Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a3a2f33342d3334203d3e20323730363032.roa
File:                     323830343a366538343a3a2f33342d3334203d3e20323730363032.roa (raw, json)
Hash identifier:          9lJhCOAsEbNyAOUoxUDmROxKJCQmYGH+IfWhMuPcK9E=
Subject key identifier:   FA:E5:B3:48:42:86:41:68:92:CE:1E:EC:9A:F9:D1:CE:68:EF:E0:0B
Certificate issuer:       /CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
Certificate serial:       295EC36D19F8011C3D9C28E75AD5157FDA4DBB2C
Authority key identifier: EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a3a2f33342d3334203d3e20323730363032.roa
Signing time:             Wed 25 Jun 2025 12:43:12 +0000
ROA not before:           Wed 25 Jun 2025 12:38:12 +0000
ROA not after:            Wed 24 Jun 2026 12:43:12 +0000
asID:                     270602
IP address blocks:        2804:6e84::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl
                          rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 02:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5e:c3:6d:19:f8:01:1c:3d:9c:28:e7:5a:d5:15:7f:da:4d:bb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
        Validity
            Not Before: Jun 25 12:38:12 2025 GMT
            Not After : Jun 24 12:43:12 2026 GMT
        Subject: CN=FAE5B3484286416892CE1EEC9AF9D1CE68EFE00B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:63:c9:76:29:3a:d0:79:b7:a6:af:80:b3:
                    d4:60:32:51:5b:70:b7:64:87:8d:8c:59:3b:96:13:
                    39:d5:67:10:0e:3f:5f:5a:16:b1:9b:d8:a1:4c:8c:
                    7b:e2:cc:76:cc:4c:5d:3b:82:26:9b:78:3f:05:a4:
                    0c:7e:18:69:e4:bb:bc:15:8a:60:1e:97:d3:7c:85:
                    d8:82:e2:db:02:50:6a:0b:ff:5b:4a:32:5b:c8:33:
                    1a:e8:43:e1:83:8f:e5:b9:54:34:f9:f0:fb:7b:bc:
                    b8:85:e1:31:9f:d9:f4:c0:40:80:f6:7f:b0:23:1e:
                    d4:ad:d3:3c:e7:51:e8:2e:50:4d:fd:32:56:7e:ba:
                    5f:bc:29:3a:36:df:ee:32:a8:78:06:49:38:fe:0e:
                    2b:97:d4:61:f9:e3:05:d5:5e:e1:4b:92:ae:6b:4a:
                    11:d1:42:61:bc:df:70:0f:9e:6b:f6:99:07:c8:6f:
                    2f:be:7f:d1:34:6f:b3:84:d6:77:2c:57:80:7f:69:
                    83:94:c2:7a:3c:29:0e:11:b0:83:1c:a6:23:ef:1a:
                    07:3e:2a:4a:ee:dc:49:5a:7d:f2:e5:5c:a6:d8:b7:
                    cf:5c:9d:cb:0b:b9:cd:e4:9e:3c:d3:56:60:0f:1e:
                    5f:5b:57:0c:39:40:31:82:b9:54:1c:d7:64:8f:5f:
                    5a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E5:B3:48:42:86:41:68:92:CE:1E:EC:9A:F9:D1:CE:68:EF:E0:0B
            X509v3 Authority Key Identifier:
                keyid:EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/323830343a366538343a3a2f33342d3334203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e84::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:18:7c:76:70:77:56:bd:66:bc:59:7e:d5:a6:61:cf:5d:a9:
         94:89:88:fa:2c:44:29:ec:87:f5:0c:23:76:41:2b:bd:d4:36:
         de:16:d4:f2:67:2f:24:65:fa:ee:a3:8f:47:ab:36:9a:d9:0d:
         1d:8e:9a:c1:b6:ce:be:43:b1:84:72:51:aa:b3:d4:a2:63:ae:
         60:07:af:a7:bb:e3:42:33:b5:9a:e2:48:21:0c:04:07:d6:31:
         b6:17:ad:d5:30:b0:c2:df:fe:43:1a:0f:e8:0c:c0:c4:ca:28:
         39:9f:12:cd:13:8c:7a:e6:3a:f2:c9:05:58:10:37:6e:c8:bd:
         36:8f:35:a6:5e:f2:26:64:4f:b8:38:38:0e:80:cd:55:1a:fe:
         67:34:2b:de:b2:e6:17:39:b8:7d:98:b4:0c:b5:83:bf:40:b2:
         cc:37:69:13:da:1c:37:fb:8c:3e:ff:0f:dc:c7:18:de:25:7a:
         d1:b9:5a:66:05:74:70:78:a2:51:7b:50:2b:a5:20:65:ce:56:
         fe:34:4b:e2:28:ab:bc:db:0e:ce:b8:a8:47:a8:cb:36:19:75:
         f3:7f:cd:47:ef:82:96:df:1a:ca:b4:a7:98:de:07:20:75:f3:
         77:c4:6b:64:e6:b3:a5:e7:a5:eb:6b:aa:1a:c4:61:4b:3b:41:
         60:2d:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:33:21 2025 by rpki-client