Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa
File:                     323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa (raw, json)
Hash identifier:          XLCnq53saOG3l3fJcqZ6pq4Awp7nnqEtnwphMoJuMZE=
Subject key identifier:   5B:12:68:37:8A:1D:E4:BB:0B:71:3E:74:3C:8F:7E:A4:13:D0:7C:76
Certificate issuer:       /CN=6A0B7675AE30C4E2406A051EFF5ACA0597878F90
Certificate serial:       2EB6CD2D70107564BFB142B8B967CE398CD22D6D
Authority key identifier: 6A:0B:76:75:AE:30:C4:E2:40:6A:05:1E:FF:5A:CA:05:97:87:8F:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa
Signing time:             Fri 30 May 2025 10:48:52 +0000
ROA not before:           Fri 30 May 2025 10:43:52 +0000
ROA not after:            Fri 29 May 2026 10:48:52 +0000
asID:                     271137
IP address blocks:        2804:76d4:ff00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.crl
                          rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 22:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b6:cd:2d:70:10:75:64:bf:b1:42:b8:b9:67:ce:39:8c:d2:2d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A0B7675AE30C4E2406A051EFF5ACA0597878F90
        Validity
            Not Before: May 30 10:43:52 2025 GMT
            Not After : May 29 10:48:52 2026 GMT
        Subject: CN=5B1268378A1DE4BB0B713E743C8F7EA413D07C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:17:54:29:8c:c2:98:a4:ca:76:b5:fc:b1:79:
                    a2:2a:85:fc:de:ff:74:af:98:93:db:ce:9a:99:e6:
                    14:24:21:94:f5:25:9d:5e:35:ec:26:4b:7d:6a:8c:
                    6f:9a:85:e8:81:fb:cd:f2:76:77:fd:9e:ed:10:91:
                    b2:96:d7:75:d4:47:3c:9e:56:de:7f:96:2c:59:8b:
                    4f:a3:9d:91:73:15:83:60:a8:a9:8d:dd:40:91:ea:
                    61:9b:e8:b6:49:f4:b6:4f:6f:82:3e:dd:5b:ac:29:
                    22:d6:dd:b7:3e:81:c0:92:25:82:f9:3b:b4:20:43:
                    a4:41:fb:1d:3e:95:f0:ab:2e:10:1d:6d:d2:2d:2b:
                    60:a7:b2:d4:55:b2:8d:7d:33:b7:94:dd:36:5e:13:
                    95:87:e5:29:9d:a2:87:3f:1c:e9:21:38:fb:c0:f2:
                    f1:23:d4:e2:e6:ce:29:90:3f:0c:1c:2c:df:b3:43:
                    c4:54:9c:b5:6b:25:df:cf:1f:91:00:48:bf:00:1c:
                    0f:47:01:70:ef:65:75:c4:da:1f:76:61:78:99:6b:
                    18:b4:0a:8b:03:b4:cb:98:fd:e7:0b:98:bf:21:41:
                    9a:e9:7e:3f:0f:54:55:4e:63:aa:eb:40:67:66:97:
                    d4:ca:12:f5:c4:a4:98:42:b0:d6:db:fa:fa:99:58:
                    0d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:12:68:37:8A:1D:E4:BB:0B:71:3E:74:3C:8F:7E:A4:13:D0:7C:76
            X509v3 Authority Key Identifier:
                keyid:6A:0B:76:75:AE:30:C4:E2:40:6A:05:1E:FF:5A:CA:05:97:87:8F:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A0B7675AE30C4E2406A051EFF5ACA0597878F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/323830343a373664343a666630303a3a2f34382d3438203d3e20323731313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:76d4:ff00::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:e2:e3:6e:36:42:df:69:da:f2:35:fd:50:bb:4b:8c:8c:5f:
         c0:53:b4:6b:4e:8a:e7:a2:f9:92:ba:f0:e5:2c:ba:2d:5e:ea:
         f8:26:e9:37:5a:d6:dd:dd:d5:ba:60:e5:fe:37:f2:51:af:98:
         c0:2b:8e:91:37:80:86:87:23:47:e0:bd:1b:cc:bb:18:d9:e1:
         79:d7:8a:c7:df:6f:e3:90:31:b0:6f:95:84:7c:f9:3a:80:ef:
         82:c7:4c:3d:b4:bb:4b:e2:d0:aa:16:0e:8d:a5:05:e5:cb:e8:
         0c:1e:ac:97:04:bb:f4:0d:e3:66:9f:f8:be:9b:2d:54:7c:6f:
         ba:6f:89:1a:b0:b1:f1:75:53:00:51:03:45:a0:98:28:a1:f1:
         31:1d:3b:40:e0:34:5d:3e:79:64:6e:c1:f5:e4:9b:49:ae:f0:
         a1:a3:d5:d9:19:26:a4:e2:3b:5b:2d:cb:4c:88:2e:48:6a:53:
         04:51:b6:c5:ff:37:7a:28:80:07:cf:37:5c:91:e9:98:c2:ab:
         21:d4:4d:31:55:49:67:2f:a7:34:c8:c4:63:cf:cf:8d:71:c5:
         ed:48:be:84:cf:7b:6a:98:a0:89:47:76:8f:93:51:9a:d5:eb:
         ed:71:78:e3:4c:f0:ec:c7:c3:33:ac:d8:43:87:0d:91:82:3a:
         de:43:46:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:39:52 2025 by rpki-client