Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          Vrl37ytZxX6+7EASEdHEKuND6RWcDiIn6ZuP3vh9UkU=
Subject key identifier:   F7:C7:E4:67:B8:79:D3:85:75:A7:31:D3:D6:19:C0:91:B5:8F:BC:5E
Certificate issuer:       /CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
Certificate serial:       1AA9F5803C89472C1E93A298C2A29BDF8AFE1E52
Authority key identifier: BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 23 May 2025 21:55:35 +0000
ROA not before:           Fri 23 May 2025 21:50:35 +0000
ROA not after:            Fri 22 May 2026 21:55:35 +0000
asID:                     274726
IP address blocks:        2804:92a8:7000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a9:f5:80:3c:89:47:2c:1e:93:a2:98:c2:a2:9b:df:8a:fe:1e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
        Validity
            Not Before: May 23 21:50:35 2025 GMT
            Not After : May 22 21:55:35 2026 GMT
        Subject: CN=F7C7E467B879D38575A731D3D619C091B58FBC5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:ef:fb:e3:7d:ac:db:c6:1b:2c:dc:ee:31:
                    26:e6:ff:1c:50:1a:13:8d:23:8e:a2:1e:c1:2e:16:
                    1f:56:af:75:99:06:9f:4f:57:e6:ac:36:0a:21:e5:
                    55:2c:3d:f4:d7:68:9e:0f:2b:50:17:b5:e1:fc:ee:
                    90:b3:e9:2d:2e:f1:a3:14:96:54:94:86:3e:75:a9:
                    d8:79:33:3e:d4:34:0e:ae:62:1b:5d:88:85:86:f5:
                    a9:81:58:ba:09:21:ae:07:24:28:c4:d2:0b:73:a4:
                    ff:3a:1a:98:3d:c7:bd:7e:86:ce:3b:b0:1c:60:3e:
                    42:af:cd:3e:71:c9:7c:da:83:4c:8a:22:37:06:eb:
                    2a:78:23:3a:c8:58:5c:12:04:21:ed:94:b2:2e:4f:
                    67:04:1a:a4:46:cd:3c:d9:c6:df:ac:95:57:a3:11:
                    b6:e9:7c:b6:6b:7d:8e:5d:fc:37:87:be:73:6f:55:
                    70:d2:35:c0:39:ab:f8:92:8e:78:84:a3:cb:bd:e5:
                    eb:4a:8b:6d:5b:36:87:9b:35:a8:3d:04:1c:28:fc:
                    70:f2:88:3d:3b:33:af:71:45:ad:a0:d2:e7:07:7a:
                    8f:61:9a:b6:a4:48:f9:7d:e9:ac:48:dc:b5:bc:f7:
                    ef:08:6d:34:0f:83:a5:b7:4c:c4:6a:cc:ea:de:9c:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C7:E4:67:B8:79:D3:85:75:A7:31:D3:D6:19:C0:91:B5:8F:BC:5E
            X509v3 Authority Key Identifier:
                keyid:BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a373030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9b:7c:b9:6f:c0:87:26:15:d5:0b:37:61:81:fb:cf:47:bd:3d:
         26:de:83:eb:dc:f8:16:3e:ff:f1:9a:d8:fc:99:69:80:0c:6b:
         32:ae:8f:56:08:ca:bf:30:f9:57:31:48:3d:26:38:8d:55:15:
         c2:36:fc:01:40:42:1e:8d:eb:86:2e:08:d5:6e:a0:a8:ce:99:
         e3:aa:3f:c2:eb:23:59:43:11:9c:13:37:ea:1e:0d:bb:29:66:
         42:73:8b:9f:f2:e2:af:d5:de:09:8f:9f:39:9d:45:ed:fe:09:
         60:74:9b:ce:f6:c2:5f:4e:06:bd:84:d6:18:e7:47:15:d8:4d:
         10:f3:bf:95:59:7e:33:94:e8:da:35:fe:5c:33:b0:f3:fe:e9:
         d6:b5:71:db:a0:b1:43:ff:a3:a2:d0:5c:a5:19:9f:e0:87:eb:
         9c:93:a9:39:86:d9:fe:07:a9:ec:48:d9:ac:5f:16:bd:8a:d1:
         b5:1d:b4:73:60:fc:7f:42:89:79:a1:21:6e:9c:70:49:72:3e:
         79:14:51:12:b9:1d:a1:54:3f:79:2d:a0:fe:56:68:7b:d4:29:
         7e:49:c8:56:77:cc:6c:c7:e1:f6:03:8d:2d:1d:ad:92:ff:d0:
         ce:3a:c5:57:bd:4a:e2:ae:67:58:c7:b0:e5:13:92:02:91:e1:
         be:d3:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:34:57 2025 by rpki-client