Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          yFxn8+5H4B7nDWt6Ae92XB5BCv3mj7N2n9YCAd44i2A=
Subject key identifier:   ED:6A:CD:AD:89:61:60:6D:EE:16:75:60:5E:28:36:F9:A4:F5:E0:B4
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       27BC5A007396F4694F6BC350955B2FE95242AC0A
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:02 +0000
ROA not before:           Fri 16 May 2025 13:00:02 +0000
ROA not after:            Fri 15 May 2026 13:05:02 +0000
asID:                     268296
IP address blocks:        2804:4efc:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bc:5a:00:73:96:f4:69:4f:6b:c3:50:95:5b:2f:e9:52:42:ac:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:02 2025 GMT
            Not After : May 15 13:05:02 2026 GMT
        Subject: CN=ED6ACDAD8961606DEE1675605E2836F9A4F5E0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b7:2f:9a:76:b8:25:ff:80:e0:de:f8:ec:1b:
                    a7:98:7a:ad:a3:c8:41:c0:69:39:94:ce:fe:c1:a6:
                    02:c3:11:89:76:93:c0:22:39:6f:1f:a6:ca:c4:43:
                    5f:59:ef:5b:24:93:8e:c6:15:53:67:6e:7e:c7:ce:
                    d6:c8:01:99:f3:d1:fb:60:00:2f:a6:3e:9e:9d:13:
                    51:b6:22:e6:69:c6:46:c9:4a:94:3b:e6:9b:d4:e8:
                    ae:34:e2:25:0f:94:79:35:bf:ea:36:4c:91:df:c1:
                    81:0a:c1:57:3a:c8:3b:85:7e:47:b0:5c:87:c0:00:
                    d9:69:98:17:7e:5f:01:5e:c9:b6:eb:fc:3e:1f:96:
                    ce:53:3f:6d:76:c3:e7:26:53:9d:88:cb:b6:44:d3:
                    4e:bc:45:01:1d:19:08:2b:63:f0:a6:88:e7:f6:5f:
                    86:86:96:c1:67:9d:30:b1:8d:f8:94:e2:12:7e:57:
                    92:63:61:37:54:44:de:c9:18:df:2e:0b:19:e8:1c:
                    25:12:bb:d0:12:18:95:f6:37:4e:df:6f:54:ca:4a:
                    fe:14:3a:ac:ac:bc:80:0d:32:b5:08:f3:f7:74:17:
                    f6:34:33:dd:b5:1b:f9:53:b7:47:2c:0d:f8:05:61:
                    1f:d3:5d:a1:2c:47:15:1d:9e:00:01:b8:8e:63:32:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6A:CD:AD:89:61:60:6D:EE:16:75:60:5E:28:36:F9:A4:F5:E0:B4
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a353030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         97:1d:5c:24:ea:ce:2b:04:84:ca:be:8d:4a:2e:c9:f8:30:c0:
         66:18:70:3e:08:46:53:08:b6:4a:79:24:19:ac:5a:99:a6:57:
         83:dd:26:64:2e:ce:5a:3c:15:1c:69:f1:32:4b:fe:fc:df:9b:
         0c:f6:d5:47:92:28:5f:81:d3:bb:91:ce:77:14:89:f8:f2:11:
         7b:7c:62:c1:83:27:e9:69:b5:a5:2b:1f:22:d1:51:2d:dc:6e:
         2a:7d:ff:dd:88:25:23:80:49:f3:e9:c5:92:bf:9a:3c:7f:02:
         a8:6d:91:e7:08:11:c9:8f:5f:e9:54:78:b6:68:bb:e4:0b:8f:
         8c:c7:22:12:f1:8c:6b:dd:47:d0:f0:ef:0c:b5:c4:18:df:61:
         04:08:06:c0:81:b7:f5:69:c7:59:1b:23:34:7f:f1:94:87:c1:
         da:e0:4d:33:b7:e6:73:05:27:e9:20:27:f6:4a:df:f6:ff:f5:
         6d:f4:13:aa:cf:fe:64:9e:15:36:dc:d2:7f:12:c4:eb:2c:19:
         ea:19:c9:5e:a0:4a:6f:94:2b:ec:93:36:36:d0:ab:43:e2:dc:
         4d:2b:48:9a:31:ff:b1:98:48:e9:fe:3a:7d:da:37:e8:31:09:
         af:3b:2f:fb:ed:fd:d7:40:a2:83:f7:a0:9e:65:e2:71:b6:02:
         c4:48:66:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:40 2025 by rpki-client