Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33332d3333203d3e20323730363032.roa
File:                     323830343a366538343a383030303a3a2f33332d3333203d3e20323730363032.roa (raw, json)
Hash identifier:          s5brNQui3JdENjEjOHXGB15on+yEthT2U/DhT+icE0I=
Subject key identifier:   A7:6B:5D:86:63:B8:C6:AE:BA:DB:BE:B1:42:FD:46:9A:BE:29:BA:67
Certificate issuer:       /CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
Certificate serial:       595DD0C38220618D24063E129BC877227AF50201
Authority key identifier: EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33332d3333203d3e20323730363032.roa
Signing time:             Wed 25 Jun 2025 12:43:11 +0000
ROA not before:           Wed 25 Jun 2025 12:38:11 +0000
ROA not after:            Wed 24 Jun 2026 12:43:11 +0000
asID:                     270602
IP address blocks:        2804:6e84:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl
                          rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 20:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5d:d0:c3:82:20:61:8d:24:06:3e:12:9b:c8:77:22:7a:f5:02:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
        Validity
            Not Before: Jun 25 12:38:11 2025 GMT
            Not After : Jun 24 12:43:11 2026 GMT
        Subject: CN=A76B5D8663B8C6AEBADBBEB142FD469ABE29BA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7e:9a:11:dc:bf:85:38:49:29:15:e7:8f:e9:
                    96:a9:2b:23:2d:ee:bb:85:4c:22:3d:cf:b2:9f:65:
                    ce:6d:cb:94:f7:e5:49:aa:a4:28:b0:cb:0d:70:d1:
                    dd:f7:41:c5:58:10:92:37:23:4b:7b:d4:8c:55:a9:
                    13:ef:7e:99:5e:0f:82:57:6e:42:b8:02:ec:91:11:
                    c1:78:4f:eb:75:0b:3d:cd:fd:0c:d6:8f:c7:9c:c1:
                    62:8c:e1:d9:64:17:a0:dc:35:16:d4:2f:84:76:c1:
                    f8:2e:5d:47:94:85:d9:d7:7a:55:37:0c:47:c5:93:
                    41:b4:72:1e:ec:cc:26:85:da:b9:f4:07:9f:21:f9:
                    95:25:22:6f:d9:54:8e:31:3a:92:cb:17:62:54:00:
                    8a:a3:99:b1:94:69:7e:c2:1f:7c:c5:4b:21:76:be:
                    0c:b2:e0:07:38:95:c6:48:d3:88:ef:80:90:35:4a:
                    37:dd:d8:c0:7b:ff:8a:83:67:ff:dc:70:78:7a:45:
                    e4:9c:d6:d6:38:a1:78:26:11:5f:f3:a5:28:c5:e3:
                    8f:fd:52:f6:89:7c:83:c7:59:aa:df:b2:a1:15:d8:
                    ae:0e:4d:10:33:65:fc:d1:6f:e4:a9:fe:72:01:85:
                    cd:7d:9b:1d:96:dc:e9:68:59:3c:72:87:81:15:ef:
                    da:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6B:5D:86:63:B8:C6:AE:BA:DB:BE:B1:42:FD:46:9A:BE:29:BA:67
            X509v3 Authority Key Identifier:
                keyid:EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a383030303a3a2f33332d3333203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e84:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:ed:af:9e:f8:0f:29:ab:60:47:7c:34:e1:ab:fc:07:81:08:
         9a:0d:91:a5:85:d7:f2:4a:94:8f:35:4d:de:75:17:b5:59:50:
         0d:50:9f:27:b7:a8:18:74:77:8e:12:2f:55:05:db:1f:7b:5a:
         13:fe:d7:30:ff:ef:38:fa:1e:b8:09:6f:44:b8:fb:7e:c6:51:
         75:b8:ac:ec:59:54:c4:ce:51:cc:7a:71:45:30:9f:61:53:69:
         b5:0f:92:01:e3:99:1b:67:57:51:a2:94:34:66:fe:20:d2:4a:
         59:59:7e:89:43:26:b6:7a:85:30:14:96:fb:5a:f8:6d:bc:7e:
         08:23:b2:f9:7d:f0:2c:ec:dc:27:68:86:79:3d:df:fd:84:6c:
         d6:a9:ba:5c:f9:02:d7:d4:b8:2d:83:01:72:2a:bf:53:f9:35:
         f4:30:60:53:ae:68:e2:6c:d2:d3:a4:5d:42:d6:12:56:53:56:
         a1:13:32:07:b1:27:5f:38:5e:bd:3c:ff:3d:01:da:c9:d0:17:
         36:88:da:c7:ee:51:1c:af:74:d0:1c:37:4e:d3:0c:74:d6:d3:
         9d:4f:1b:c0:3a:2a:0e:ff:2c:91:dd:32:d6:e7:42:49:7a:a3:
         5b:c6:89:a5:43:42:da:7e:cd:42:7a:4b:90:66:4f:be:79:f6:
         e3:c9:63:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:56:38 2025 by rpki-client