Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a313030303a3a2f34302d3430203d3e20323633393334.roa
File:                     323830343a323830303a313030303a3a2f34302d3430203d3e20323633393334.roa (raw, json)
Hash identifier:          jL0OstnXXt2WH/MGwH/0Taox+MhHeteJ3T87ou+l7qw=
Subject key identifier:   EB:FA:C9:55:15:EA:C6:57:92:AD:1E:2C:85:97:DC:B9:60:40:F7:91
Certificate issuer:       /CN=40E949830CC8643940DE6930F8D9D7E92FFA9152
Certificate serial:       087E6B4DDD5352B76B4C9851AF7FB098C06DC770
Authority key identifier: 40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a313030303a3a2f34302d3430203d3e20323633393334.roa
Signing time:             Wed 04 Jun 2025 15:46:51 +0000
ROA not before:           Wed 04 Jun 2025 15:41:51 +0000
ROA not after:            Wed 03 Jun 2026 15:46:51 +0000
asID:                     263934
IP address blocks:        2804:2800:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.crl
                          rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Jun 2025 13:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7e:6b:4d:dd:53:52:b7:6b:4c:98:51:af:7f:b0:98:c0:6d:c7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40E949830CC8643940DE6930F8D9D7E92FFA9152
        Validity
            Not Before: Jun  4 15:41:51 2025 GMT
            Not After : Jun  3 15:46:51 2026 GMT
        Subject: CN=EBFAC95515EAC65792AD1E2C8597DCB96040F791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:8c:d7:65:c4:41:4c:af:be:28:8b:75:79:
                    55:92:88:33:2f:a4:03:f4:5d:37:97:88:fb:38:c6:
                    8c:19:2d:ad:90:05:6d:0d:ba:88:fe:43:40:c6:16:
                    8f:0c:f9:80:5b:ec:11:08:d0:46:25:f3:37:c2:d8:
                    01:11:62:6d:4e:4d:44:ab:3e:65:e0:a6:11:f8:76:
                    f1:27:0b:ee:dc:5f:db:2f:0d:17:43:52:b7:76:41:
                    03:7f:13:0c:c9:9d:bd:79:70:1a:39:7f:e5:95:31:
                    2c:b9:45:22:9c:a3:d0:1e:91:8d:f9:15:52:f3:7c:
                    80:5a:93:f0:45:4e:d0:d9:5b:2b:e8:f7:d8:0d:2e:
                    e6:83:0a:80:90:b8:aa:38:69:d3:61:73:b2:80:c7:
                    6f:b3:d8:bc:2b:e5:1a:30:b7:9e:99:01:56:5f:af:
                    10:59:7e:27:91:2f:86:f0:3f:59:69:3a:4a:d1:52:
                    0e:2a:6a:cf:bc:44:49:40:25:27:a7:cc:34:09:42:
                    2e:7d:3f:e6:f9:ab:9c:94:a1:a5:77:f5:f9:f7:c1:
                    08:7f:8b:93:2f:cc:55:6e:56:d8:ce:0e:12:6f:05:
                    f2:8c:31:11:48:e1:21:fd:ef:18:a1:89:c8:7a:07:
                    5f:23:ce:fc:0a:d8:25:94:61:a5:30:5e:35:b1:9c:
                    53:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FA:C9:55:15:EA:C6:57:92:AD:1E:2C:85:97:DC:B9:60:40:F7:91
            X509v3 Authority Key Identifier:
                keyid:40:E9:49:83:0C:C8:64:39:40:DE:69:30:F8:D9:D7:E9:2F:FA:91:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/40E949830CC8643940DE6930F8D9D7E92FFA9152.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40E949830CC8643940DE6930F8D9D7E92FFA9152.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/323830343a323830303a313030303a3a2f34302d3430203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2800:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:55:5c:1a:63:d9:f1:38:26:08:15:c1:2f:d4:92:d5:2a:8a:
         6d:9b:a8:9d:f3:08:8f:32:d6:6c:dc:40:1d:98:85:7c:3f:15:
         42:fb:c8:d6:d0:c9:45:67:e9:50:ee:ee:75:61:79:24:78:3a:
         da:05:41:cd:9c:6e:a4:fd:22:f1:1b:2f:0e:07:6a:01:cb:5c:
         0d:aa:3d:f4:08:9d:c7:cf:ec:ed:30:45:00:c5:ca:97:25:67:
         e1:7e:e7:46:74:7e:65:43:bf:77:85:6b:d0:55:68:bd:3b:4f:
         c7:07:76:48:df:b4:ff:2f:03:60:9b:24:c2:95:30:1b:4c:af:
         36:6d:8b:01:d0:8a:39:55:d5:0d:16:af:51:6f:46:37:75:f1:
         45:b5:06:4c:23:ca:2a:db:c8:6b:e8:d3:12:01:14:08:fd:76:
         f7:2b:28:9e:34:b1:a8:94:32:89:39:b5:6a:cd:1d:bd:5f:fa:
         23:94:5f:b9:95:38:b1:f4:7c:a5:5b:a1:9a:2d:1b:46:67:25:
         8e:c8:35:9d:30:52:96:24:00:15:7a:1a:ce:2b:b2:ea:0d:78:
         a8:10:4a:46:c8:63:9b:bb:8d:48:2e:d1:29:70:8a:5b:87:d2:
         b0:c4:a1:c6:a7:a0:b5:2b:95:9c:6b:93:d8:22:c1:50:8a:a3:
         f1:ab:69:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:49:31 2025 by rpki-client