Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/323830343a363762383a3a2f33322d3438203d3e20323639363436.roa
File:                     323830343a363762383a3a2f33322d3438203d3e20323639363436.roa (raw, json)
Hash identifier:          7kH7+xzvu3KguzeBJmvhR9iW3sHioRpnJT7slRGRdQo=
Subject key identifier:   0D:F7:F6:75:98:C1:E9:EF:90:71:2E:55:29:AE:58:C0:72:D8:08:BF
Certificate issuer:       /CN=83F8109B2205F74DDC615E0B4EDCA9114508E376
Certificate serial:       37576653A0A168DE8EDE115AAF7B30012A7AF9F2
Authority key identifier: 83:F8:10:9B:22:05:F7:4D:DC:61:5E:0B:4E:DC:A9:11:45:08:E3:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F8109B2205F74DDC615E0B4EDCA9114508E376.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/323830343a363762383a3a2f33322d3438203d3e20323639363436.roa
Signing time:             Wed 28 May 2025 17:40:56 +0000
ROA not before:           Wed 28 May 2025 17:35:56 +0000
ROA not after:            Wed 27 May 2026 17:40:56 +0000
asID:                     269646
IP address blocks:        2804:67b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/83F8109B2205F74DDC615E0B4EDCA9114508E376.crl
                          rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/83F8109B2205F74DDC615E0B4EDCA9114508E376.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F8109B2205F74DDC615E0B4EDCA9114508E376.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 14:41:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:57:66:53:a0:a1:68:de:8e:de:11:5a:af:7b:30:01:2a:7a:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83F8109B2205F74DDC615E0B4EDCA9114508E376
        Validity
            Not Before: May 28 17:35:56 2025 GMT
            Not After : May 27 17:40:56 2026 GMT
        Subject: CN=0DF7F67598C1E9EF90712E5529AE58C072D808BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:50:ae:2e:22:80:33:8e:5a:ca:9e:32:98:a1:
                    09:28:46:7e:cc:0f:dc:e6:cb:5a:0f:cd:5b:5d:cb:
                    84:a7:e5:25:b3:62:2d:40:61:e4:bc:f6:5c:e3:7c:
                    4a:8e:ef:2e:94:24:a7:06:90:c7:1e:68:ab:b0:b1:
                    ed:9d:f4:1a:69:c5:e5:cd:77:43:87:a7:9e:57:21:
                    a9:38:4c:9d:b1:97:01:ec:ed:c4:be:ac:81:cb:77:
                    69:3c:8e:5d:68:3b:f2:77:9b:89:16:39:fe:c2:c1:
                    ae:fb:22:5e:f5:01:b8:4d:b1:aa:00:d6:84:6f:3c:
                    4d:44:a4:a4:44:bb:2f:97:20:cd:8b:a4:b8:af:e1:
                    b2:2e:ac:89:6b:3d:85:65:c6:cb:b4:1f:77:d8:a4:
                    28:23:42:84:cb:ce:ff:0d:37:33:40:d2:65:81:04:
                    ab:bb:ad:de:ec:98:1d:83:09:32:3d:5d:ed:37:75:
                    58:fa:7e:88:4c:a6:29:60:a5:84:88:0b:6b:af:27:
                    77:a5:84:13:40:da:78:77:21:7b:41:3d:16:55:92:
                    63:e1:46:15:d6:a3:9a:37:e9:18:66:57:ab:e7:07:
                    e2:21:f7:09:d6:72:19:4a:ea:f0:b6:2c:d7:24:47:
                    65:0c:60:54:47:c8:78:6e:51:35:32:11:3b:81:5d:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F7:F6:75:98:C1:E9:EF:90:71:2E:55:29:AE:58:C0:72:D8:08:BF
            X509v3 Authority Key Identifier:
                keyid:83:F8:10:9B:22:05:F7:4D:DC:61:5E:0B:4E:DC:A9:11:45:08:E3:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/83F8109B2205F74DDC615E0B4EDCA9114508E376.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83F8109B2205F74DDC615E0B4EDCA9114508E376.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/323830343a363762383a3a2f33322d3438203d3e20323639363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:e3:e5:22:54:20:6d:59:bb:55:76:dd:ac:aa:7c:83:4d:e3:
         9b:fb:90:04:50:66:32:08:ea:4f:54:62:3f:ae:cb:a6:51:58:
         7e:d5:f9:40:27:a2:8f:4a:13:32:7f:74:b6:54:6c:61:58:b1:
         36:84:51:3b:33:5c:89:fb:20:7c:4f:04:b8:d5:a9:57:6e:be:
         3c:36:11:c1:cd:b4:75:4a:cd:79:37:c1:a4:54:5a:f5:38:85:
         5c:0c:44:62:68:e8:59:0a:fe:08:58:05:e6:df:59:42:4f:45:
         f1:96:4c:b3:3c:0a:c3:35:52:50:f3:97:08:2a:8a:68:39:92:
         b0:8b:92:94:f0:ce:e5:c3:79:92:e3:10:93:24:12:2b:4e:13:
         bf:f2:f1:e7:8c:87:9f:6f:fa:31:b2:21:b1:dc:28:20:5e:b8:
         ae:43:cd:97:b3:5f:75:58:1c:d0:49:2e:3e:24:14:81:86:7a:
         8f:66:49:e8:c1:72:c5:5a:53:be:c0:29:86:d5:38:d7:33:f3:
         63:56:a4:ae:02:6c:8f:5c:30:50:ac:90:67:4f:d8:19:d9:73:
         41:e9:0a:86:7b:cb:99:f5:8b:46:bc:2d:5e:ad:be:66:30:60:
         c0:42:85:18:3c:58:ec:26:f1:05:30:31:f9:bd:8d:31:2a:99:
         2b:dd:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:06:24 2025 by rpki-client