Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/323830343a393365383a3a2f33342d3334203d3e20323734383038.roa
File:                     323830343a393365383a3a2f33342d3334203d3e20323734383038.roa (raw, json)
Hash identifier:          LF2Y/1ywklXprmHdgD6qU5zwwvbF48txnbXnSXrAFGU=
Subject key identifier:   ED:FD:16:C9:46:76:80:F0:00:94:6A:D2:B8:C3:33:C3:EF:F0:F3:EB
Certificate issuer:       /CN=301611F5C33A5D1B48E3E813ED7AA04F23EE16E3
Certificate serial:       193CBF2FD555924F472119DCFD03A1281D8EAF15
Authority key identifier: 30:16:11:F5:C3:3A:5D:1B:48:E3:E8:13:ED:7A:A0:4F:23:EE:16:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/323830343a393365383a3a2f33342d3334203d3e20323734383038.roa
Signing time:             Mon 05 May 2025 18:33:03 +0000
ROA not before:           Mon 05 May 2025 18:28:03 +0000
ROA not after:            Mon 04 May 2026 18:33:03 +0000
asID:                     274808
IP address blocks:        2804:93e8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.crl
                          rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 18:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:3c:bf:2f:d5:55:92:4f:47:21:19:dc:fd:03:a1:28:1d:8e:af:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=301611F5C33A5D1B48E3E813ED7AA04F23EE16E3
        Validity
            Not Before: May  5 18:28:03 2025 GMT
            Not After : May  4 18:33:03 2026 GMT
        Subject: CN=EDFD16C9467680F000946AD2B8C333C3EFF0F3EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:d5:76:40:2c:0a:fc:5f:fa:4e:9a:14:6f:
                    54:9c:f1:27:94:1c:09:e0:6a:3b:96:50:ed:28:85:
                    b0:e0:2b:8f:cb:d3:a7:fe:df:7a:30:2e:c1:50:51:
                    8c:63:b7:a3:12:2a:1e:ff:8a:8b:71:94:2e:b6:d4:
                    91:a9:f3:28:d3:fc:45:78:4b:74:e8:bd:59:59:80:
                    88:1c:79:60:7d:07:6f:4f:4b:bd:c8:e5:4b:b8:83:
                    0f:60:7e:7c:64:78:b6:1c:f2:59:05:5b:95:0f:fc:
                    38:e3:b2:e5:93:24:69:10:40:83:13:3e:18:c0:13:
                    67:6a:6b:68:39:2d:91:92:b9:1f:e3:8c:86:66:8f:
                    50:1a:cf:e1:fe:b7:b8:a8:1f:7d:a0:1a:bc:a3:d8:
                    de:b4:fd:28:0c:95:d6:06:3e:39:19:b1:2f:4d:7c:
                    40:9d:7e:ca:16:cf:b9:23:58:bb:1d:52:77:ca:fa:
                    78:dd:1e:d3:76:3f:e9:cb:12:fb:d4:51:06:3e:81:
                    34:ea:78:21:2d:17:f5:25:6e:92:af:6e:c2:38:d7:
                    4d:f8:fc:e1:06:c8:2d:0e:d9:76:42:0c:74:18:98:
                    8c:bd:fd:93:c9:7b:88:80:e1:ea:f3:85:27:7f:fc:
                    20:19:1f:25:2e:4b:c3:75:7d:eb:5d:e3:7b:aa:79:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FD:16:C9:46:76:80:F0:00:94:6A:D2:B8:C3:33:C3:EF:F0:F3:EB
            X509v3 Authority Key Identifier:
                keyid:30:16:11:F5:C3:3A:5D:1B:48:E3:E8:13:ED:7A:A0:4F:23:EE:16:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/301611F5C33A5D1B48E3E813ED7AA04F23EE16E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6LJ8Nw7zCzsLwMW1EFV1HVYQi386ZpPpnTuW9ztwdp9u/0/323830343a393365383a3a2f33342d3334203d3e20323734383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:93e8::/34

    Signature Algorithm: sha256WithRSAEncryption
         29:05:f6:3f:df:c9:21:0d:cb:8e:82:66:ab:15:d5:3a:84:1e:
         57:ea:20:7d:21:3d:a1:23:9c:bc:61:dd:ac:df:ac:a2:b1:9b:
         cb:d0:69:a7:58:99:25:5d:2f:c4:28:46:ac:ce:d3:11:17:68:
         f9:53:6f:3b:ee:15:fd:0b:db:49:0e:39:3f:cb:c4:d8:9f:28:
         1a:eb:8b:db:72:8a:71:a6:83:81:89:6f:68:6c:c0:48:48:8a:
         d7:29:e6:31:e3:bc:42:4f:8d:71:3f:53:d0:ad:f8:f8:ac:54:
         e6:ab:c8:06:50:39:aa:0e:e4:5e:a0:42:60:af:95:d2:2c:cb:
         6c:59:10:f6:58:79:4f:44:d7:e0:94:56:22:bd:4c:8e:05:47:
         6c:a3:3f:fa:0e:51:24:aa:dd:c6:93:e7:f2:e7:af:5d:34:61:
         de:99:2c:ae:c7:b5:89:b5:95:4c:d5:c8:d8:7e:8b:2e:85:e8:
         dd:a2:4d:df:ac:ba:0f:89:df:69:68:9f:c9:62:56:90:62:91:
         c1:5b:02:7e:10:19:64:7f:7c:f9:e7:c9:3c:c6:3b:cf:46:35:
         53:45:00:f3:ca:f3:2d:a1:1f:6b:c6:d8:01:20:52:a1:e4:8e:
         77:a8:23:91:74:7b:09:2d:31:a4:d9:44:5d:f8:2d:64:31:fd:
         cb:34:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:25:53 2025 by rpki-client