Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a343030303a3a2f33342d3334203d3e20323635343836.roa
File:                     323830343a333465303a343030303a3a2f33342d3334203d3e20323635343836.roa (raw, json)
Hash identifier:          w8t1N5b5CKW5U01k2orVmlH3xGf64uRyJrjngJrgDu0=
Subject key identifier:   05:DD:23:6E:B9:82:98:53:36:FC:BD:DE:92:18:6A:B8:8D:45:1D:9E
Certificate issuer:       /CN=32D842DEE7974134E5B4C88618DC7A30F4029092
Certificate serial:       626F81A32BEB207FF85F08C3A731399DB95551A6
Authority key identifier: 32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a343030303a3a2f33342d3334203d3e20323635343836.roa
Signing time:             Thu 05 Jun 2025 21:01:04 +0000
ROA not before:           Thu 05 Jun 2025 20:56:04 +0000
ROA not after:            Thu 04 Jun 2026 21:01:04 +0000
asID:                     265486
IP address blocks:        2804:34e0:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl
                          rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6f:81:a3:2b:eb:20:7f:f8:5f:08:c3:a7:31:39:9d:b9:55:51:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D842DEE7974134E5B4C88618DC7A30F4029092
        Validity
            Not Before: Jun  5 20:56:04 2025 GMT
            Not After : Jun  4 21:01:04 2026 GMT
        Subject: CN=05DD236EB982985336FCBDDE92186AB88D451D9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:6e:8f:e7:6f:e6:39:75:82:d8:10:1e:ad:
                    b0:b7:3f:77:23:d5:8d:cc:43:dc:c2:4f:21:cc:07:
                    87:15:b3:32:38:12:17:0b:3f:5e:34:d9:c3:0e:ca:
                    30:55:46:2f:6c:8c:6b:0c:b2:7f:ec:30:1a:ad:24:
                    3f:98:eb:dc:45:69:a0:ad:d2:70:00:c8:74:05:f9:
                    03:38:c9:ea:5d:8d:32:7b:d0:61:1b:c4:ed:93:74:
                    b6:1b:22:c1:56:2f:b5:bf:c7:72:e9:c7:19:46:5a:
                    65:76:14:5a:e4:b3:6b:4d:05:76:28:64:c1:dd:aa:
                    eb:41:13:c6:9b:c5:1f:77:63:88:f4:77:8b:d3:ce:
                    13:75:81:bf:5e:91:7d:e2:bb:c9:10:c4:9e:5f:3b:
                    f1:77:fe:75:f3:fe:7f:8c:f2:db:f6:87:18:23:12:
                    01:f5:49:45:ae:fe:1e:e4:ac:91:8c:c1:41:98:8a:
                    54:55:ad:f1:d2:67:4f:e5:4c:87:f0:30:3d:8f:15:
                    c2:02:75:e1:fc:4c:c4:6b:01:31:88:02:64:43:4b:
                    f1:0a:2d:6d:68:2f:c2:53:de:b6:74:66:1b:b8:99:
                    e4:7e:1d:6a:33:db:ea:9d:93:64:f9:c8:33:90:3d:
                    07:1c:15:bc:fc:6c:90:6b:18:28:da:3a:ca:e0:82:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DD:23:6E:B9:82:98:53:36:FC:BD:DE:92:18:6A:B8:8D:45:1D:9E
            X509v3 Authority Key Identifier:
                keyid:32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a343030303a3a2f33342d3334203d3e20323635343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34e0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0b:98:12:0c:e0:b0:47:b4:9d:35:e5:06:88:74:7b:25:14:46:
         16:bf:f5:cb:f1:0c:cb:5b:97:3e:0f:e8:58:71:9d:6c:dc:d2:
         53:5d:b6:2c:72:a9:ed:99:ff:9f:6e:82:8d:f3:0c:28:9c:58:
         28:7a:76:af:46:27:12:b5:c4:05:4e:b9:ab:2d:aa:ae:cd:c5:
         32:c9:52:1d:d0:1e:c3:3d:0d:11:03:83:7a:13:bb:2a:52:9a:
         2d:be:f5:ca:d2:ca:14:2b:db:cf:cf:3e:f4:ca:0b:e3:d5:9d:
         76:40:b1:67:1f:7f:36:5f:23:0e:9c:71:98:bc:58:15:00:f1:
         d2:ea:8a:28:ef:41:ed:60:eb:7a:35:26:53:f7:72:2f:c3:b5:
         ca:ce:ae:70:46:4f:9e:18:54:f9:a2:c8:dd:93:83:f5:97:7f:
         14:43:de:8e:ff:42:98:81:b1:55:ad:d5:20:4f:11:da:9b:39:
         08:b9:62:1c:88:f6:c4:85:0d:03:2e:9b:8c:b7:5e:ed:41:2f:
         b8:cd:c3:04:93:73:9c:36:51:11:d9:ec:30:5f:eb:bb:40:80:
         ed:57:4c:74:07:cc:0a:e1:90:d4:bf:e5:24:1c:bb:61:83:6b:
         05:8e:5b:cf:76:3d:1b:00:79:56:1a:df:28:c8:d5:60:ae:53:
         ab:e9:01:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:21 2025 by rpki-client