Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/323830343a363734633a383030303a3a2f33332d313238203d3e20323639363139.roa
File:                     323830343a363734633a383030303a3a2f33332d313238203d3e20323639363139.roa (raw, json)
Hash identifier:          gh9EOkYS/3JD6kBLiUSfGu+iMb6uTNoM6V8Hpat72Pw=
Subject key identifier:   5E:55:36:5D:AF:E0:8F:E4:CF:87:10:E8:04:CF:C4:9F:1B:1B:9B:1B
Certificate issuer:       /CN=DE6F592A3E21D9409FE566090C70760D8A8829F9
Certificate serial:       25EF8B4C72C9E5F55372AD6EF90C4C951FAFE74E
Authority key identifier: DE:6F:59:2A:3E:21:D9:40:9F:E5:66:09:0C:70:76:0D:8A:88:29:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE6F592A3E21D9409FE566090C70760D8A8829F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/323830343a363734633a383030303a3a2f33332d313238203d3e20323639363139.roa
Signing time:             Fri 02 May 2025 20:23:20 +0000
ROA not before:           Fri 02 May 2025 20:18:20 +0000
ROA not after:            Fri 01 May 2026 20:23:20 +0000
asID:                     269619
IP address blocks:        2804:674c:8000::/33 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/DE6F592A3E21D9409FE566090C70760D8A8829F9.crl
                          rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/DE6F592A3E21D9409FE566090C70760D8A8829F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE6F592A3E21D9409FE566090C70760D8A8829F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 15:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ef:8b:4c:72:c9:e5:f5:53:72:ad:6e:f9:0c:4c:95:1f:af:e7:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE6F592A3E21D9409FE566090C70760D8A8829F9
        Validity
            Not Before: May  2 20:18:20 2025 GMT
            Not After : May  1 20:23:20 2026 GMT
        Subject: CN=5E55365DAFE08FE4CF8710E804CFC49F1B1B9B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bd:3d:14:e6:1d:28:ef:5c:5b:a6:89:88:f1:
                    ef:d9:41:51:c3:6b:1a:37:dc:68:81:13:c4:47:98:
                    07:63:05:95:16:70:b1:01:16:6a:3a:77:d9:28:6e:
                    9c:c4:19:b6:18:d5:51:49:b3:bd:e9:00:ce:38:de:
                    82:fc:39:82:ca:00:d8:05:dc:5e:b5:97:4b:43:5b:
                    1e:eb:99:46:9b:c3:1a:a8:33:b6:67:e6:b1:4b:10:
                    eb:13:dc:9f:9d:66:24:7b:60:52:c1:6c:5a:87:3a:
                    8f:e5:4a:fa:37:1d:a0:ab:e4:8f:b9:da:c0:a5:e7:
                    31:82:f9:64:89:9c:3a:34:ac:26:89:3f:20:a4:63:
                    61:d1:1d:83:b2:09:09:7c:d7:2f:85:3f:a4:7b:35:
                    67:43:78:4f:f6:13:62:54:da:bb:c1:ef:48:b7:ca:
                    bd:57:8b:24:35:b4:f6:9f:c7:d0:e9:eb:65:88:13:
                    f5:01:f7:11:10:9f:b6:00:1e:a0:f9:c1:45:80:da:
                    be:44:17:6f:3e:2f:38:68:62:17:2e:8a:dd:43:cc:
                    47:79:a2:fc:ab:b9:b5:f6:1f:4c:77:30:27:42:2c:
                    d2:49:d8:fe:ba:9d:1e:14:8f:53:e8:c1:fe:60:3c:
                    97:f8:4b:23:d5:d2:a4:48:72:04:00:96:83:ce:f9:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:55:36:5D:AF:E0:8F:E4:CF:87:10:E8:04:CF:C4:9F:1B:1B:9B:1B
            X509v3 Authority Key Identifier:
                keyid:DE:6F:59:2A:3E:21:D9:40:9F:E5:66:09:0C:70:76:0D:8A:88:29:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/DE6F592A3E21D9409FE566090C70760D8A8829F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE6F592A3E21D9409FE566090C70760D8A8829F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WPKMt1r3YnQ5R4QFpUrQj4uhC9V3ua2TRRAehXbAMbk/0/323830343a363734633a383030303a3a2f33332d313238203d3e20323639363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:674c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         dc:2e:96:2d:70:53:c3:5d:a4:bb:e9:4c:2a:9e:96:80:9f:f6:
         d5:10:01:c3:94:cc:b8:f9:5e:f6:b3:79:55:13:1f:95:e9:b8:
         0f:90:40:f4:cb:48:b1:2b:1f:6f:9c:b8:18:c8:28:c6:3c:5e:
         cb:e2:8c:e7:14:ec:23:df:cb:12:78:50:2b:17:d4:27:6d:1d:
         0d:f4:80:f4:a6:68:ec:60:cc:52:6e:11:fe:9a:c9:b1:d7:13:
         b8:d5:47:5a:60:8b:83:4f:7c:33:40:29:66:8e:89:71:37:5e:
         06:bb:9f:c6:87:21:a5:e1:9d:f9:d2:3f:d0:ab:49:77:5c:ca:
         97:34:b9:a6:93:51:a6:57:2b:56:71:40:fc:33:e9:b8:1d:45:
         86:14:a5:19:b7:4e:43:f0:02:c7:56:02:f3:dc:de:75:94:56:
         e2:20:ee:52:a8:a3:46:46:c0:2c:10:19:d2:ad:65:18:ae:d0:
         c8:5f:94:0c:37:a0:0e:da:72:dc:02:65:c6:c9:da:a8:d7:b8:
         9f:f1:db:e9:f0:4a:53:e6:d4:ea:03:5b:53:b4:44:86:5a:28:
         99:5d:c0:bb:69:45:39:62:bd:d0:41:84:a5:cd:ac:5a:17:51:
         44:16:41:32:96:d7:ef:ad:cd:76:04:8d:ab:bb:f5:e6:f0:bc:
         2e:18:4f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:36:15 2025 by rpki-client