Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a383030303a3a2f33342d3334203d3e20323730353936.roa
File:                     323830343a366536633a383030303a3a2f33342d3334203d3e20323730353936.roa (raw, json)
Hash identifier:          hCdxIM1LZWmkLGclEaM/RT3fSHdXONaWu7iTm6Hcjac=
Subject key identifier:   96:02:B8:64:80:B4:39:CA:C4:E1:D4:CF:BE:D8:19:65:5D:E8:B6:AE
Certificate issuer:       /CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
Certificate serial:       73766A204B3526BAC422BB59D1D02B990628D50B
Authority key identifier: 87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a383030303a3a2f33342d3334203d3e20323730353936.roa
Signing time:             Wed 26 Mar 2025 14:53:00 +0000
ROA not before:           Wed 26 Mar 2025 14:48:00 +0000
ROA not after:            Wed 25 Mar 2026 14:53:00 +0000
asID:                     270596
IP address blocks:        2804:6e6c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl
                          rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:76:6a:20:4b:35:26:ba:c4:22:bb:59:d1:d0:2b:99:06:28:d5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AB1866E0280616D9D4AEFBF052BC6468F2C824
        Validity
            Not Before: Mar 26 14:48:00 2025 GMT
            Not After : Mar 25 14:53:00 2026 GMT
        Subject: CN=9602B86480B439CAC4E1D4CFBED819655DE8B6AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:7b:25:a3:1d:cf:44:05:a8:dc:ab:3b:b6:
                    cc:d4:62:e5:b5:ca:6d:4b:db:83:52:2b:43:ef:0a:
                    a5:c5:d5:0e:cb:24:b3:9c:73:de:5f:70:5e:a2:11:
                    8a:52:9f:24:c2:f3:3c:79:c5:ab:d3:f9:64:76:28:
                    67:5f:11:7b:bf:c0:81:95:e3:08:63:5a:9b:4a:44:
                    ae:68:b4:aa:2e:02:00:08:b6:e7:09:66:b4:16:bd:
                    cf:40:a1:68:c8:99:79:a5:1c:75:97:a9:fe:27:a0:
                    39:04:bb:b0:95:3b:1e:23:e7:f4:df:98:c7:7a:3e:
                    94:03:7e:26:29:1f:67:2e:61:81:a4:6a:37:83:35:
                    24:ad:93:97:55:ff:4b:9b:f5:97:6c:8e:ee:04:7d:
                    11:fa:99:1b:6d:78:44:8f:5a:76:1f:58:cf:85:1e:
                    78:2b:62:24:80:06:dd:53:36:72:f4:4f:bb:57:3d:
                    6a:bb:35:0d:de:a3:fd:0f:9d:3e:15:da:c7:c1:27:
                    e9:b9:b1:ad:e3:73:e1:7b:2e:2f:92:4e:ba:68:da:
                    28:94:e6:21:b7:ca:37:76:59:e6:63:70:dc:e5:91:
                    de:22:33:f3:0f:d9:9f:1d:18:5d:5a:c4:ae:b0:20:
                    30:78:c4:8f:32:02:1e:f2:9c:34:17:82:03:22:63:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:02:B8:64:80:B4:39:CA:C4:E1:D4:CF:BE:D8:19:65:5D:E8:B6:AE
            X509v3 Authority Key Identifier:
                keyid:87:AB:18:66:E0:28:06:16:D9:D4:AE:FB:F0:52:BC:64:68:F2:C8:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/87AB1866E0280616D9D4AEFBF052BC6468F2C824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87AB1866E0280616D9D4AEFBF052BC6468F2C824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3xL2zwxM1nQmEQS7V8Y9N8Xz1RhKLgFVawqr8BaRw19/0/323830343a366536633a383030303a3a2f33342d3334203d3e20323730353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e6c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2d:8a:51:63:48:e3:6f:34:46:33:13:89:b2:76:1a:fd:9a:62:
         5f:86:05:0c:65:cd:67:29:79:79:a5:8d:b4:79:63:8a:73:f6:
         4a:1f:b7:70:91:b0:d3:16:2f:3a:60:5c:ca:f0:33:4e:28:3d:
         d5:c8:1a:da:00:1f:2b:88:68:b0:18:a4:0f:c0:98:c4:f5:27:
         58:55:b5:d3:cb:05:5f:ce:5d:90:ae:8e:ee:1d:83:0b:d8:39:
         77:8b:6a:bf:a7:bb:52:04:4d:d8:b2:6c:01:6c:91:8a:8c:98:
         86:d3:08:65:25:da:47:f8:b2:61:ef:e5:5d:b0:d3:ca:98:84:
         d9:31:a3:31:cb:ab:ca:ed:23:ec:1d:ed:56:48:82:d0:1c:d2:
         09:d1:af:cc:d3:dd:29:49:d8:31:07:2c:ee:72:7d:fd:98:cc:
         64:5a:92:44:dd:35:2d:33:a3:92:eb:aa:62:00:ae:0c:ba:41:
         f4:8c:9f:0e:cf:f3:17:6e:e6:f1:4e:b6:53:73:ca:13:6f:16:
         c8:86:41:38:37:fa:1a:12:d4:cd:a8:55:62:23:6e:d2:e6:d2:
         95:74:04:dc:63:39:2b:84:6f:02:f5:22:08:06:72:cc:65:56:
         2a:7b:b5:f8:71:08:42:65:9e:6f:5e:67:ba:57:06:5c:fe:c4:
         4e:a7:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:19:01 2025 by rpki-client