Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3332203d3e20323633393230.roa
File:                     323830343a323763303a3a2f33322d3332203d3e20323633393230.roa (raw, json)
Hash identifier:          /VGeHPFax6JjGJXnZS+MjJfWpkAHTEIe3kb/c7msivc=
Subject key identifier:   AF:66:26:2C:2C:09:1A:1C:8F:1F:7F:43:FD:4B:9E:5E:FA:FE:55:E2
Certificate issuer:       /CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
Certificate serial:       53DE60CAE9254B9FBAACAE9E5404694AA48CFCC8
Authority key identifier: D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3332203d3e20323633393230.roa
Signing time:             Tue 27 May 2025 20:34:45 +0000
ROA not before:           Tue 27 May 2025 20:29:45 +0000
ROA not after:            Tue 26 May 2026 20:34:45 +0000
asID:                     263920
IP address blocks:        2804:27c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 01:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:de:60:ca:e9:25:4b:9f:ba:ac:ae:9e:54:04:69:4a:a4:8c:fc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D87FCA943E98B8806A606F5B0F8BE7294C4D93A3
        Validity
            Not Before: May 27 20:29:45 2025 GMT
            Not After : May 26 20:34:45 2026 GMT
        Subject: CN=AF66262C2C091A1C8F1F7F43FD4B9E5EFAFE55E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:81:d5:c3:f2:c9:10:f6:44:17:26:de:6e:
                    4f:87:b3:4f:b6:e7:6d:c4:8d:40:90:43:5c:94:a4:
                    4a:2a:38:63:7b:9b:ea:11:03:31:2f:e0:70:94:91:
                    15:8f:51:2b:db:8c:a8:24:26:c3:51:8a:9b:3d:6a:
                    af:ad:07:72:0f:bd:7a:41:de:46:70:46:38:22:0a:
                    42:4e:30:6b:16:45:ff:a4:7f:b1:3e:93:62:92:fb:
                    ea:7a:2e:d0:f3:9e:ee:89:4a:d3:54:e5:ed:8e:b5:
                    55:4f:e4:34:cd:69:95:67:20:a9:d4:97:eb:72:17:
                    7e:0e:d9:31:e9:f2:a9:b6:1c:07:95:4f:2b:22:02:
                    10:24:16:ee:48:74:9d:e3:13:f3:f7:9e:0f:03:ca:
                    b6:c1:44:c4:0d:52:db:07:36:2d:10:3b:25:31:48:
                    f3:a9:22:cd:34:a0:7b:31:67:e4:68:79:67:95:79:
                    26:bd:43:d7:d6:fb:46:10:38:99:df:89:ad:43:59:
                    4a:76:a4:b0:e6:82:ff:76:46:ce:82:4f:c1:d5:24:
                    17:97:00:32:2a:94:25:e0:2b:c6:8f:9e:53:01:d6:
                    0d:8b:64:66:f3:81:c5:2f:4e:f3:8b:a1:70:63:53:
                    01:dd:fe:e5:33:df:55:ac:e7:7a:ea:1f:65:3a:28:
                    34:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:66:26:2C:2C:09:1A:1C:8F:1F:7F:43:FD:4B:9E:5E:FA:FE:55:E2
            X509v3 Authority Key Identifier:
                keyid:D8:7F:CA:94:3E:98:B8:80:6A:60:6F:5B:0F:8B:E7:29:4C:4D:93:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D87FCA943E98B8806A606F5B0F8BE7294C4D93A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a3a2f33322d3332203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:85:0e:5c:86:4a:2c:f6:77:1d:f1:92:ef:d6:6e:72:b4:
         8e:44:e2:2b:7e:1e:6d:6b:8b:93:f7:8c:31:ef:7e:ea:d6:93:
         78:d8:17:c7:bd:86:ab:81:83:57:f9:f7:0b:c9:33:87:0c:b6:
         ce:28:ed:06:cd:9f:17:db:7d:7f:90:83:88:42:b2:2b:f2:01:
         31:26:c5:f5:2f:e4:92:eb:e7:75:81:78:68:9d:0f:85:74:8c:
         b2:0a:32:2f:1f:19:de:d7:ca:c2:44:77:52:ae:66:48:85:42:
         9f:b1:31:93:03:a3:af:68:0d:94:94:7d:35:2d:28:4a:64:e8:
         35:1a:07:55:e2:34:7e:bc:ed:9f:6f:34:39:84:63:5a:e4:9d:
         b0:14:c8:33:ca:80:b9:0c:92:43:44:8a:c9:25:df:ad:c5:ee:
         18:25:9e:5f:39:7c:a0:05:e0:d5:b7:c8:06:87:1e:f7:98:95:
         cf:85:0f:80:ba:19:60:55:c9:28:a7:ad:15:66:90:93:2e:07:
         a4:c7:15:43:f5:6f:61:98:cb:6a:46:6f:fb:be:f4:7a:8f:54:
         28:4f:93:0a:40:2c:a2:5a:2a:54:35:7e:0d:95:9a:90:c7:bb:
         fa:a8:44:f8:d6:9f:1e:fc:8f:c6:6f:91:14:e1:ee:9e:53:b9:
         d4:ba:38:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:20:44 2025 by rpki-client