Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/323830343a393230383a383030303a3a2f33332d3438203d3e20323734363835.roa
File:                     323830343a393230383a383030303a3a2f33332d3438203d3e20323734363835.roa (raw, json)
Hash identifier:          jw7Amp+5GDpey8fpiTBa0rj3KVf8nKoptUqC470BME4=
Subject key identifier:   08:99:2D:22:29:E9:A6:F6:2A:4A:E5:A2:6F:2C:94:76:08:9B:E4:CA
Certificate issuer:       /CN=E9B8002BDBCBE0F1E3D38E8321C5A28564934F05
Certificate serial:       7F328F4C64067792B7E76E7888D54904B96FA409
Authority key identifier: E9:B8:00:2B:DB:CB:E0:F1:E3:D3:8E:83:21:C5:A2:85:64:93:4F:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/323830343a393230383a383030303a3a2f33332d3438203d3e20323734363835.roa
Signing time:             Fri 27 Jun 2025 21:41:39 +0000
ROA not before:           Fri 27 Jun 2025 21:36:39 +0000
ROA not after:            Fri 26 Jun 2026 21:41:39 +0000
asID:                     274685
IP address blocks:        2804:9208:8000::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.crl
                          rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 00:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:32:8f:4c:64:06:77:92:b7:e7:6e:78:88:d5:49:04:b9:6f:a4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9B8002BDBCBE0F1E3D38E8321C5A28564934F05
        Validity
            Not Before: Jun 27 21:36:39 2025 GMT
            Not After : Jun 26 21:41:39 2026 GMT
        Subject: CN=08992D2229E9A6F62A4AE5A26F2C9476089BE4CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:8e:d1:8d:45:52:fd:5d:51:c0:06:07:14:
                    72:60:e9:20:82:eb:1d:93:60:4c:2a:2f:6e:a1:29:
                    40:f0:ed:69:a8:b5:ec:d2:4c:ec:89:0b:8a:7d:06:
                    54:38:33:08:ae:65:ad:3f:dd:82:6a:23:d5:d6:6c:
                    0d:8e:37:c1:dc:47:59:c8:8e:8c:66:e2:3e:83:4e:
                    6b:1c:06:ee:20:97:98:4b:c4:b4:02:6c:dc:ad:c1:
                    a7:00:04:3d:45:23:cc:36:e9:9c:70:ba:23:7f:99:
                    aa:3c:0d:bb:a7:5c:15:aa:33:da:e4:c4:5c:5c:aa:
                    92:16:45:18:b1:69:f8:07:28:35:1b:05:12:86:2b:
                    b1:f7:ac:59:99:c9:ec:fc:e0:eb:39:75:bd:94:ce:
                    71:75:d3:e4:02:2d:17:67:e6:36:65:1e:42:b6:79:
                    76:fb:71:c5:39:09:99:5b:a0:9b:45:35:cb:8a:fb:
                    e7:07:98:da:11:1f:8b:13:3b:dd:34:25:da:f6:ec:
                    77:b3:1f:2c:6b:dd:3e:22:bf:17:02:12:85:bb:5b:
                    33:fc:bf:2e:9a:76:71:97:17:16:d5:d3:50:e3:22:
                    3b:25:c6:bf:1e:50:e4:1f:47:44:0e:7e:e6:91:dc:
                    b5:2b:eb:5c:f5:85:33:58:57:7d:08:ab:c8:02:a0:
                    79:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:99:2D:22:29:E9:A6:F6:2A:4A:E5:A2:6F:2C:94:76:08:9B:E4:CA
            X509v3 Authority Key Identifier:
                keyid:E9:B8:00:2B:DB:CB:E0:F1:E3:D3:8E:83:21:C5:A2:85:64:93:4F:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9B8002BDBCBE0F1E3D38E8321C5A28564934F05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbDwYiAqnTZ53cTtb6hDftuBBqCbizfLK2N4MbTFDTB5/0/323830343a393230383a383030303a3a2f33332d3438203d3e20323734363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9208:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         89:72:b3:ac:28:51:aa:09:3d:0e:0c:8c:40:76:5d:de:fc:ff:
         d9:d0:0a:d7:ff:9a:da:6a:07:d3:4d:ab:01:cd:49:26:f6:c8:
         53:a2:17:f6:82:77:4d:15:3e:22:e0:f7:d0:0b:ca:a5:d5:c9:
         fb:21:c7:eb:7e:06:1f:bc:45:b2:b6:12:29:88:06:40:d5:d0:
         7d:d5:65:84:1f:d8:ac:a0:8c:2f:bd:f6:47:36:3a:40:e0:72:
         8a:0b:74:7f:91:da:1c:9c:9f:84:4b:df:4f:1d:0b:62:37:34:
         cb:98:62:18:dc:cd:e0:6f:96:b1:c6:e4:f8:23:cb:80:eb:6c:
         87:bc:8a:cf:a8:76:3f:ad:1f:65:a8:b0:26:09:b7:ff:23:df:
         39:4b:1e:65:f7:9f:52:88:d6:35:44:e6:ad:d2:43:63:64:fe:
         d7:19:6f:a9:c8:d6:f0:ca:41:9a:09:91:7f:66:68:46:a0:00:
         db:14:a5:a0:71:15:dc:c9:2b:17:9c:b3:1c:62:45:87:e7:6a:
         56:5b:81:9b:8b:19:51:1e:db:f6:f0:41:23:90:30:2a:7f:b8:
         47:87:21:04:64:5c:19:e2:6c:c8:ac:5a:47:cd:b1:da:37:b4:
         89:2b:68:94:53:04:39:ed:5b:4a:a2:7c:4a:f9:44:07:d7:cf:
         70:62:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:03:45 2025 by rpki-client