Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a383030303a3a2f33342d3334203d3e20323731313337.roa
File:                     323830343a373664343a383030303a3a2f33342d3334203d3e20323731313337.roa (raw, json)
Hash identifier:          f+XSuD/1jsnsNMOVl0b7kKIQgkymyid3bwJDnKrm60Q=
Subject key identifier:   83:78:A0:5B:56:59:4F:90:7F:90:7D:D5:2A:43:96:A9:F3:E1:96:75
Certificate issuer:       /CN=6A0B7675AE30C4E2406A051EFF5ACA0597878F90
Certificate serial:       6B1F5B092A54F4E234FA567B4FACA05C7A0831A9
Authority key identifier: 6A:0B:76:75:AE:30:C4:E2:40:6A:05:1E:FF:5A:CA:05:97:87:8F:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a383030303a3a2f33342d3334203d3e20323731313337.roa
Signing time:             Fri 30 May 2025 10:48:12 +0000
ROA not before:           Fri 30 May 2025 10:43:12 +0000
ROA not after:            Fri 29 May 2026 10:48:12 +0000
asID:                     271137
IP address blocks:        2804:76d4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.crl
                          rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1f:5b:09:2a:54:f4:e2:34:fa:56:7b:4f:ac:a0:5c:7a:08:31:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0B7675AE30C4E2406A051EFF5ACA0597878F90
        Validity
            Not Before: May 30 10:43:12 2025 GMT
            Not After : May 29 10:48:12 2026 GMT
        Subject: CN=8378A05B56594F907F907DD52A4396A9F3E19675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:00:15:96:47:eb:e1:9c:70:2a:2c:4b:99:
                    35:34:1e:be:e6:11:0e:84:d9:39:ab:8a:99:81:f7:
                    65:e4:fd:48:5e:99:89:6f:30:0b:a2:17:51:d7:62:
                    04:9f:54:7a:4d:05:10:ad:7e:83:dd:72:4c:01:cf:
                    a8:63:3f:6b:d4:a7:ce:d9:8b:cd:e3:10:50:89:ca:
                    17:37:5b:2b:45:fd:2e:b9:72:47:f8:5a:46:4d:9d:
                    21:fa:ef:a5:a1:66:df:1e:9a:95:94:f2:7a:0a:c7:
                    7e:74:4b:1f:13:30:92:6f:67:fb:2d:b9:ca:1b:0b:
                    c4:93:37:a8:73:2a:b3:98:0e:2e:e6:f7:bf:c3:49:
                    4c:1f:c7:e5:ea:41:29:f1:4b:4e:5c:66:96:f1:72:
                    25:44:09:c6:08:63:02:a4:1f:b3:ce:c4:30:46:bd:
                    d1:4c:22:03:4e:ce:38:a3:86:b1:81:25:36:e1:b1:
                    7d:7b:63:ad:e4:c0:23:aa:d6:fa:66:39:9e:41:ab:
                    ea:43:b7:dd:8a:95:16:14:76:09:04:32:27:1b:76:
                    f5:ee:f9:73:8d:b9:a0:d4:1d:7d:49:64:c5:25:d9:
                    c8:2d:85:96:e4:53:8a:1b:4a:e8:9c:11:a9:9d:67:
                    b2:50:fd:4b:b4:2e:e1:5d:67:89:ea:b4:6c:a9:81:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:78:A0:5B:56:59:4F:90:7F:90:7D:D5:2A:43:96:A9:F3:E1:96:75
            X509v3 Authority Key Identifier:
                keyid:6A:0B:76:75:AE:30:C4:E2:40:6A:05:1E:FF:5A:CA:05:97:87:8F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a383030303a3a2f33342d3334203d3e20323731313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76d4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:d5:db:73:2e:8f:cc:aa:a1:bc:8c:7a:38:35:76:ea:dd:69:
         4f:57:0a:08:b9:c9:d9:2a:38:d3:d2:07:33:e9:06:68:ed:ea:
         03:36:dd:7c:38:e7:64:63:da:37:bc:6e:83:de:d4:8a:ad:3a:
         bd:18:82:c2:ce:61:db:51:ea:b4:ad:86:50:91:20:d1:c2:64:
         3e:27:32:08:df:db:31:1f:ca:0d:af:46:01:d5:07:82:5a:bd:
         85:6b:bc:47:6a:2a:e1:cc:71:2b:41:6c:70:66:ed:c4:b7:75:
         5b:e1:f1:a0:8f:d4:60:54:9e:bf:67:74:22:28:5b:09:12:6a:
         f9:13:22:07:9e:70:54:a5:28:55:a6:8c:c6:12:57:13:fe:c1:
         cb:fc:4a:f3:b6:a7:6a:4e:a8:1c:56:37:41:4c:cd:24:b3:18:
         a0:81:33:f6:12:03:47:d0:c0:81:f0:68:b7:a9:4b:ce:15:dc:
         f4:05:3b:c9:9b:10:be:18:d6:4d:0e:77:bc:da:b9:b8:c5:72:
         c4:98:70:84:4b:de:d0:f3:6e:ed:43:1a:27:b6:f9:f8:67:a7:
         9b:38:f0:cf:dc:ee:9b:df:95:5b:da:ab:39:72:4c:2a:ef:9e:
         2d:37:d9:bf:78:9d:07:ed:de:c0:1f:63:83:7b:65:dd:48:a2:
         6e:4e:0c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:28:36 2025 by rpki-client