Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/323830343a376533633a3a2f33322d3438203d3e20323731363131.roa
File:                     323830343a376533633a3a2f33322d3438203d3e20323731363131.roa (raw, json)
Hash identifier:          FnnUt51cnbcVEDy6mGOqLg8e7zpE7bJ7/P2AG1WsOA4=
Subject key identifier:   F9:B3:9C:8D:99:B4:B2:7D:72:E9:BD:A7:60:D1:6C:66:66:74:F6:18
Certificate issuer:       /CN=D6BFBE91A9C1216A37227717AD547135C4C3280E
Certificate serial:       7735591FE346CF30B356B414BA0A382CF52F097C
Authority key identifier: D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/323830343a376533633a3a2f33322d3438203d3e20323731363131.roa
Signing time:             Wed 07 May 2025 20:31:25 +0000
ROA not before:           Wed 07 May 2025 20:26:25 +0000
ROA not after:            Wed 06 May 2026 20:31:25 +0000
asID:                     271611
IP address blocks:        2804:7e3c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.crl
                          rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 05:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:35:59:1f:e3:46:cf:30:b3:56:b4:14:ba:0a:38:2c:f5:2f:09:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BFBE91A9C1216A37227717AD547135C4C3280E
        Validity
            Not Before: May  7 20:26:25 2025 GMT
            Not After : May  6 20:31:25 2026 GMT
        Subject: CN=F9B39C8D99B4B27D72E9BDA760D16C666674F618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ee:90:dc:ea:e4:b3:e6:68:dc:43:93:70:c8:
                    ae:e9:c5:2b:18:85:e0:7a:e7:a1:24:59:1c:0c:6c:
                    d7:eb:c9:54:a3:a2:2e:28:54:c2:0d:16:34:23:1b:
                    70:06:bc:05:65:66:97:a2:ea:2a:ae:af:90:01:d9:
                    71:87:1d:c4:36:ab:d5:69:d2:dc:3e:00:b7:56:55:
                    9b:4a:33:32:f1:8d:3a:70:f1:28:97:f4:86:f3:a3:
                    9f:d2:2b:48:14:c2:f1:36:62:da:1c:13:7d:1d:1b:
                    7b:92:d0:2d:a7:05:ca:ba:80:d5:a8:7f:6b:6d:4a:
                    85:a1:70:80:58:e1:95:a1:32:b8:f1:12:79:74:69:
                    0d:9c:81:c6:24:f0:f1:84:2d:2a:b9:82:5b:c2:c5:
                    82:c9:62:db:7f:52:f7:ee:4e:85:4d:a3:0a:2c:f9:
                    e3:e7:c8:9b:18:9c:37:fe:24:20:c0:5d:bb:74:64:
                    15:9e:7d:f2:e7:f0:a2:62:46:b9:05:0d:3c:88:59:
                    42:e1:85:b7:81:92:7b:d9:cf:06:e9:33:4f:4c:c6:
                    0e:06:c6:36:30:4b:e0:3e:e6:9b:b2:bf:35:c1:78:
                    c4:bf:60:7e:7d:2a:6e:9d:fb:b3:36:61:31:0b:d8:
                    2e:cc:59:17:fe:2f:f3:1b:9d:54:23:87:be:a5:df:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B3:9C:8D:99:B4:B2:7D:72:E9:BD:A7:60:D1:6C:66:66:74:F6:18
            X509v3 Authority Key Identifier:
                keyid:D6:BF:BE:91:A9:C1:21:6A:37:22:77:17:AD:54:71:35:C4:C3:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/D6BFBE91A9C1216A37227717AD547135C4C3280E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BFBE91A9C1216A37227717AD547135C4C3280E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oYuNGVC3nQwTaREUAxuQkjhMksSSbTusrb4C5ejYMJT/0/323830343a376533633a3a2f33322d3438203d3e20323731363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:06:11:41:64:7e:e7:8e:3c:44:12:47:9c:34:c7:7c:96:e7:
         f1:3f:f9:e4:19:3c:cf:8d:ed:c4:be:c0:7b:53:c9:c3:43:f5:
         bc:31:a7:19:5a:97:ee:38:1f:a4:48:41:d1:b8:af:ff:56:17:
         9d:63:45:ff:d6:b2:d1:7d:66:89:0a:87:d9:da:2d:c0:0a:33:
         a6:cd:37:67:d9:51:c8:cc:be:65:cf:56:98:16:6b:9a:f4:dc:
         f2:5c:e5:54:93:82:53:c4:b4:56:35:bd:d1:e3:88:7b:b0:43:
         f6:2e:c5:42:0c:22:8f:d3:f7:fb:cb:4d:8d:67:c7:b9:ca:34:
         81:f3:d1:8f:02:34:94:59:a7:13:bc:3c:c1:29:56:79:6b:62:
         67:5e:51:4c:a1:0c:38:a6:61:db:4f:40:3b:56:6b:a8:a0:a1:
         d2:d7:fc:60:98:93:28:a0:09:ec:77:65:52:f4:6a:c8:ed:45:
         a7:d2:aa:1c:7b:ad:88:fe:86:e5:b5:16:0e:33:da:de:4e:ac:
         8d:2d:13:95:a9:90:19:d0:49:bd:e1:35:7e:6a:0e:97:9a:79:
         15:e9:79:34:65:c2:a6:69:a2:cb:c5:c8:cd:cd:5a:7f:6a:84:
         4a:6f:bb:a8:7b:19:bb:4b:5a:a4:a5:60:6c:cd:4b:16:80:19:
         0f:b4:c4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:18:54 2025 by rpki-client