Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/323830343a316535343a3a2f33322d3536203d3e203532373436.roa
File:                     323830343a316535343a3a2f33322d3536203d3e203532373436.roa (raw, json)
Hash identifier:          ADTcvk7C0x33Y2RYKuM0CdXcsQC2etHZuMH6cQfkxbQ=
Subject key identifier:   CB:64:C8:E2:D6:AF:95:67:D3:39:66:A4:B8:88:B9:08:0E:0B:E0:ED
Certificate issuer:       /CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E
Certificate serial:       78B1E911FC70BF620795D54492E476B71561D909
Authority key identifier: DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/323830343a316535343a3a2f33322d3536203d3e203532373436.roa
Signing time:             Sat 17 May 2025 01:37:38 +0000
ROA not before:           Sat 17 May 2025 01:32:38 +0000
ROA not after:            Sat 16 May 2026 01:37:38 +0000
asID:                     52746
IP address blocks:        2804:1e54::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl
                          rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 05:28:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:b1:e9:11:fc:70:bf:62:07:95:d5:44:92:e4:76:b7:15:61:d9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB1F3FA6F420DF0190552FC0972859AF45F368E
        Validity
            Not Before: May 17 01:32:38 2025 GMT
            Not After : May 16 01:37:38 2026 GMT
        Subject: CN=CB64C8E2D6AF9567D33966A4B888B9080E0BE0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:99:55:2e:66:8f:8b:83:9a:e6:25:21:34:
                    26:ac:d5:4b:76:1a:95:d2:54:dd:f5:20:18:e4:9b:
                    c0:f1:36:ae:67:fd:86:b8:47:1f:c8:15:03:dc:72:
                    83:81:9f:f6:75:38:13:03:f8:8c:33:18:33:c9:60:
                    34:41:ba:14:df:89:5d:9a:97:ff:1a:1f:82:e5:34:
                    e1:27:db:62:47:0c:cb:67:bd:db:62:42:f2:85:68:
                    48:f7:8c:45:df:b8:f2:a3:e4:4e:8b:8a:f3:97:af:
                    c3:16:81:e0:07:ca:ab:d8:6c:cf:17:37:74:c2:e1:
                    cb:18:8c:ab:e0:54:44:06:89:93:cf:13:36:10:d2:
                    94:d2:aa:90:d3:0f:9b:4b:f0:4a:50:03:7d:84:a9:
                    5e:9d:4c:60:78:0e:48:9a:28:5c:c7:45:8e:38:ed:
                    db:f8:a8:7e:8f:b2:05:aa:29:6e:95:3e:1b:89:a1:
                    c7:c9:89:2b:ef:03:dd:12:da:71:52:ac:90:c3:68:
                    5a:f3:24:4c:53:f7:87:44:91:95:95:52:e0:f6:c4:
                    1b:24:9a:86:e5:0a:9a:05:f5:f1:c8:b0:9f:22:e6:
                    d2:ef:d7:c7:3e:e4:1f:7e:53:4f:28:ae:6f:77:45:
                    0a:fe:85:ac:38:0d:ae:07:8a:c3:1e:25:c2:11:34:
                    06:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:64:C8:E2:D6:AF:95:67:D3:39:66:A4:B8:88:B9:08:0E:0B:E0:ED
            X509v3 Authority Key Identifier:
                keyid:DF:B1:F3:FA:6F:42:0D:F0:19:05:52:FC:09:72:85:9A:F4:5F:36:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/DFB1F3FA6F420DF0190552FC0972859AF45F368E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFB1F3FA6F420DF0190552FC0972859AF45F368E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EnydhpBVmka4WNCdQwhkfmRnuqE6MFm5x2qY3vposojX/0/323830343a316535343a3a2f33322d3536203d3e203532373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e54::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:0e:d2:4e:e9:c8:00:46:4f:8f:ce:40:16:e7:33:07:85:dc:
         ad:6e:0c:1c:03:dc:4e:d3:7b:9b:2e:f1:85:2a:24:09:33:d8:
         d3:e1:97:7b:3e:df:79:42:88:92:c3:29:7d:b2:cd:28:3d:f2:
         8d:c6:03:80:bf:6e:60:f6:40:82:25:ea:98:8f:c3:58:14:7d:
         6c:3e:1b:26:9f:b6:ce:3e:ae:f0:b9:e4:1d:bc:ae:37:35:16:
         62:b9:2a:61:7d:9f:69:dd:b6:fc:8a:0e:6a:57:25:c7:ab:92:
         e5:17:77:36:86:85:cd:f0:29:8d:5a:e5:77:a3:67:c4:c6:32:
         d3:d6:9d:62:a3:11:a5:21:e5:be:cb:96:55:d6:cc:b6:d4:8c:
         5d:42:01:69:70:fd:d6:a5:b4:7f:39:a1:c6:6c:a6:59:d0:84:
         99:f2:7c:4b:69:7e:e9:c7:23:e5:91:e6:33:a6:c7:0a:d9:64:
         98:50:3c:a6:dc:1f:e4:e4:da:b6:7d:97:30:15:bb:76:f9:ff:
         31:03:84:62:50:ed:a9:8e:9a:f3:a9:90:05:ab:aa:68:4b:ad:
         78:7f:09:79:50:77:07:20:d8:52:3e:b1:3b:94:32:f1:71:1c:
         f1:53:cc:c5:fb:59:90:2f:e2:97:ac:fc:c7:cf:b1:eb:b3:b8:
         d8:75:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:49:43 2025 by rpki-client