Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a3a2f33342d3334203d3e20323731333538.roa
File:                     323830343a376134303a3a2f33342d3334203d3e20323731333538.roa (raw, json)
Hash identifier:          JkNi/k8AcBXp3E1Fe7z0ZTXDEZCnM7hJ9yuPz8R97xE=
Subject key identifier:   D2:93:8B:66:E2:6D:9F:3B:BC:97:80:CC:68:A8:7F:D9:11:21:3F:9D
Certificate issuer:       /CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
Certificate serial:       4112E0667581F10C6D7724E6FEED98C4175284BE
Authority key identifier: 9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a3a2f33342d3334203d3e20323731333538.roa
Signing time:             Mon 28 Jul 2025 20:27:56 +0000
ROA not before:           Mon 28 Jul 2025 20:22:56 +0000
ROA not after:            Mon 27 Jul 2026 20:27:56 +0000
asID:                     271358
IP address blocks:        2804:7a40::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl
                          rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Jul 2025 18:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:12:e0:66:75:81:f1:0c:6d:77:24:e6:fe:ed:98:c4:17:52:84:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
        Validity
            Not Before: Jul 28 20:22:56 2025 GMT
            Not After : Jul 27 20:27:56 2026 GMT
        Subject: CN=D2938B66E26D9F3BBC9780CC68A87FD911213F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:93:20:79:8f:14:da:26:cd:fa:81:64:5c:d3:
                    dd:a0:ee:d8:e1:f0:88:70:64:db:20:a1:cd:e2:53:
                    06:3a:61:d5:88:fc:ce:b1:19:aa:34:3b:df:8b:51:
                    1d:12:ba:bd:06:96:b6:f5:a5:1d:c9:6c:3f:05:6f:
                    60:ce:af:da:a5:23:c8:af:a5:61:ef:95:a0:a6:e9:
                    da:1a:c6:a4:57:76:76:3e:68:7c:a7:4e:c9:6c:89:
                    12:de:06:e4:80:f0:f1:af:fa:16:9d:ca:79:8f:44:
                    cd:c1:03:13:c1:09:fd:d2:be:e3:08:28:44:fa:48:
                    c0:4f:e4:56:4f:9c:e8:dd:53:5a:a1:15:1f:5e:39:
                    55:9b:3e:bc:83:0b:d5:9f:41:04:8b:a5:6b:68:c9:
                    ed:0c:4a:47:69:7b:da:57:fd:60:1b:10:12:7c:bc:
                    e3:ed:b7:4d:54:9c:8e:79:ce:fb:89:4d:54:d4:49:
                    bf:21:35:b1:07:64:ce:2d:cc:a3:fc:71:7b:81:d2:
                    00:c9:b9:f1:00:3b:c1:da:d0:32:83:86:92:64:63:
                    b4:a9:82:3a:ba:d2:e7:9e:36:b7:8a:93:0f:44:23:
                    88:9c:7a:0f:de:c8:6d:a9:31:6d:03:62:73:8d:d8:
                    4b:32:87:d9:b2:6e:a6:91:39:1d:ed:d9:f7:bc:74:
                    e7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:93:8B:66:E2:6D:9F:3B:BC:97:80:CC:68:A8:7F:D9:11:21:3F:9D
            X509v3 Authority Key Identifier:
                keyid:9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a3a2f33342d3334203d3e20323731333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a40::/34

    Signature Algorithm: sha256WithRSAEncryption
         78:8b:1c:74:9f:ad:ee:9f:b1:e9:e9:a8:2d:e4:0d:23:55:44:
         68:01:d3:12:80:34:c4:14:22:4a:24:fa:9f:9b:7f:f8:85:ed:
         35:a7:53:2e:35:30:12:fb:5e:4e:e8:c5:43:d3:27:07:0e:f9:
         cc:ef:b5:3b:ff:2f:ed:90:b0:ee:d9:d2:73:94:9f:0e:05:98:
         0c:18:05:91:15:3f:c4:c5:3f:87:21:92:8f:b2:30:04:5b:b3:
         c4:92:35:bd:bc:8f:4b:3c:14:4e:e7:d3:58:43:c1:9a:aa:6d:
         db:1a:64:39:ae:b2:6b:b0:25:24:c8:cc:67:7b:8e:6c:0a:ca:
         81:09:5e:aa:ae:7a:2f:53:d7:3e:85:60:21:a6:ed:75:5f:e5:
         10:6a:50:67:4e:b9:21:00:fd:0c:89:25:fa:d0:41:a8:10:10:
         fc:af:9c:3b:fa:fa:fc:57:35:72:43:01:59:3b:b3:4e:5c:c9:
         e5:c8:22:28:a4:88:73:9e:e4:61:0c:b8:20:fd:c1:31:f0:5b:
         84:50:f0:af:51:5a:aa:ff:0f:9c:cb:95:d6:82:03:3f:a6:1f:
         f5:3c:4c:27:52:73:51:b2:f9:2f:cd:02:15:e4:c3:8d:3c:a1:
         55:35:90:9b:50:08:90:58:a9:5e:5d:8f:62:f2:0e:54:e7:7a:
         67:7d:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:53:26 2025 by rpki-client