Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a383030303a3a2f33342d3334203d3e20323635343836.roa
File:                     323830343a333465303a383030303a3a2f33342d3334203d3e20323635343836.roa (raw, json)
Hash identifier:          6mk1VOE4VOvb63uNwwW58W2PQRmGYAMUGRYeFxQc7SU=
Subject key identifier:   D5:DB:EE:33:0E:79:C0:C5:B4:99:4F:C8:CF:1E:4F:16:D1:9D:99:D8
Certificate issuer:       /CN=32D842DEE7974134E5B4C88618DC7A30F4029092
Certificate serial:       3D32C62944488C5001E094F8A05AD5BE55F79340
Authority key identifier: 32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a383030303a3a2f33342d3334203d3e20323635343836.roa
Signing time:             Thu 05 Jun 2025 21:01:06 +0000
ROA not before:           Thu 05 Jun 2025 20:56:06 +0000
ROA not after:            Thu 04 Jun 2026 21:01:06 +0000
asID:                     265486
IP address blocks:        2804:34e0:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl
                          rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:32:c6:29:44:48:8c:50:01:e0:94:f8:a0:5a:d5:be:55:f7:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D842DEE7974134E5B4C88618DC7A30F4029092
        Validity
            Not Before: Jun  5 20:56:06 2025 GMT
            Not After : Jun  4 21:01:06 2026 GMT
        Subject: CN=D5DBEE330E79C0C5B4994FC8CF1E4F16D19D99D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d9:79:f8:c3:33:41:5f:3a:89:7a:de:24:89:
                    04:88:bf:66:f9:fe:50:1b:35:22:0e:03:88:5e:72:
                    75:30:21:6d:b1:d9:28:85:96:0b:c3:39:16:d4:43:
                    4d:61:37:60:48:a8:d4:55:c7:e5:86:68:00:91:c9:
                    f2:87:d8:62:b2:1a:b1:24:d6:80:5a:38:d1:44:de:
                    e4:16:c5:45:bb:0d:7a:e6:22:fb:41:da:5a:c7:f0:
                    59:65:fa:ed:67:a5:9b:9c:7f:ef:1f:96:08:b9:00:
                    20:ab:5a:4b:2f:73:fe:36:c5:fb:34:e8:41:f9:14:
                    70:e4:48:90:03:a7:75:03:a6:f9:94:66:12:56:00:
                    13:e9:23:c3:b2:60:db:6d:90:6f:e0:53:1f:f5:ad:
                    1d:c5:78:99:29:9b:2a:1d:d6:1e:8b:54:21:4b:14:
                    9a:8a:07:3b:c2:1a:9f:cb:31:04:35:44:73:91:49:
                    7a:a7:0d:91:98:21:fa:df:db:da:d5:7f:a5:b2:d0:
                    e0:fb:1e:92:11:0c:b7:5f:dd:9a:40:63:43:9e:25:
                    f7:c3:e8:16:a2:bb:d6:b7:a2:4d:8d:ae:36:00:f2:
                    0f:f8:db:e0:ac:c2:33:a6:de:a9:13:7f:55:7b:12:
                    65:3c:32:0f:29:46:8f:3b:06:6f:23:e8:0a:be:ce:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DB:EE:33:0E:79:C0:C5:B4:99:4F:C8:CF:1E:4F:16:D1:9D:99:D8
            X509v3 Authority Key Identifier:
                keyid:32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a383030303a3a2f33342d3334203d3e20323635343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34e0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:03:cd:10:ba:07:11:bc:4a:94:15:af:68:e8:83:69:fa:1f:
         13:07:0b:c3:57:7c:cd:27:47:00:bd:3e:d6:02:15:61:7a:0c:
         d4:06:75:6b:03:8c:6b:d1:b5:99:bb:66:96:f1:21:05:fc:d6:
         9a:4f:d5:3f:d1:44:48:2b:07:13:98:ae:b0:1a:94:40:73:fd:
         b3:5f:35:4d:92:de:10:1e:a5:8f:69:52:c7:f2:30:cc:2e:4b:
         71:ba:b7:96:64:13:d0:f6:7b:63:95:24:88:0e:fc:0f:92:ee:
         a7:7a:55:4f:09:55:66:af:eb:d8:ce:45:f5:d5:4c:7c:28:46:
         54:24:58:b2:19:6c:a6:b5:76:87:c8:4c:7a:75:76:b9:13:e7:
         af:bb:ce:08:da:cd:55:92:36:58:75:3f:d7:63:4e:6e:c7:19:
         ec:ec:3c:ee:12:48:d5:d6:59:67:32:12:d8:42:68:d6:a0:df:
         0d:99:7e:49:22:4f:23:1a:d5:6c:fc:6d:64:f7:99:86:a1:cc:
         68:d2:79:5b:0b:a5:31:b8:a0:a5:39:97:c8:93:41:fb:cb:60:
         4a:b5:83:fd:9b:1b:cf:c1:d5:37:ad:8a:4c:b5:82:cd:d8:a1:
         21:1b:0c:2e:1a:d0:86:8e:0f:e3:ef:04:97:72:1e:29:1c:f6:
         b3:81:fc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:05:18 2025 by rpki-client