:0d:08:
         b5:c9:25:9a:cd:d5:60:4b:43:44:17:b1:cd:fc:26:22:2f:f1:
         b1:dd:ac:9f:cd:b7:37:08:8d:68:2c:d0:31:ea:0c:af:61:50:
         c5:6e:b9:15:a0:3e:fa:0f:bf:3d:46:6c:58:1a:8a:73:3e:20:
         12:b2:55:40:1f:5d:33:c4:d3:8e:8c:e4:c7:60:ae:51:a0:57:
         c5:48:e2:f7:91:b4:e4:53:f0:b9:c0:fe:79:a1:f8:fb:82:b4:
         32:ba:20:1c:42:76:1b:83:bc:cf:11:21:41:d4:ae:6c:45:8f:
         00:cd:4f:59:54:bd:71:70:9d:82:5b:79:a7:4f:89:65:79:52:
         ca:1c:04:de:cd:6e:87:4f:5d:1d:d8:1b:53:5a:4f:8a:dc:81:
         51:0b:ff:6e:ef:db:fe:68:a7:98:72:73:a2:aa:90:bc:73:90:
         9b:f6:0e:a6:c4:2f:c1:07:0c:7f:e3:f5:43:9d:ce:bf:d3:74:
         86:79:c6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:26:31 2025 by rpki-client