Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          FKu1/LHFdeGkNFfGQEXm5aKR0Ls3fo4DoyE62NnRFys=
Subject key identifier:   89:1E:91:BF:46:94:D4:7C:A9:4B:F7:8B:E2:64:4F:55:AE:CB:E4:B2
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       4FBC40CA7F47F242A745025B6AC69369E54D239B
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:03 +0000
ROA not before:           Fri 16 May 2025 13:00:03 +0000
ROA not after:            Fri 15 May 2026 13:05:03 +0000
asID:                     268296
IP address blocks:        2804:4efc:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:bc:40:ca:7f:47:f2:42:a7:45:02:5b:6a:c6:93:69:e5:4d:23:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:03 2025 GMT
            Not After : May 15 13:05:03 2026 GMT
        Subject: CN=891E91BF4694D47CA94BF78BE2644F55AECBE4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:d4:19:28:60:37:7c:50:33:1e:4c:3b:1e:
                    37:63:56:a9:9f:05:9e:28:08:66:bf:6a:58:81:a2:
                    83:5b:3a:e7:de:c4:66:15:5c:17:c7:6b:24:6d:f7:
                    ee:43:fe:80:bb:86:e8:de:a9:7e:0c:2c:e7:56:61:
                    de:3d:07:e9:ba:30:5d:2f:0e:fc:74:46:67:d8:f2:
                    82:93:77:b6:6c:8c:4f:d5:11:93:74:88:7c:c0:1b:
                    02:dc:e3:3f:1c:41:67:00:c1:26:e8:82:08:99:bb:
                    cb:23:9c:62:7d:85:12:a3:7d:46:bd:70:a2:fa:57:
                    98:9a:d1:c0:44:15:a9:f3:1f:9a:f7:3e:17:f8:ca:
                    6b:a5:ee:0d:3f:b8:c2:55:39:bf:3e:3a:a0:e8:5d:
                    d8:64:c4:d1:ad:1c:d5:83:01:33:c7:db:79:cc:05:
                    53:11:bd:68:fa:42:b8:7c:41:1e:e2:7a:d2:05:ef:
                    07:b5:8f:99:36:ef:84:d8:6d:d2:2a:ed:02:8c:d4:
                    6d:f8:33:b2:fc:92:c5:a9:2d:e7:54:96:c2:07:25:
                    7c:c6:67:ed:01:01:0b:ac:4b:0d:f9:d1:8d:b7:11:
                    2e:59:d5:a8:a6:d6:36:83:bd:23:42:4f:8c:fa:8c:
                    61:13:c3:35:57:57:23:20:14:3e:0c:76:52:8a:dc:
                    cc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1E:91:BF:46:94:D4:7C:A9:4B:F7:8B:E2:64:4F:55:AE:CB:E4:B2
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a363030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2c:0a:f1:8c:68:d8:f4:aa:77:59:21:ca:26:a3:f9:dc:b5:2d:
         84:bf:4a:1d:00:52:a6:eb:f7:77:f5:d6:1b:1c:62:05:cc:7b:
         6f:f4:4c:89:71:13:29:ea:c7:b4:b2:8d:10:a9:bc:a3:53:b2:
         75:bb:80:01:36:d0:fd:48:8c:13:3d:27:b1:41:ee:15:1f:1a:
         38:5a:ad:61:c6:4a:00:9f:b9:2d:ad:26:54:83:b2:2d:2b:05:
         8c:cf:65:84:8d:c9:a2:6f:e3:4b:ab:5f:5f:aa:f1:ae:51:35:
         59:65:0b:ee:2e:41:39:a7:16:2f:5d:86:67:c2:63:11:74:ec:
         c6:a8:81:de:f1:08:69:bf:77:8f:8c:a2:9e:cd:67:44:bd:e2:
         96:ed:b5:41:de:85:c3:48:19:9f:8f:06:30:f7:55:42:69:da:
         5f:50:67:37:78:8b:2f:04:45:f9:0d:8d:54:d9:51:82:dc:53:
         c8:2d:4f:9c:5e:3c:af:4c:1f:f1:1b:17:d8:7b:17:cd:54:b0:
         c0:77:8a:04:95:d3:c5:88:9a:73:3e:27:8c:82:1a:87:c4:cd:
         8b:1b:f4:4f:2d:33:82:c5:d3:01:ee:37:48:e0:3e:c2:38:7e:
         a9:7f:b6:fb:d6:68:8d:5d:37:fe:64:af:bd:61:4f:8a:3d:31:
         5b:c5:ed:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:11:26 2025 by rpki-client