Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a663030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a663030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          I3bkyxPoOizedofCItmap4o35aEkCPOtD/LphcEIdMw=
Subject key identifier:   A5:B4:97:65:FF:91:4E:55:3D:6B:42:FF:AF:50:2D:56:DC:61:D4:B0
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       674DF9B6EB6AF2AD2D7683E2F074FF8F6FC11275
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a663030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:23:04 +0000
ROA not before:           Mon 09 Jun 2025 18:18:04 +0000
ROA not after:            Mon 08 Jun 2026 18:23:04 +0000
asID:                     272569
IP address blocks:        2804:8548:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 15:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4d:f9:b6:eb:6a:f2:ad:2d:76:83:e2:f0:74:ff:8f:6f:c1:12:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:18:04 2025 GMT
            Not After : Jun  8 18:23:04 2026 GMT
        Subject: CN=A5B49765FF914E553D6B42FFAF502D56DC61D4B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:68:6e:44:ed:bf:eb:4a:be:de:e0:8d:e9:
                    38:6f:5e:4a:e4:59:9e:6f:ac:0c:56:9d:05:b6:59:
                    ae:16:a9:f4:f9:14:86:57:ac:6e:e3:5d:a0:ce:ee:
                    47:fd:bc:df:52:7f:ba:ab:d8:0d:8e:8f:2f:43:a0:
                    46:f3:c1:76:15:3b:8f:c7:20:dc:4d:cb:d7:69:89:
                    e5:53:18:7d:9d:ea:ac:b7:64:0a:55:08:f7:6a:43:
                    07:73:c8:43:aa:9a:f5:3c:8a:67:02:40:8f:c5:89:
                    a8:13:5e:df:bc:5e:9c:49:1d:d0:13:60:e1:ca:e6:
                    b0:10:7b:e1:4b:ed:46:cf:e9:4d:f2:4c:63:4b:60:
                    99:4e:7a:a2:ad:25:4f:ab:11:22:a9:65:c0:c0:f8:
                    59:72:5e:c6:1d:0d:55:f2:09:ec:5a:80:94:29:78:
                    f1:2f:7a:6f:89:2c:21:9f:76:5a:5e:2a:61:b8:33:
                    5f:48:8e:50:69:d5:08:96:55:71:a7:43:ca:b5:7b:
                    bf:5a:cd:ac:8c:a9:b4:85:37:b6:30:42:27:0e:6d:
                    a6:75:b4:ac:a7:06:5d:3a:8c:d2:c2:c4:34:2c:29:
                    8d:5d:7b:32:a7:38:44:62:bd:96:e9:6d:4e:af:3c:
                    ac:5a:15:ac:8b:5e:3c:14:24:4c:77:cf:8e:0a:a9:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B4:97:65:FF:91:4E:55:3D:6B:42:FF:AF:50:2D:56:DC:61:D4:B0
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a663030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         32:75:b2:99:a3:9d:f9:b1:20:c2:ae:f0:1a:05:07:4c:50:5e:
         3d:67:d4:b9:49:3b:e2:c9:ff:21:60:b3:10:9c:fa:b4:0c:56:
         90:61:d3:81:19:2a:45:54:a1:43:f5:16:68:38:01:16:89:5e:
         e7:22:c1:6c:bc:ea:7b:8d:bf:94:79:ed:87:5a:18:b0:39:10:
         61:fe:98:6b:ae:04:a9:a6:a8:c3:8b:5d:3f:4e:1a:5e:5f:c0:
         42:10:4c:af:c3:76:f5:1d:07:48:50:e7:bc:ca:e9:71:e6:01:
         73:c9:c3:9b:97:12:48:ef:dd:6f:13:7d:f0:0d:cd:ea:1b:63:
         70:f3:73:6c:3c:13:48:1f:62:8c:c4:04:2b:80:3e:5d:15:f0:
         6e:6b:42:5d:b6:c1:6f:a4:72:8c:af:36:cb:ae:1b:46:0f:ea:
         09:82:8d:8c:eb:ad:d4:e0:30:e5:57:54:1c:8d:14:80:cc:86:
         77:e5:2d:67:cc:74:f5:d2:f2:d6:79:48:fa:8e:85:08:9e:40:
         78:2f:99:e6:b5:35:88:60:eb:26:2e:de:f5:b0:2e:af:7b:43:
         5f:1a:cd:31:1a:f0:b4:df:c1:b1:7a:af:87:7a:e3:de:38:2f:
         2c:16:f5:27:a0:7f:32:7d:80:ec:96:fa:83:e8:4a:0d:d3:ad:
         4a:05:1c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:30:50 2025 by rpki-client