Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          UIBd1PAXTIPISOuHZWbBhdHv7w0rksW5yvW2tcTbtqg=
Subject key identifier:   6D:62:03:94:E0:27:C1:34:B9:FB:C9:A6:5D:C1:6D:90:7D:DF:4E:13
Certificate issuer:       /CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
Certificate serial:       116AD703332B9DC3BAB7755D041BCB8B58F2E10F
Authority key identifier: BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Fri 16 May 2025 13:17:48 +0000
ROA not before:           Fri 16 May 2025 13:12:48 +0000
ROA not after:            Fri 15 May 2026 13:17:48 +0000
asID:                     270760
IP address blocks:        2804:70fc:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:6a:d7:03:33:2b:9d:c3:ba:b7:75:5d:04:1b:cb:8b:58:f2:e1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
        Validity
            Not Before: May 16 13:12:48 2025 GMT
            Not After : May 15 13:17:48 2026 GMT
        Subject: CN=6D620394E027C134B9FBC9A65DC16D907DDF4E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:7b:d0:9e:8f:b4:a0:14:fe:61:18:49:91:5f:
                    12:8a:31:9a:8a:5f:75:62:07:42:e6:71:c1:d0:90:
                    a9:e6:62:b3:fc:73:d7:e9:39:39:64:98:14:cd:62:
                    6c:f6:cb:e4:98:c1:ad:43:cd:59:2e:53:b6:00:fc:
                    fd:57:28:8d:e7:07:ff:32:7c:85:99:42:4b:41:d6:
                    f5:43:81:d6:cb:20:d9:73:19:b5:fb:d8:6d:ad:0d:
                    01:e8:5b:63:62:d1:88:16:c8:6d:ab:39:8e:95:49:
                    2c:45:22:2c:80:2a:44:03:41:f6:1f:e4:65:36:f7:
                    64:ee:0f:58:3a:8c:0c:86:ed:f2:bf:44:9d:10:9d:
                    c4:8a:55:16:65:b2:c8:bd:75:10:c5:a6:bc:e3:0a:
                    fc:9e:44:52:d4:fb:38:eb:69:9b:16:b7:fe:fa:31:
                    8a:fa:d3:ce:d1:ae:14:e3:75:c3:5e:d4:dd:4a:bb:
                    df:e8:2d:3f:f9:c1:c1:cc:eb:ab:06:48:d9:ba:7e:
                    85:aa:3c:ef:08:d8:69:c9:a9:68:ce:5d:69:92:fa:
                    45:26:e6:4c:cd:af:2d:d5:0c:d5:ff:b0:85:2b:f4:
                    ee:5c:38:95:28:a9:73:db:ef:4e:0a:41:17:20:47:
                    66:b4:ef:fe:b9:01:e0:cf:16:c7:33:60:a4:da:fe:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:62:03:94:E0:27:C1:34:B9:FB:C9:A6:5D:C1:6D:90:7D:DF:4E:13
            X509v3 Authority Key Identifier:
                keyid:BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a343030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:11:df:09:53:19:02:2f:56:71:e6:b6:d3:39:95:43:37:
         d2:0e:5b:0e:eb:c3:18:94:8c:7a:f4:39:c1:68:be:4d:05:64:
         dc:b6:cd:9a:f1:88:74:14:ba:55:44:4f:cc:c6:29:94:ca:cd:
         82:d3:ba:02:b5:8e:f3:1a:da:30:f3:23:88:a6:d7:60:c2:42:
         54:cd:c4:40:1e:4c:a0:c4:cf:2e:7c:62:fb:25:30:f5:f8:49:
         ea:ae:7f:48:38:26:e0:97:7d:92:52:3f:52:0d:2b:49:9a:6b:
         02:71:1d:20:fa:48:23:d1:90:3c:c4:a7:ce:9f:70:24:10:f8:
         9c:20:a7:85:a6:7f:1b:38:b8:c6:1c:b5:b0:36:4e:0c:e3:4c:
         c3:0d:92:5e:37:a7:0d:06:46:2f:45:aa:97:0c:09:d0:1c:4c:
         c5:cf:9f:14:28:ea:10:b9:ef:39:22:c7:e7:ae:4d:6e:a8:f3:
         26:43:63:10:de:30:d5:17:a7:12:e9:50:b6:b9:f4:a2:08:ba:
         a3:56:98:32:64:35:25:09:4c:23:4a:bb:a5:3b:89:c3:90:ba:
         0c:9c:77:63:a9:23:11:34:bb:35:e5:01:1c:7b:29:d0:77:e3:
         20:fc:41:9c:b8:79:4d:a8:6b:bf:54:6f:68:2b:a2:ff:67:7d:
         07:78:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:10:12 2025 by rpki-client