Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d3336203d3e20323731323933.roa
File:                     323830343a373933633a3a2f33322d3336203d3e20323731323933.roa (raw, json)
Hash identifier:          iMmUU3s6wqnu+v6zELUgdxr8atiKhuymyA8Zx4bDh9E=
Subject key identifier:   EE:A0:59:02:94:26:FB:01:70:3D:CE:78:20:89:7A:C7:6E:B1:B0:C7
Certificate issuer:       /CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
Certificate serial:       0F4FFB844EFBBC5F6BD822AA7B7A80F3AE989244
Authority key identifier: D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d3336203d3e20323731323933.roa
Signing time:             Thu 15 May 2025 14:00:00 +0000
ROA not before:           Thu 15 May 2025 13:55:00 +0000
ROA not after:            Thu 14 May 2026 14:00:00 +0000
asID:                     271293
IP address blocks:        2804:793c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl
                          rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4f:fb:84:4e:fb:bc:5f:6b:d8:22:aa:7b:7a:80:f3:ae:98:92:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D853C4D5568D20B0919C2E29804E2F4983BCFDF3
        Validity
            Not Before: May 15 13:55:00 2025 GMT
            Not After : May 14 14:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:a0:f0:65:f0:d8:d6:7e:01:4c:b7:87:89:
                    75:25:81:13:a1:3b:f9:1b:62:3e:71:ec:88:b2:0c:
                    86:dc:e8:95:b7:bb:ff:04:40:6d:a0:09:89:4b:6e:
                    bb:3e:b1:ee:48:e4:e3:42:38:88:d5:10:0f:7b:59:
                    2b:f0:24:5b:55:28:45:5d:d8:21:63:94:33:b0:39:
                    b3:60:84:96:3d:db:80:4e:b6:bd:2e:df:2e:94:9d:
                    d0:ea:e2:c1:d6:98:11:6b:ea:13:86:a9:1a:90:ed:
                    5c:5a:68:cf:72:20:b3:64:cc:c0:71:d0:5b:74:8c:
                    6f:36:fe:7d:41:8a:00:7a:9e:e8:8b:0e:99:29:11:
                    36:22:3a:fe:bf:b8:91:c4:e9:45:7a:11:34:8e:42:
                    b0:3b:c8:1c:2f:cc:db:08:51:cb:ce:27:d8:ca:35:
                    84:0e:a5:03:ae:34:c5:fb:c0:e3:e7:44:d0:b4:04:
                    2c:8f:ed:bb:ba:d8:4f:9e:9a:b2:09:28:e1:ce:65:
                    ac:f4:96:85:dd:89:70:b0:6a:d0:65:e1:f5:92:ea:
                    67:47:2d:01:c3:dd:da:1e:e8:76:29:bc:c4:e1:fb:
                    39:5a:6b:3e:35:15:3d:6c:73:fb:99:09:91:f8:1d:
                    d7:36:75:31:6b:a1:9f:b0:f1:fe:ff:ca:ad:ab:87:
                    9b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A0:59:02:94:26:FB:01:70:3D:CE:78:20:89:7A:C7:6E:B1:B0:C7
            X509v3 Authority Key Identifier:
                keyid:D8:53:C4:D5:56:8D:20:B0:91:9C:2E:29:80:4E:2F:49:83:BC:FD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D853C4D5568D20B0919C2E29804E2F4983BCFDF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/0/323830343a373933633a3a2f33322d3336203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:793c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:0e:c5:7e:59:cf:fe:9a:c0:69:c0:5b:3a:1f:07:03:ea:fa:
         34:cc:73:4f:c9:5b:7f:d2:4a:78:3b:b9:8e:7d:6b:db:56:94:
         1a:15:1d:f0:1c:51:31:e8:60:c2:ca:f0:a6:5f:b5:f2:9f:21:
         e6:73:71:9b:6b:4c:99:b1:a5:88:90:eb:20:ff:db:38:f3:ab:
         ef:e4:80:cf:94:87:d1:8e:9b:ee:21:1b:fd:c7:db:31:99:04:
         dd:be:17:39:0f:49:d0:e7:43:95:c0:10:36:dc:72:d7:0c:80:
         c5:bf:c0:2d:1a:9e:4b:af:ff:3e:4f:5f:ee:be:22:3a:d7:ec:
         41:12:40:1f:73:37:8f:8c:28:45:80:92:5e:b6:5e:12:d7:0c:
         fa:e8:e3:ac:6f:cf:19:71:07:72:a3:36:34:50:d1:02:82:7f:
         51:48:0a:ce:34:d0:b7:a7:67:e3:25:07:dd:da:1e:ef:e2:03:
         4a:c7:e4:67:c5:c9:a8:07:b7:2f:d2:2e:31:10:b5:23:1b:40:
         b2:54:b5:d5:ee:f5:df:2b:cb:55:fe:32:45:ce:b9:5f:be:d3:
         4a:5f:93:dd:34:1e:94:c7:61:24:49:87:b6:3a:57:04:5e:7d:
         f3:c4:08:d0:52:24:4e:91:a8:9c:91:af:21:9b:62:dd:5d:56:
         be:90:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:54 2025 by rpki-client