Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a343030303a3a2f33342d3334203d3e20323633393230.roa
File:                     323830343a323763303a343030303a3a2f33342d3334203d3e20323633393230.roa (raw, json)
Hash identifier:          senlK5+4zPgb0k851UmusMVigf8j+haVweJBe0j0WyA=
Subject key identifier:   FC:7D:C9:05:9D:8F:41:5F:92:E0:FD:45:5A:95:DD:F5:17:EC:B7:AE
Certificate issuer:       /CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Certificate serial:       6742368CD13D91E88A1C3AC927D6ACCF58BAFB98
Authority key identifier: D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a343030303a3a2f33342d3334203d3e20323633393230.roa
Signing time:             Tue 27 May 2025 20:34:45 +0000
ROA not before:           Tue 27 May 2025 20:29:45 +0000
ROA not after:            Tue 26 May 2026 20:34:45 +0000
asID:                     263920
IP address blocks:        2804:27c0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 20:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:42:36:8c:d1:3d:91:e8:8a:1c:3a:c9:27:d6:ac:cf:58:ba:fb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
        Validity
            Not Before: May 27 20:29:45 2025 GMT
            Not After : May 26 20:34:45 2026 GMT
        Subject: CN=FC7DC9059D8F415F92E0FD455A95DDF517ECB7AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:a5:0d:44:80:96:bd:0f:f6:14:67:74:22:
                    29:8f:42:7e:25:13:41:6f:01:e9:0a:db:99:f6:41:
                    ac:65:1c:c5:a2:65:cc:3e:5d:1d:14:cc:1d:f8:e7:
                    59:77:2f:eb:e5:d9:97:66:84:45:42:a3:f3:2c:6b:
                    a0:77:bc:d1:22:28:dc:f2:bc:05:98:62:cd:5d:75:
                    3c:8a:3f:de:86:6b:5c:26:87:59:b0:e8:b8:fd:e9:
                    ad:d4:18:cd:c8:6a:f4:e4:1e:de:fa:a1:1e:4e:92:
                    44:5c:f5:8c:f1:42:9e:b6:c0:5b:1c:fb:fb:99:9a:
                    dd:e7:d3:1d:55:1f:ce:2d:76:cc:ff:e7:df:de:5e:
                    e2:6d:08:c1:29:db:e2:c0:72:92:ff:14:29:66:79:
                    97:82:d8:22:0c:3b:cd:4b:4e:a0:4c:c6:37:fe:54:
                    06:b0:d1:93:ad:59:7d:d1:84:e1:2b:34:06:74:de:
                    9c:f3:bf:16:69:0c:66:2a:ce:ca:95:db:1d:04:b8:
                    e9:83:f0:43:2a:73:d1:29:8b:c2:b2:09:ea:26:98:
                    cf:53:20:fe:e2:1b:87:55:8d:ea:26:e0:ea:89:70:
                    19:3d:b1:c2:4c:b0:86:ff:8a:0f:6b:39:72:1d:a0:
                    e2:21:56:08:e7:45:e6:91:d9:8e:74:e7:36:fe:cc:
                    10:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7D:C9:05:9D:8F:41:5F:92:E0:FD:45:5A:95:DD:F5:17:EC:B7:AE
            X509v3 Authority Key Identifier:
                keyid:D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a343030303a3a2f33342d3334203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:c0:8d:46:9c:7d:69:d3:07:8c:c6:92:24:ec:30:ac:95:82:
         65:36:3e:b4:39:c1:f1:a5:83:55:48:b8:20:0f:59:cf:c8:d8:
         db:23:69:d4:12:af:d9:eb:f7:65:7d:b1:37:d7:d7:03:13:b2:
         5e:ed:d6:9e:fd:25:30:ac:d3:60:ac:23:ad:8d:6d:ce:24:52:
         10:ae:65:02:87:9e:aa:75:c9:b7:c0:30:bc:81:e9:4f:30:b5:
         eb:90:d2:1a:23:80:65:9c:df:95:90:cc:f0:70:15:78:c6:26:
         78:28:0b:cb:1c:a4:0b:db:80:4e:31:81:f0:f3:43:09:9f:ba:
         bf:74:62:29:3f:72:8f:2d:c7:bd:61:b8:83:a0:78:06:00:81:
         0a:33:af:4d:9b:57:3e:2e:48:21:eb:e1:a8:c9:64:88:83:0c:
         f3:ad:0c:5c:6f:2e:da:ab:78:15:5e:72:98:21:f7:c7:a9:1c:
         e3:71:48:cd:74:13:43:7d:e5:12:32:b5:3f:11:5b:aa:54:46:
         49:2e:d7:d5:44:f8:d9:e8:41:32:a1:25:57:a1:ee:2c:b9:4a:
         d2:a7:05:40:ad:8e:7b:c4:97:bf:82:66:fc:de:22:5c:de:7e:
         87:de:78:25:12:b9:f0:03:d9:6f:12:84:a8:9d:b9:f9:ab:f1:
         f4:7a:30:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:16:25 2025 by rpki-client