Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33322d3332203d3e20323732373339.roa
File:                     323830343a383765383a3a2f33322d3332203d3e20323732373339.roa (raw, json)
Hash identifier:          E9Yd+b/bOgyHHXBB1HwJ5T8d7P/0X+HD3xtA1SspmPs=
Subject key identifier:   58:73:D1:34:95:11:08:0B:30:31:D0:1F:16:EA:38:C7:C3:FF:4F:29
Certificate issuer:       /CN=A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA
Certificate serial:       7618A3BDF0C88B8BCB8FC04FF4E12849FCCE757B
Authority key identifier: A7:6D:0D:0E:B5:FB:05:C5:DC:C6:13:69:48:DD:8D:7B:CB:11:D6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33322d3332203d3e20323732373339.roa
Signing time:             Fri 30 May 2025 14:23:22 +0000
ROA not before:           Fri 30 May 2025 14:18:22 +0000
ROA not after:            Fri 29 May 2026 14:23:22 +0000
asID:                     272739
IP address blocks:        2804:87e8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.crl
                          rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 16:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:18:a3:bd:f0:c8:8b:8b:cb:8f:c0:4f:f4:e1:28:49:fc:ce:75:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA
        Validity
            Not Before: May 30 14:18:22 2025 GMT
            Not After : May 29 14:23:22 2026 GMT
        Subject: CN=5873D1349511080B3031D01F16EA38C7C3FF4F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:d0:0c:f9:1f:13:a5:37:ad:7d:9a:e1:50:
                    0b:6b:b2:f3:5d:97:92:c3:71:9f:f8:42:4e:e2:85:
                    a3:d2:f7:57:09:e0:e3:4d:2e:82:96:fd:2b:17:be:
                    7e:05:b5:fd:ab:3e:09:fa:bd:ec:a1:74:7e:97:c0:
                    02:d9:a4:f7:2f:24:04:b4:2a:5c:54:0d:e4:57:1d:
                    a7:1f:8f:19:dd:56:3d:08:81:4a:6e:55:54:b3:78:
                    d2:bf:45:7d:f5:6b:05:0c:8f:a7:f9:b8:c5:a0:95:
                    ec:5d:38:a0:7c:d1:19:c0:7a:d5:9a:52:5e:7b:fa:
                    99:55:65:77:2e:c7:33:2f:97:df:ae:39:64:dc:84:
                    3d:6d:fa:6f:33:ed:9c:cd:18:11:5b:8d:90:26:25:
                    44:2e:e4:2f:85:7e:28:52:b6:cb:29:4a:86:0b:84:
                    ef:e9:60:8c:a3:bb:af:82:32:d6:92:82:d0:a3:25:
                    e1:84:c2:42:89:23:2f:9e:cc:b8:97:b8:e1:e3:bd:
                    2e:e9:46:e8:59:08:26:de:76:1d:a8:5f:dc:e4:67:
                    71:a1:5c:87:e6:69:ae:23:f4:81:45:54:3e:d4:41:
                    87:a3:07:6e:ac:c4:78:ae:76:d0:ea:f1:ea:12:e3:
                    fc:42:20:e4:34:c0:39:13:f5:34:45:e9:e2:93:6b:
                    28:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:73:D1:34:95:11:08:0B:30:31:D0:1F:16:EA:38:C7:C3:FF:4F:29
            X509v3 Authority Key Identifier:
                keyid:A7:6D:0D:0E:B5:FB:05:C5:DC:C6:13:69:48:DD:8D:7B:CB:11:D6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76D0D0EB5FB05C5DCC6136948DD8D7BCB11D6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cj9VttKBGBfJ73SvoxNQkz9jc4nMzAV4LGnxdERaAT9c/0/323830343a383765383a3a2f33322d3332203d3e20323732373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:3e:f9:f4:a7:55:73:54:40:54:94:09:40:f6:6e:90:15:1a:
         6e:ab:99:7f:22:5c:36:bf:78:00:97:d4:87:5e:bf:a2:92:2e:
         35:7f:47:83:7d:df:d1:3f:1e:fb:10:74:19:74:ce:aa:c4:ec:
         b1:3d:de:67:72:d7:71:0e:c5:3c:71:f9:2c:a0:6b:d0:42:38:
         dd:2e:6f:2f:31:71:d3:8f:a1:7a:cb:57:80:31:5e:54:46:72:
         a8:f3:53:36:da:e0:ee:68:1d:30:53:bb:4a:a1:f8:db:94:c2:
         3d:17:43:d5:ec:7d:90:52:71:da:0c:a3:56:74:ee:3b:c7:60:
         23:d5:e9:f4:7e:eb:e2:19:f0:de:7b:4a:80:72:04:d5:b9:39:
         7f:ba:a9:49:d8:bc:4e:57:73:38:66:61:4f:65:88:8b:46:1a:
         2d:c4:98:b5:c9:86:1a:b8:01:b4:f2:dd:e1:70:ba:f4:0c:25:
         12:77:c6:cb:7c:30:0e:04:d3:d1:b7:b7:ad:38:6b:44:5a:b7:
         39:01:11:4f:32:d6:a2:de:60:2a:79:08:de:8c:6d:b8:18:20:
         e3:2a:fb:4b:95:b6:1a:b1:7a:5f:c6:80:21:11:7c:c4:bd:45:
         2d:d6:7d:ac:6b:ad:9d:f7:00:e4:16:46:a0:53:a5:b2:23:88:
         5a:f6:0b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 03:36:02 2025 by rpki-client