Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a633030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a633030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          mmo9BTYDNzv9VwpWkYKMgJpF6nOto6mAxiLJ2ZES/oI=
Subject key identifier:   EE:35:91:CD:48:EF:F4:80:A6:5B:79:B1:CD:DF:EB:59:76:14:E2:56
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       7629F95EC5851224129DBDABD5F501534B0EDFFA
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a633030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:19:56 +0000
ROA not before:           Mon 09 Jun 2025 18:14:56 +0000
ROA not after:            Mon 08 Jun 2026 18:19:56 +0000
asID:                     272569
IP address blocks:        2804:8548:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 21:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:29:f9:5e:c5:85:12:24:12:9d:bd:ab:d5:f5:01:53:4b:0e:df:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:14:56 2025 GMT
            Not After : Jun  8 18:19:56 2026 GMT
        Subject: CN=EE3591CD48EFF480A65B79B1CDDFEB597614E256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:fa:68:f1:4d:af:bf:57:05:cc:14:3a:22:
                    44:8d:4f:1a:66:d9:50:59:19:2c:37:21:32:82:fc:
                    61:25:f4:50:7a:98:a2:8f:da:0a:f2:6c:4d:ba:90:
                    17:38:25:ba:05:04:9a:7d:e6:4c:9f:dd:ec:2c:7d:
                    bd:be:3c:91:cc:d1:c9:3c:ce:e9:b8:82:5d:3c:65:
                    76:00:9b:a5:1b:02:20:12:c6:17:0d:b1:58:cd:32:
                    ec:e6:96:cb:38:0e:ee:ef:43:30:63:df:f8:11:33:
                    c4:78:6c:f3:6a:1f:3b:dc:fa:e2:86:2e:6f:29:29:
                    9b:c9:90:62:46:cd:a3:f9:76:c3:b3:d4:cf:25:ec:
                    81:77:c5:82:cb:d9:38:a1:10:9c:91:a9:28:13:1f:
                    ae:11:03:46:58:79:05:b6:18:79:f7:0a:a1:3b:48:
                    2d:d4:c9:0c:76:30:30:f3:91:42:55:f3:57:38:d0:
                    4d:59:82:ae:d6:73:55:18:31:41:5a:3b:76:44:64:
                    5f:fe:c3:01:f3:ce:df:b7:85:fc:0f:84:e5:05:4f:
                    7a:ca:f3:95:d1:89:8f:33:1a:15:28:0f:5f:c2:61:
                    3f:f6:64:59:94:ee:aa:59:40:d1:11:09:83:0c:57:
                    92:b1:4f:81:c9:c3:32:28:fa:43:5f:8c:b0:7e:4a:
                    c6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:35:91:CD:48:EF:F4:80:A6:5B:79:B1:CD:DF:EB:59:76:14:E2:56
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a633030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         65:43:6f:ea:b7:8d:4b:0c:eb:88:40:57:09:a8:0a:37:e4:08:
         d1:91:7c:48:80:49:f9:60:fc:ba:d1:20:5d:26:b9:48:59:c0:
         ad:90:69:d7:c7:1e:0b:97:0f:36:06:3c:0c:d1:d5:84:47:97:
         b2:69:97:15:03:50:4c:91:62:14:ff:25:84:48:1c:01:95:f4:
         ae:89:a5:37:cf:ad:47:bb:62:93:1b:2d:dd:ac:d6:ca:b1:38:
         ff:8c:5c:c1:40:56:e2:c1:14:fb:ad:74:df:fa:81:4e:38:76:
         08:06:f3:33:b5:f8:40:69:be:b8:87:21:70:4e:69:38:1b:75:
         be:0b:03:4f:78:fa:89:14:38:dc:18:31:95:b2:97:52:dd:d7:
         94:be:c6:09:59:b2:32:a9:2c:e3:3d:46:12:58:24:81:30:a6:
         26:c7:82:03:cb:82:25:24:34:21:69:bd:7e:bb:26:51:85:23:
         97:3f:dc:23:21:ca:f9:11:c4:03:2e:fb:11:3d:9c:59:1b:92:
         39:a0:17:1a:fd:05:b4:77:cd:58:ac:ef:ef:55:ac:c6:3d:6c:
         eb:5c:63:7a:9c:f7:25:84:28:fe:35:7b:a5:e3:d1:49:9e:c4:
         06:1d:88:5f:c9:fc:eb:9e:71:2b:b8:51:84:77:c6:27:61:df:
         ea:89:4b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:38:24 2025 by rpki-client