Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa
File:                     323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa (raw, json)
Hash identifier:          /bxnf7VpXMN4ivkAXPj2nZap1rBpN8xMu8aT12BZvy0=
Subject key identifier:   14:B9:5B:6A:08:01:3E:58:FF:1F:7B:D7:FC:F4:7C:BF:CE:9F:6F:11
Certificate issuer:       /CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
Certificate serial:       5BD3A7203BEE6AA636AD769BF39A3B21CC7DA06F
Authority key identifier: 2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa
Signing time:             Thu 22 May 2025 13:15:08 +0000
ROA not before:           Thu 22 May 2025 13:10:08 +0000
ROA not after:            Thu 21 May 2026 13:15:08 +0000
asID:                     269107
IP address blocks:        2804:5f88:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl
                          rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 21:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d3:a7:20:3b:ee:6a:a6:36:ad:76:9b:f3:9a:3b:21:cc:7d:a0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB
        Validity
            Not Before: May 22 13:10:08 2025 GMT
            Not After : May 21 13:15:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:34:28:02:19:66:ca:54:d1:1c:75:18:11:
                    c6:9a:65:01:66:94:5e:24:3e:c5:a3:29:56:2b:23:
                    0f:a3:5f:77:3c:e1:91:d4:19:ca:2a:c6:77:9e:f8:
                    8e:dd:6d:2b:84:77:fb:98:6d:cf:a0:eb:5b:4a:00:
                    00:cf:82:df:b6:6e:8d:db:a0:91:b3:22:cf:20:9f:
                    02:3c:7f:66:f4:69:0d:88:98:00:3e:b6:10:d3:40:
                    14:4c:81:99:0f:e1:f4:9e:86:95:0d:f8:0e:ca:3a:
                    68:79:ed:ab:28:26:71:d5:ff:8f:25:48:3a:fd:f5:
                    ba:a4:e0:c6:b7:97:60:7a:30:77:be:01:18:f1:37:
                    b1:cc:9f:53:59:df:ec:4d:a8:92:20:e5:6e:da:ee:
                    dc:29:f6:d3:0a:da:7e:36:18:e0:29:45:83:42:90:
                    3d:7d:8c:31:b7:a9:6d:97:60:d5:89:88:ef:a1:c7:
                    c3:b9:b1:da:da:7f:10:af:93:b5:cb:4f:60:7c:cc:
                    be:b4:98:9f:60:c2:3f:01:a8:92:18:e0:6b:dc:ec:
                    1f:36:53:0c:6a:03:11:eb:a5:d6:e3:38:3e:3d:cc:
                    1d:89:bf:2e:73:fb:65:e6:25:88:06:f6:fa:8d:9b:
                    ed:3a:8f:5c:71:7b:35:ed:87:3c:de:44:b3:b2:8c:
                    73:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B9:5B:6A:08:01:3E:58:FF:1F:7B:D7:FC:F4:7C:BF:CE:9F:6F:11
            X509v3 Authority Key Identifier:
                keyid:2B:4E:D5:7C:FB:A9:25:5B:84:24:7A:7F:FB:F2:FD:92:3A:36:5F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B4ED57CFBA9255B84247A7FFBF2FD923A365FDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYYC9hZZn93m28zZDFNRb8zta7oXo6yENvBGKSLd2Zs9/0/323830343a356638383a633030303a3a2f33342d3334203d3e20323639313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f88:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:ac:0a:40:7c:82:7e:5c:0a:80:52:65:43:db:41:f2:28:fe:
         e8:5d:86:84:46:8b:77:f7:f3:10:fe:90:b3:a1:bc:61:9d:63:
         f8:c8:f8:64:0a:0c:9e:36:2c:0e:42:39:35:0f:a5:55:81:46:
         c3:0f:9a:91:93:0d:2d:65:5b:84:56:d5:e1:10:58:b4:a7:83:
         64:ff:90:12:e1:76:7a:2e:1e:80:e2:0a:7b:26:d2:4b:a6:ad:
         d2:73:17:66:f7:64:df:ef:17:4b:a0:a7:a3:dd:af:46:9b:a7:
         91:62:7e:49:85:1d:bf:db:d5:6d:96:05:88:39:9f:42:85:73:
         e2:98:16:b8:fb:4f:7f:17:9f:26:1c:11:52:0f:f9:09:77:4f:
         a9:bf:0f:4c:af:78:1e:d9:ef:08:da:9e:d7:cc:05:2d:0c:fe:
         f5:8d:29:d0:41:28:3d:7c:54:d8:93:26:a9:45:ef:b6:31:ef:
         bd:92:0d:f5:a9:e6:5f:0f:b5:30:2a:1a:00:5d:9c:86:8a:6a:
         77:0e:f9:9b:fb:fb:da:93:12:df:72:90:e9:46:37:6b:77:4a:
         a0:f0:ad:6e:77:af:1f:fb:90:19:7d:2e:51:fb:e1:f4:a9:a6:
         4c:1f:f1:fe:22:57:ba:18:f6:26:12:2c:d4:bc:d3:45:35:60:
         79:13:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:59:20 2025 by rpki-client