Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          Sn34udtGTrYd/6715/aVe34kEtPkjC/wqCYyGobg7MI=
Subject key identifier:   49:7F:22:BB:E1:59:CF:7F:62:2D:76:EB:66:15:AA:C8:A4:07:E3:DA
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       3F7E48CE86C87D6E7299FD5BDDCDEE77F1F34808
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:04 +0000
ROA not before:           Fri 16 May 2025 13:00:04 +0000
ROA not after:            Fri 15 May 2026 13:05:04 +0000
asID:                     268296
IP address blocks:        2804:4efc:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7e:48:ce:86:c8:7d:6e:72:99:fd:5b:dd:cd:ee:77:f1:f3:48:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:04 2025 GMT
            Not After : May 15 13:05:04 2026 GMT
        Subject: CN=497F22BBE159CF7F622D76EB6615AAC8A407E3DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:70:e1:6d:66:fb:81:62:f2:6c:d6:51:f5:
                    fd:a1:14:95:c3:d5:07:ae:68:cc:29:8b:6c:d7:4a:
                    25:3b:e6:b4:0d:30:60:df:e4:0c:ca:70:1b:8b:fd:
                    7e:f9:55:9a:50:84:27:01:58:1e:9b:54:2c:da:02:
                    c5:49:43:c2:24:97:4b:25:e8:ca:d5:52:a5:e6:e4:
                    ff:dc:bf:0a:72:8f:c5:a2:3c:71:af:9d:10:9d:52:
                    9f:d6:bd:88:ac:5d:3b:cd:7a:e5:cc:f1:ab:6f:97:
                    96:e1:c8:ed:1e:45:f3:ad:11:7c:a6:af:e1:24:9f:
                    8f:f9:ce:d6:91:6e:ff:14:a9:da:7a:5c:d9:a9:c5:
                    3a:4e:a7:c1:70:25:61:c1:02:5b:71:d8:b5:11:9b:
                    bb:95:7b:ec:77:99:6f:04:ef:ed:2f:58:16:c9:ec:
                    59:39:56:9f:85:89:51:03:f7:ec:c9:ac:2c:a3:07:
                    dd:4e:ae:09:74:a8:39:16:ff:06:14:7b:f1:33:76:
                    5f:58:b9:43:60:d2:8e:7a:19:73:83:4a:5c:ae:ef:
                    fa:3d:18:cb:84:99:2a:b6:01:b7:e4:01:f7:77:7c:
                    1a:09:42:3a:26:80:a1:9f:38:e9:59:7b:6f:3d:81:
                    a0:37:f2:c3:53:05:1b:7b:2e:6a:7c:1a:3e:94:7a:
                    fd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:7F:22:BB:E1:59:CF:7F:62:2D:76:EB:66:15:AA:C8:A4:07:E3:DA
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a323030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c0:2f:a7:00:21:18:e2:ac:e2:6b:18:11:7b:ff:f0:a9:40:2a:
         9d:4a:f7:27:47:7a:c1:6c:2f:b3:18:30:56:29:d5:bd:25:71:
         d2:3d:3b:19:0f:4c:86:27:a2:ce:32:93:70:99:a8:8e:37:f7:
         55:1d:f7:b9:58:d1:2d:97:5a:2d:85:12:a4:ca:41:b6:6a:fe:
         fa:33:90:b6:78:ae:b4:2c:bd:35:bb:fe:50:e5:f8:0b:cc:df:
         6f:c7:8a:e0:78:84:b6:72:21:10:46:8c:6c:61:f4:1f:5a:0e:
         92:6a:a2:1f:9c:06:f7:15:02:2d:e5:10:32:ee:2a:82:dc:c1:
         f6:2e:93:6b:ae:8f:2e:5f:ac:ea:cf:b6:ab:d2:fc:33:b0:fb:
         06:db:6a:1d:fe:a5:0c:f9:dd:79:2d:1b:17:7d:1b:1f:b1:32:
         ed:65:63:92:42:36:a8:7b:44:a2:10:20:44:ba:3f:a9:07:51:
         28:36:9a:3e:0b:77:70:93:ce:a0:d5:07:b9:0d:c7:af:c5:f5:
         37:64:cf:15:a7:00:b0:46:c5:20:71:6a:4d:ef:69:fa:c5:fd:
         df:b8:ba:6a:c7:1a:c4:36:8f:62:1b:64:a5:e0:39:1e:97:39:
         20:6c:5d:48:d6:01:71:87:99:98:47:f9:96:a1:73:09:ab:d1:
         7e:98:3c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:37:46 2025 by rpki-client