Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a6533343a3a2f33322d313238203d3e203631383839.roa
File:                     323830343a6533343a3a2f33322d313238203d3e203631383839.roa (raw, json)
Hash identifier:          HYEvMJRjG5QXDDwsBWHNgE5Mg3D5Fvs4XyqLfXohRnQ=
Subject key identifier:   35:EE:33:F3:7C:54:44:C0:57:34:6B:A6:28:72:FE:D5:55:89:CC:15
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       77A9EFCCC591B1027B4F608423818C53B9CC9BEE
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a6533343a3a2f33322d313238203d3e203631383839.roa
Signing time:             Tue 13 May 2025 17:07:04 +0000
ROA not before:           Tue 13 May 2025 17:02:04 +0000
ROA not after:            Tue 12 May 2026 17:07:04 +0000
asID:                     61889
IP address blocks:        2804:e34::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 21:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a9:ef:cc:c5:91:b1:02:7b:4f:60:84:23:81:8c:53:b9:cc:9b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: May 13 17:02:04 2025 GMT
            Not After : May 12 17:07:04 2026 GMT
        Subject: CN=35EE33F37C5444C057346BA62872FED55589CC15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1f:f3:d6:af:16:01:58:09:0e:1f:0f:84:f9:
                    e9:93:56:e0:4b:e1:1f:bf:11:48:bc:af:a8:91:30:
                    5f:54:64:b9:a2:93:ce:f7:f8:4e:4d:b7:5f:db:60:
                    c6:bc:ed:fe:64:bb:58:84:04:e9:4d:63:f2:d3:03:
                    d1:27:ad:cd:d1:31:55:68:be:f9:b3:9e:a6:92:99:
                    38:66:47:82:c1:4f:c9:09:65:cd:6b:f5:0a:22:57:
                    df:f9:92:b4:57:cd:85:73:16:cb:35:3b:7f:df:11:
                    b4:ee:78:e7:ff:40:34:37:9c:e6:b2:5d:e7:df:b1:
                    8a:f1:f9:4e:88:cd:9d:0d:6e:37:6f:11:e5:b2:49:
                    ae:99:f1:6b:2e:75:bd:74:86:64:0d:9e:a5:f7:6c:
                    70:8a:d4:94:7a:1e:d7:bb:34:f0:12:ec:92:13:18:
                    94:95:a4:1c:96:17:2f:e2:75:e6:51:04:3b:58:30:
                    74:04:29:df:89:a9:27:20:34:8a:46:02:d6:f6:61:
                    a9:40:cb:9d:d8:e3:fe:12:0b:10:50:ee:97:65:c7:
                    90:34:b7:99:aa:fb:39:25:bd:a1:45:00:8d:48:9d:
                    88:aa:3d:82:27:72:98:a0:82:f6:48:09:8b:65:18:
                    01:5d:9b:77:7f:ef:22:9d:4f:6b:88:11:8f:28:68:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EE:33:F3:7C:54:44:C0:57:34:6B:A6:28:72:FE:D5:55:89:CC:15
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a6533343a3a2f33322d313238203d3e203631383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:8e:62:82:d7:35:86:7f:86:99:39:e1:04:dc:d0:02:52:9f:
         c7:fd:e6:dc:32:a9:93:f6:f3:4e:2f:e0:ea:37:c0:7c:89:5d:
         95:10:02:b7:b5:20:6d:b7:a5:37:cf:19:1d:31:93:ed:60:9a:
         7b:85:0c:76:3d:76:14:11:b0:0e:9b:25:51:9d:09:70:21:60:
         c9:06:8d:72:c8:97:3d:65:6d:53:11:85:3b:b9:51:a5:f5:d0:
         a7:ad:a3:da:be:cf:db:ee:92:b1:21:1e:0f:50:c4:85:a6:da:
         8d:23:fe:41:1a:4f:5c:49:f1:ab:3d:54:d7:e6:80:d9:91:dd:
         5f:30:3e:e2:39:15:9a:f2:9c:63:c6:5d:78:15:a4:ee:d3:95:
         64:34:5b:7f:67:d6:ec:a8:ff:e1:e7:94:21:84:21:63:6a:44:
         93:a7:f6:2f:dd:b8:de:b3:a8:98:8d:47:af:e2:1f:b5:25:e8:
         fb:24:2b:e9:e0:89:3e:73:18:66:8a:2d:e8:64:07:e6:64:93:
         95:1a:b3:38:72:71:ea:fc:5b:b8:80:56:7d:18:10:c9:c3:bd:
         79:de:c0:92:38:71:5e:18:42:c9:07:2f:33:f5:28:df:57:3c:
         0d:5b:1d:4f:d5:e3:ee:8d:ef:14:37:19:a0:a1:ba:cb:ff:1e:
         57:07:45:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:28:15 2025 by rpki-client