Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa
File:                     323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa (raw, json)
Hash identifier:          TUhzmAx4z/DzJjwxz3y01CyruM9QGtFFpf4SHO5fT6o=
Subject key identifier:   B7:BD:2C:B7:FE:BC:95:FD:EC:57:E9:C4:6B:02:36:AD:BB:40:B1:AD
Certificate issuer:       /CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Certificate serial:       5CC875F13165A4A3DF571033EAA585EDC0706CC3
Authority key identifier: D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa
Signing time:             Tue 27 May 2025 20:34:48 +0000
ROA not before:           Tue 27 May 2025 20:29:48 +0000
ROA not after:            Tue 26 May 2026 20:34:48 +0000
asID:                     263920
IP address blocks:        2804:27c0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 20:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c8:75:f1:31:65:a4:a3:df:57:10:33:ea:a5:85:ed:c0:70:6c:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
        Validity
            Not Before: May 27 20:29:48 2025 GMT
            Not After : May 26 20:34:48 2026 GMT
        Subject: CN=B7BD2CB7FEBC95FDEC57E9C46B0236ADBB40B1AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d0:45:64:7d:cf:88:5f:6b:b7:47:72:aa:80:
                    25:86:f2:73:10:c6:6e:74:54:a0:02:eb:3f:4b:50:
                    f3:f1:f2:e8:01:89:35:b2:93:9d:5c:41:eb:53:86:
                    6b:d5:f1:08:dd:24:6c:9b:0b:e9:2c:7d:f8:89:82:
                    8e:07:d6:bf:29:47:68:d0:54:77:28:58:b4:b0:fc:
                    36:b7:1f:a6:60:9f:bd:14:ab:b8:85:78:c3:37:34:
                    3a:bf:1c:f1:ec:72:77:5e:6b:0e:95:05:4e:63:c6:
                    90:15:49:eb:da:d0:9c:3e:47:21:62:4b:ba:aa:ba:
                    6e:82:49:7d:a2:2a:7d:06:e2:e6:a6:a7:64:78:78:
                    77:41:4a:f9:1c:df:9c:e8:82:fa:16:19:d2:b7:27:
                    49:0d:8a:8b:a3:17:ef:0a:29:42:81:1e:54:9a:1a:
                    04:39:f2:4d:de:c5:d3:4d:e8:3c:72:ed:ba:0a:fd:
                    36:7f:1b:88:82:b1:42:59:e8:69:0f:2a:21:70:c3:
                    b9:c2:5c:6e:1b:42:c0:ac:99:ea:f0:4c:8e:51:f9:
                    06:80:f4:1f:4a:79:06:5b:9c:c5:2c:52:b3:b5:aa:
                    e7:32:0e:26:f4:0c:9f:db:bf:c7:8d:3f:93:5a:bb:
                    b2:f1:5d:e4:03:b1:f6:9a:45:91:06:cf:fc:25:62:
                    fa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BD:2C:B7:FE:BC:95:FD:EC:57:E9:C4:6B:02:36:AD:BB:40:B1:AD
            X509v3 Authority Key Identifier:
                keyid:D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33342d3334203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:b0:e3:7b:88:65:d5:59:a6:38:da:7a:b9:8a:36:83:e8:f0:
         8d:6c:be:88:8e:59:9e:b5:90:76:4e:59:e9:91:9b:41:c0:b4:
         3b:e1:24:a9:74:1d:1e:09:73:8c:ca:ef:6a:52:ca:1e:7b:24:
         b4:03:f9:cd:71:4c:70:39:f1:a7:48:74:08:58:ab:cf:e1:63:
         63:33:46:41:c0:b4:97:4d:7f:ec:58:1d:ba:fb:4a:b6:be:03:
         0f:30:d9:08:0a:6f:db:16:b7:a8:cc:3b:d9:ce:14:a9:69:1f:
         3f:4a:68:14:99:6d:80:34:46:36:e9:8c:10:e0:80:70:c4:8e:
         28:0a:ca:34:51:33:be:fd:35:fc:61:c3:1f:fd:24:a2:47:20:
         8e:38:62:1f:65:86:fd:d1:d9:5c:45:a9:a3:1c:4a:5b:52:4f:
         0d:aa:dd:29:db:a4:88:8a:20:a8:68:8c:f8:47:dc:44:3b:ca:
         62:92:09:bf:09:1f:d0:d0:45:bb:27:96:3a:b6:97:49:ac:58:
         9b:d5:17:60:de:5a:a6:c8:f4:fd:e2:b4:d6:21:c3:8a:71:3a:
         82:f1:67:34:12:94:fa:f6:0b:7c:9c:17:36:8e:1c:4b:22:2c:
         37:c9:4e:c4:86:e4:29:7f:9f:a4:f7:89:3b:4f:a1:ba:17:6d:
         10:7a:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:46:49 2025 by rpki-client