Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a343763303a3a2f33322d3332203d3e203238323230.roa
File:                     323830343a343763303a3a2f33322d3332203d3e203238323230.roa (raw, json)
Hash identifier:          R/k8pi4fsQNg8Wu8CtzHxKeYM1rgtTrB7QYEgwRr7r4=
Subject key identifier:   6E:C9:B8:37:63:FB:B8:74:BA:6D:B3:1B:0D:36:AE:C3:18:78:B7:DB
Certificate issuer:       /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial:       2016676204904A1BB990ACA18D0FAA66133F8743
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a343763303a3a2f33322d3332203d3e203238323230.roa
Signing time:             Fri 09 May 2025 12:58:42 +0000
ROA not before:           Fri 09 May 2025 12:53:42 +0000
ROA not after:            Fri 08 May 2026 12:58:42 +0000
asID:                     28220
IP address blocks:        2804:47c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
                          rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 01:12:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:16:67:62:04:90:4a:1b:b9:90:ac:a1:8d:0f:aa:66:13:3f:87:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
        Validity
            Not Before: May  9 12:53:42 2025 GMT
            Not After : May  8 12:58:42 2026 GMT
        Subject: CN=6EC9B83763FBB874BA6DB31B0D36AEC31878B7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:a6:b9:5d:f7:60:a0:0d:f0:ab:28:b0:ab:
                    72:fd:14:7f:39:f4:5b:e2:76:74:04:8f:9b:37:b1:
                    4c:c5:9d:27:54:62:47:e6:0c:ee:65:92:62:17:98:
                    6a:cd:8c:15:75:c6:78:23:46:54:4f:86:d3:f3:d5:
                    af:cb:11:40:d1:c2:08:61:5f:b8:fd:f7:d7:62:48:
                    3e:b4:79:73:e4:fa:71:1a:60:01:2a:6d:91:73:f8:
                    02:4a:3d:71:74:99:c0:89:7e:d0:6f:fd:99:67:76:
                    12:aa:05:a4:a6:2d:f2:d3:85:9a:8d:0f:dc:03:72:
                    22:73:68:d4:2b:48:50:41:54:3f:03:99:ef:8d:bd:
                    c2:34:04:b0:dc:60:22:ee:e3:ad:e9:1c:ac:9b:cf:
                    c6:ec:2a:39:3d:5e:3b:f8:c3:97:db:4f:02:87:03:
                    f9:04:71:7d:e9:73:73:dd:8f:a4:b0:e1:bb:ae:1a:
                    c7:de:0e:70:84:79:3a:53:e5:09:dc:3d:26:bc:db:
                    73:8a:fc:dd:28:df:1c:bd:59:23:d7:32:63:87:f6:
                    3d:59:e2:c5:4a:db:97:e6:35:5a:d6:1a:05:0b:5e:
                    fa:07:f7:13:3c:c7:81:38:7f:56:9f:75:ed:c7:e7:
                    13:b0:ef:ae:4b:d6:a1:8e:90:0b:3d:13:b8:9c:74:
                    ac:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C9:B8:37:63:FB:B8:74:BA:6D:B3:1B:0D:36:AE:C3:18:78:B7:DB
            X509v3 Authority Key Identifier:
                keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/323830343a343763303a3a2f33322d3332203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:17:39:23:f2:08:f6:1b:20:3e:c0:e5:39:68:40:28:6d:ca:
         5d:80:79:96:4b:b5:b3:10:f3:e3:cc:cb:c8:2c:ca:72:b1:0a:
         e8:cf:43:af:c4:e2:1c:28:56:66:eb:6a:e6:64:3b:cf:cd:be:
         ff:38:b5:6d:71:ef:21:07:9f:88:a9:dd:c0:1a:13:3a:ab:5d:
         e9:f6:5d:76:45:d7:4c:dc:12:d9:44:f8:ee:49:10:99:99:7e:
         f9:75:86:04:a9:da:5d:ea:7b:2f:29:94:b2:da:7d:57:82:94:
         ab:10:4f:dd:20:c2:4c:e0:a6:b2:5a:43:ce:dc:ea:d7:25:c2:
         62:a5:b5:ef:42:e0:d9:8b:63:cf:eb:e3:b2:00:b9:80:b1:60:
         14:25:17:d7:f2:0f:be:09:f1:77:fb:a1:47:8f:a7:30:9f:f1:
         c8:82:ec:b6:e0:b0:f6:23:58:14:6d:a5:51:b2:d5:4f:77:3e:
         0a:74:16:0b:bc:7b:53:69:ab:01:cd:cc:a9:e9:9e:ff:03:95:
         0a:5e:49:da:af:d4:ff:14:15:12:4d:51:20:86:37:a8:eb:6c:
         4b:95:dc:18:c3:eb:56:83:73:85:96:47:a9:c4:87:d7:00:0e:
         57:f9:53:3a:2b:fe:74:31:41:e6:5c:17:8a:21:fd:2a:a2:90:
         be:f8:e6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:57:13 2025 by rpki-client