Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/323830343a393231343a3a2f33322d3438203d3e20323734363838.roa
File:                     323830343a393231343a3a2f33322d3438203d3e20323734363838.roa (raw, json)
Hash identifier:          4pd4IgAsC1ugPSRmvpcHwSQFtS4fdUZx2ZOnbqQgNjo=
Subject key identifier:   28:BC:04:D8:73:4B:71:64:54:58:FB:DE:91:B5:CD:4C:97:ED:A7:EF
Certificate issuer:       /CN=E538DA03868F80B528A08C78D7977AF2FFB83D3C
Certificate serial:       2CA732CF7FDCF9AA40C27A2EC2589E07E2972EE1
Authority key identifier: E5:38:DA:03:86:8F:80:B5:28:A0:8C:78:D7:97:7A:F2:FF:B8:3D:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/323830343a393231343a3a2f33322d3438203d3e20323734363838.roa
Signing time:             Wed 07 May 2025 18:23:15 +0000
ROA not before:           Wed 07 May 2025 18:18:15 +0000
ROA not after:            Wed 06 May 2026 18:23:15 +0000
asID:                     274688
IP address blocks:        2804:9214::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.crl
                          rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 13:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a7:32:cf:7f:dc:f9:aa:40:c2:7a:2e:c2:58:9e:07:e2:97:2e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E538DA03868F80B528A08C78D7977AF2FFB83D3C
        Validity
            Not Before: May  7 18:18:15 2025 GMT
            Not After : May  6 18:23:15 2026 GMT
        Subject: CN=28BC04D8734B71645458FBDE91B5CD4C97EDA7EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:04:ca:a0:b8:3e:5d:fd:a4:bd:c9:60:b9:3a:
                    62:23:bb:09:3d:66:fb:6e:b7:7b:7c:ba:5f:10:b8:
                    e4:ae:3e:43:e3:fe:1d:e1:af:f9:a4:08:e2:8c:bb:
                    b3:7f:fd:7c:4c:df:c1:e5:a1:64:4f:3c:06:8a:d2:
                    c1:7a:38:77:78:0c:eb:71:40:d4:5b:92:c1:83:8f:
                    22:36:71:37:3c:f5:a3:bd:b5:3d:7a:86:4f:17:ed:
                    0b:f1:aa:56:fb:80:79:1b:32:e5:11:cb:44:83:1f:
                    b1:19:a5:fa:92:7a:50:8e:f0:39:f1:6f:ed:65:40:
                    75:30:09:36:4b:f3:47:68:b7:dc:96:c9:0f:67:33:
                    5e:09:94:ca:0a:ad:2f:0f:2e:18:a2:1a:a6:db:cc:
                    dc:b6:c7:68:dc:ff:31:11:6e:95:9d:9a:87:68:8d:
                    77:90:4b:ba:b6:f3:50:f4:e3:91:6d:b7:81:1f:52:
                    bd:30:e6:73:8a:14:dc:a7:83:29:14:53:60:d8:c6:
                    30:a9:81:ec:c0:eb:42:66:05:43:09:64:32:7b:f3:
                    f6:fb:16:81:97:7d:e0:35:e8:f2:1c:07:32:ce:c1:
                    c7:63:76:29:58:6c:53:1d:56:6c:db:1d:a7:f7:f7:
                    b3:79:63:dd:54:5c:da:8e:21:3f:e5:1f:10:a8:79:
                    39:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BC:04:D8:73:4B:71:64:54:58:FB:DE:91:B5:CD:4C:97:ED:A7:EF
            X509v3 Authority Key Identifier:
                keyid:E5:38:DA:03:86:8F:80:B5:28:A0:8C:78:D7:97:7A:F2:FF:B8:3D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/E538DA03868F80B528A08C78D7977AF2FFB83D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E538DA03868F80B528A08C78D7977AF2FFB83D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xYiBUTjvvupUkk8pBCiJ8R2VWtzTLYu9JyQMbrCh4NM/0/323830343a393231343a3a2f33322d3438203d3e20323734363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9214::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:14:37:83:ce:80:a9:f4:91:7f:29:88:a8:4b:63:de:f4:73:
         3f:5e:b8:df:a9:0e:8a:8a:82:43:37:66:1e:5e:83:97:f6:59:
         dc:25:ea:cc:fe:c0:54:62:f9:40:ae:e5:58:08:07:46:5b:8a:
         a9:4a:e7:91:36:3d:e6:5d:3c:14:a2:b8:25:29:65:88:06:32:
         e2:3d:14:44:9b:60:90:45:ec:92:37:4d:8f:f0:58:e5:1d:24:
         2a:41:8a:4b:0a:56:0a:1f:68:1e:49:7f:44:3a:3c:5e:f5:bd:
         0e:40:5a:22:6d:f0:b9:90:90:9c:88:ae:c8:e6:1d:a3:7a:4d:
         e5:16:f6:85:c7:29:d2:58:ce:67:f7:bd:97:ad:04:16:29:50:
         67:80:89:ce:68:20:e4:c3:18:55:b8:10:50:a4:32:be:2a:c1:
         d1:2d:04:e9:51:cb:2f:f9:98:08:01:0f:a6:16:7f:ec:cd:2d:
         9f:c5:ae:4d:03:f7:35:c1:21:8f:4a:ea:2a:b3:6d:6a:47:c6:
         75:e1:35:53:ab:e1:61:21:61:8c:f0:f0:bb:83:81:0a:89:97:
         5e:09:a3:30:5d:95:b9:fe:7e:fb:4a:dc:73:bf:eb:ac:f2:c1:
         1b:af:32:87:81:41:5c:ce:89:ac:ff:de:b3:85:e4:ed:fd:ce:
         f4:17:36:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:01:35 2025 by rpki-client