Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a393030303a3a2f33362d3336203d3e20323730373630.roa
File:                     323830343a373066633a393030303a3a2f33362d3336203d3e20323730373630.roa (raw, json)
Hash identifier:          ztGJgWnt/brzbmiU2qVPIHznbzfBLrcysREQWRuxYYQ=
Subject key identifier:   A5:2E:B6:11:A6:F6:E8:8C:7B:00:AA:65:9C:2E:A6:DD:B5:80:B6:6D
Certificate issuer:       /CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
Certificate serial:       70DFB929386F344B717048B55C6C7722D44598A6
Authority key identifier: BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a393030303a3a2f33362d3336203d3e20323730373630.roa
Signing time:             Fri 16 May 2025 13:17:49 +0000
ROA not before:           Fri 16 May 2025 13:12:49 +0000
ROA not after:            Fri 15 May 2026 13:17:49 +0000
asID:                     270760
IP address blocks:        2804:70fc:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl
                          rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:df:b9:29:38:6f:34:4b:71:70:48:b5:5c:6c:77:22:d4:45:98:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF984AA7B5F31ECB2ECE2B568883C09865443CB
        Validity
            Not Before: May 16 13:12:49 2025 GMT
            Not After : May 15 13:17:49 2026 GMT
        Subject: CN=A52EB611A6F6E88C7B00AA659C2EA6DDB580B66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:b6:f3:7a:c6:7d:62:ba:bc:f6:a4:60:3c:
                    0d:7f:39:ca:51:6e:02:7e:bd:a8:00:d0:f9:10:a5:
                    aa:a1:e3:d3:67:17:d2:1b:23:62:a3:58:83:3a:56:
                    fd:4f:b7:83:2d:9c:c9:81:81:01:9e:5e:ef:24:ad:
                    fc:d7:64:75:aa:3f:37:97:36:dd:42:3a:f8:ee:c6:
                    d4:63:21:65:f8:d5:9c:13:a5:ee:72:55:b0:8d:ac:
                    12:b1:15:18:79:8c:b5:46:7a:16:72:0d:1a:12:12:
                    9f:13:2c:dc:ec:bb:8a:bb:2b:c8:33:3c:52:56:bb:
                    78:56:cc:d9:1e:fb:01:eb:72:90:63:ff:d0:ba:cf:
                    5c:ab:ff:c8:9d:25:c2:29:57:53:50:b6:0a:d3:36:
                    23:51:c6:6b:e1:1d:95:81:f3:6e:97:3a:52:60:74:
                    c7:a3:5b:07:8f:aa:9f:86:a1:07:18:55:ce:93:6a:
                    91:b9:9b:06:cb:dd:44:5d:03:6c:89:5b:27:8a:e6:
                    92:2a:42:e0:c5:6d:2c:e5:8e:2c:6d:00:6c:92:5a:
                    62:60:e0:e6:4f:15:8e:c0:5c:84:39:dd:0f:03:46:
                    a6:65:c9:e3:81:c2:d0:45:e0:6a:5e:78:83:4e:21:
                    66:a0:82:21:73:03:01:f3:0f:a8:1e:c5:61:f4:b5:
                    71:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2E:B6:11:A6:F6:E8:8C:7B:00:AA:65:9C:2E:A6:DD:B5:80:B6:6D
            X509v3 Authority Key Identifier:
                keyid:BD:F9:84:AA:7B:5F:31:EC:B2:EC:E2:B5:68:88:3C:09:86:54:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF984AA7B5F31ECB2ECE2B568883C09865443CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/323830343a373066633a393030303a3a2f33362d3336203d3e20323730373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70fc:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         27:40:4b:85:7d:cc:e5:fe:b3:98:64:b6:a6:c0:bd:03:51:c6:
         18:e8:b2:b1:d3:d7:6a:7b:7b:3c:92:c0:bf:c8:43:d6:4d:19:
         32:ff:ec:e5:ca:d9:d5:b4:6e:cb:e5:03:39:d1:29:35:87:78:
         b8:f1:79:8d:58:dd:0b:d0:96:c1:42:76:be:27:4b:47:cb:e4:
         21:5c:ed:49:7e:b1:b5:d7:a5:62:2d:f6:e1:69:36:2d:ac:00:
         03:b5:cf:e4:da:7d:cb:c3:41:26:e6:54:b3:2b:54:52:18:35:
         d4:2a:72:9c:af:c9:50:c1:e9:8f:14:a2:05:87:fc:63:5a:44:
         04:dc:a6:8d:16:69:9e:b3:9f:c9:87:c0:6c:8e:5e:6c:24:f7:
         ca:86:40:7c:44:3a:0b:92:e6:a1:31:16:53:11:3b:c4:93:56:
         4f:e7:30:80:2a:d6:69:f8:4f:0c:b1:a4:29:96:59:2a:a9:3b:
         ec:0c:82:5b:ca:3c:cb:62:5f:bd:49:30:e2:5d:27:03:94:8f:
         bd:f1:d8:80:23:50:85:99:c0:9a:80:74:aa:17:e2:0a:c4:26:
         76:11:c0:ae:25:f9:67:a4:43:46:04:e5:07:f7:f1:12:95:a6:
         cc:e0:c3:30:ec:f7:20:0c:39:cc:01:cb:a4:2d:c8:6d:e8:d0:
         09:68:82:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:51:39 2025 by rpki-client