Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a3a2f33332d3333203d3e20323730363032.roa
File:                     323830343a366538343a3a2f33332d3333203d3e20323730363032.roa (raw, json)
Hash identifier:          x90E804jYtpZ1N2fb3NnNcMI8HBIhBScJONAe5gC4CQ=
Subject key identifier:   78:EA:AB:0D:40:04:0C:EA:9F:9A:A5:7F:D2:A5:4A:60:A4:50:BA:DA
Certificate issuer:       /CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
Certificate serial:       6441C81D079DF58CF40701D23EBCB24B55565333
Authority key identifier: EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a3a2f33332d3333203d3e20323730363032.roa
Signing time:             Wed 25 Jun 2025 12:43:09 +0000
ROA not before:           Wed 25 Jun 2025 12:38:09 +0000
ROA not after:            Wed 24 Jun 2026 12:43:09 +0000
asID:                     270602
IP address blocks:        2804:6e84::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl
                          rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 02:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:41:c8:1d:07:9d:f5:8c:f4:07:01:d2:3e:bc:b2:4b:55:56:53:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
        Validity
            Not Before: Jun 25 12:38:09 2025 GMT
            Not After : Jun 24 12:43:09 2026 GMT
        Subject: CN=78EAAB0D40040CEA9F9AA57FD2A54A60A450BADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:f6:f3:f1:bb:bb:34:b4:f7:03:b0:af:34:
                    83:53:c2:46:14:45:22:64:5d:c4:a7:f0:eb:ad:65:
                    2a:78:8b:94:68:03:7a:a0:2a:2f:08:3e:1d:22:c4:
                    f2:20:f5:a1:da:ff:40:6d:f3:d3:aa:a6:80:ac:10:
                    c8:e3:7f:4e:1e:6f:9b:d6:1d:8c:6e:88:73:95:cc:
                    c6:35:a6:70:a4:bc:6b:d3:bd:59:5c:c4:99:5d:c4:
                    cc:f3:cb:a2:94:c3:ac:db:5d:fa:a3:54:c4:f0:d5:
                    70:c0:f4:0c:0c:61:d4:5b:ff:82:40:f0:e3:a2:4f:
                    16:8d:28:53:bd:d7:fb:f2:06:f1:41:79:65:01:ff:
                    5a:26:dc:84:7e:d7:b1:d6:7d:86:c7:f5:94:21:fc:
                    4b:db:02:47:25:dc:ec:97:e4:70:04:6e:52:8c:23:
                    0b:43:5e:67:28:54:a4:47:c7:aa:a8:58:72:44:f7:
                    bf:2e:b4:00:a6:fb:23:cb:42:00:56:4d:5a:1c:a6:
                    b7:f7:86:4e:61:d4:c1:d0:6f:c2:c7:4b:9f:1a:c3:
                    37:2c:5f:c6:6f:23:c7:ba:de:f8:39:53:ad:f7:ff:
                    3a:7e:f3:93:eb:2c:75:fd:af:f3:85:a5:34:98:28:
                    96:26:f6:c0:38:66:b7:38:6b:22:10:be:d6:c6:be:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EA:AB:0D:40:04:0C:EA:9F:9A:A5:7F:D2:A5:4A:60:A4:50:BA:DA
            X509v3 Authority Key Identifier:
                keyid:EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a3a2f33332d3333203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e84::/33

    Signature Algorithm: sha256WithRSAEncryption
         15:c3:ac:5c:70:f4:72:ae:b9:c3:7d:08:e1:59:95:ce:68:33:
         b5:16:8d:04:a1:e0:e5:72:1a:c8:d6:b9:9c:18:a0:9c:f6:23:
         63:6e:d4:06:fc:2f:d3:d4:ad:06:0a:bb:7c:8b:ee:91:82:74:
         9b:60:94:65:25:18:88:4f:1b:cb:d0:13:5a:8d:5d:60:75:c6:
         19:f7:12:f0:f7:71:a7:0e:83:45:00:f2:a7:dc:e2:e0:91:78:
         ac:43:82:e2:67:60:0f:a7:82:5c:d3:57:63:a5:6c:ba:3f:f9:
         d9:45:a3:eb:11:6a:b5:28:a7:73:cd:18:8c:ab:69:7b:36:ef:
         3b:10:3d:b7:e2:de:df:b7:07:9e:5d:c9:11:97:78:8b:00:60:
         c5:6f:07:40:af:7c:7d:f4:9c:5c:d3:09:e8:a4:cb:ca:d0:57:
         f0:ee:f5:32:e4:62:13:c3:cf:4a:61:29:90:e1:70:a9:cb:43:
         03:99:3d:c6:8f:7d:36:bd:42:e5:d0:8b:8b:f9:0a:94:52:b8:
         49:44:d2:b0:4c:c3:6b:bd:a5:d6:e2:14:36:bb:b0:14:e5:db:
         62:9b:5b:67:65:1e:39:e7:a1:fd:85:7c:83:4d:52:b3:d7:41:
         50:68:5a:55:22:f5:a7:f9:13:24:93:5a:d4:1c:d8:f9:b7:63:
         3e:ef:43:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:48:00 2025 by rpki-client