Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a343030303a3a2f33342d3334203d3e20323639313833.roa
File:                     323830343a363061633a343030303a3a2f33342d3334203d3e20323639313833.roa (raw, json)
Hash identifier:          83TLJPhOQmp1w7+G/UN08QdfXfoVj8n2e0hfAe+ecBI=
Subject key identifier:   AC:6C:AC:57:C4:95:69:31:EA:BE:CF:CE:53:04:2F:E5:B8:25:52:E6
Certificate issuer:       /CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
Certificate serial:       0EB91B85833405C787581B91A4F86E5C8686E805
Authority key identifier: 95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a343030303a3a2f33342d3334203d3e20323639313833.roa
Signing time:             Fri 02 May 2025 18:18:33 +0000
ROA not before:           Fri 02 May 2025 18:13:33 +0000
ROA not after:            Fri 01 May 2026 18:18:33 +0000
asID:                     269183
IP address blocks:        2804:60ac:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl
                          rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 16:38:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b9:1b:85:83:34:05:c7:87:58:1b:91:a4:f8:6e:5c:86:86:e8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Validity
            Not Before: May  2 18:13:33 2025 GMT
            Not After : May  1 18:18:33 2026 GMT
        Subject: CN=AC6CAC57C4956931EABECFCE53042FE5B82552E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:a1:d9:4a:50:71:57:65:d6:78:18:f0:f5:
                    5a:44:1b:c6:63:e4:5d:27:74:6d:2b:95:bc:bd:3a:
                    37:21:6a:b1:5b:d8:10:13:34:17:dc:f1:39:bd:7c:
                    d1:0e:18:b2:64:7c:01:96:91:df:d2:b5:97:ca:45:
                    ee:c8:9c:c1:0f:da:b5:1b:16:6c:23:8b:15:16:1a:
                    8e:ea:71:45:c4:af:ab:d0:c6:e6:63:3e:43:3f:1a:
                    e6:69:39:67:83:92:3d:f5:68:19:52:53:66:b9:2f:
                    ae:9b:94:c8:b8:3b:3f:76:87:92:6b:62:21:f9:03:
                    94:1d:8f:50:30:ff:bd:4d:9b:5e:01:50:ad:1a:28:
                    f8:d2:28:09:d2:76:2e:19:a8:fe:aa:66:50:ff:6a:
                    bf:c4:b2:f8:90:fe:ea:4c:99:2c:e6:be:3b:ff:0e:
                    98:cb:be:76:71:08:d8:93:1d:bf:7e:7b:82:78:a3:
                    e6:18:9d:47:99:3c:10:83:72:f5:74:52:d9:61:75:
                    53:03:a7:52:e5:fe:19:57:5b:24:5f:d2:1d:ba:c2:
                    96:08:97:0e:f7:71:a0:19:50:9a:38:d3:29:e3:11:
                    fd:75:27:62:59:aa:50:13:0e:a7:59:ca:5e:34:35:
                    69:78:14:33:6e:6f:85:4b:ab:6b:c0:6f:00:e6:58:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6C:AC:57:C4:95:69:31:EA:BE:CF:CE:53:04:2F:E5:B8:25:52:E6
            X509v3 Authority Key Identifier:
                keyid:95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/323830343a363061633a343030303a3a2f33342d3334203d3e20323639313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60ac:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         62:17:67:5a:fd:79:7d:8b:bd:77:84:87:9f:33:db:a2:d1:e1:
         6e:60:91:b0:42:db:0a:f7:7d:da:a4:06:38:ee:e3:20:8c:a3:
         ef:01:86:25:69:a4:12:22:e1:a3:3f:ba:ea:2b:b9:32:c0:c5:
         8c:b3:67:1a:bd:bb:1d:bf:ee:ef:4f:0a:82:f2:dd:45:9d:30:
         92:a7:45:24:ed:2e:b2:bc:2e:97:8c:91:68:2b:d6:4c:de:42:
         d6:8d:f6:f1:41:f2:c3:99:a3:ba:b0:6b:79:54:0b:cf:8b:e4:
         84:e8:99:7f:19:df:e6:3b:30:2b:f3:45:62:be:85:9c:a0:d4:
         08:59:27:23:44:c6:a1:60:19:02:f0:c1:ef:0d:0b:ae:92:83:
         ae:de:cb:df:32:49:87:4c:fb:63:ab:87:76:91:62:b3:c6:69:
         f5:3a:8e:b7:99:91:30:98:a1:77:5d:52:2b:9d:2f:ee:cd:16:
         5b:a3:66:c5:49:b0:2c:24:31:b6:65:a4:d8:0e:76:cc:fc:a3:
         00:2f:da:38:7d:20:85:90:ab:76:a4:36:7e:a6:39:41:a2:a0:
         f3:f2:b1:55:d5:d6:49:e9:44:9d:ad:91:db:64:51:3b:fb:40:
         38:30:77:49:c5:8e:c4:27:66:f0:62:90:e4:4f:61:7e:d3:04:
         fc:7c:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:33:04 2025 by rpki-client