Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/323830343a373761343a3a2f33322d3332203d3e20323731313930.roa
File:                     323830343a373761343a3a2f33322d3332203d3e20323731313930.roa (raw, json)
Hash identifier:          qsRafcjJj+s2kDsDgJnWZ0Q5nBOrLVcx6L+RmAUGULI=
Subject key identifier:   6C:6E:26:DA:89:2E:4F:4D:A9:01:94:86:24:F2:58:DB:90:13:25:36
Certificate issuer:       /CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750
Certificate serial:       CE76B8B5990DCF9B9BAE1694971D758A9AE6A1
Authority key identifier: 2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/323830343a373761343a3a2f33322d3332203d3e20323731313930.roa
Signing time:             Tue 29 Apr 2025 04:36:05 +0000
ROA not before:           Tue 29 Apr 2025 04:31:05 +0000
ROA not after:            Tue 28 Apr 2026 04:36:05 +0000
asID:                     271190
IP address blocks:        2804:77a4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl
                          rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 04:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ce:76:b8:b5:99:0d:cf:9b:9b:ae:16:94:97:1d:75:8a:9a:e6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D9C53D64D9C12AB17ACA86EDB3E8D348B072750
        Validity
            Not Before: Apr 29 04:31:05 2025 GMT
            Not After : Apr 28 04:36:05 2026 GMT
        Subject: CN=6C6E26DA892E4F4DA901948624F258DB90132536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b0:db:c7:cb:f4:fd:63:21:fd:fd:d6:42:60:
                    14:0d:b3:3d:e9:93:55:8c:c3:83:e6:fe:f6:04:39:
                    8e:0e:1b:ce:5c:50:df:d6:6a:88:09:63:c0:43:74:
                    28:e1:d0:37:31:4f:63:49:cf:91:4e:46:32:63:33:
                    8d:90:86:68:05:df:1d:be:5a:ed:13:ea:4b:35:4e:
                    44:a1:bd:10:60:e1:a7:8b:26:95:5e:7d:ff:5b:a9:
                    98:2f:28:7e:08:77:37:07:d9:2c:dd:00:8d:0f:a0:
                    32:26:ec:f3:f4:0f:f5:b2:f6:d5:fa:8f:32:57:80:
                    be:d9:41:f7:ca:81:60:34:93:e4:7c:3f:81:0a:13:
                    02:7f:97:ea:36:6a:b2:24:44:02:a7:00:37:2c:83:
                    58:b7:45:da:00:9d:2d:86:7f:86:6a:7c:e3:1f:ff:
                    32:32:ee:6a:88:66:7c:3f:4e:9e:fc:14:6f:b1:43:
                    ae:5a:32:ca:e4:f8:3d:e8:a8:09:4e:dd:f3:05:15:
                    50:84:b8:ef:57:ed:cb:63:fc:cb:6c:4a:10:50:82:
                    05:8e:53:fc:40:0f:f9:63:92:6a:fe:f3:4a:51:d3:
                    fc:fe:d2:21:46:7e:fe:1c:9b:86:ec:24:8d:1e:b1:
                    3a:4c:2f:72:c7:2c:db:25:29:35:30:f0:8b:26:4b:
                    1c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6E:26:DA:89:2E:4F:4D:A9:01:94:86:24:F2:58:DB:90:13:25:36
            X509v3 Authority Key Identifier:
                keyid:2D:9C:53:D6:4D:9C:12:AB:17:AC:A8:6E:DB:3E:8D:34:8B:07:27:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D9C53D64D9C12AB17ACA86EDB3E8D348B072750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqzB76RAGpcQfvpL8JbTJJPYsyAe6UpxRmhSc4EJUZnw/0/323830343a373761343a3a2f33322d3332203d3e20323731313930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:77a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:78:a5:1b:0e:13:fc:68:7e:c5:ee:25:46:13:9b:ae:03:e6:
         7d:d7:d6:42:78:ee:c3:92:f1:95:83:f4:7d:cf:34:0f:31:f6:
         c9:58:ed:a2:3e:7a:d6:90:96:72:1e:ba:2c:5f:ae:7a:77:49:
         db:e7:c5:14:c3:1f:2d:18:48:4a:a8:98:0b:d8:d6:aa:f5:55:
         b5:54:74:6d:c4:b5:97:e7:e4:71:07:ca:68:f5:eb:3d:d1:27:
         cf:2f:a9:da:bd:f5:da:d6:2b:8b:d4:92:d0:0f:61:f1:68:e5:
         42:ee:27:ac:21:29:29:f6:7c:64:85:6c:3a:fd:6e:f6:79:08:
         c8:d0:a5:f2:c3:ca:5b:11:9c:12:2a:86:0e:39:62:7d:de:51:
         9f:89:52:75:e8:4a:12:b8:52:44:eb:25:66:a2:7e:83:7d:0d:
         e6:f4:cb:59:7f:e7:da:fc:04:b2:81:fe:20:c7:7a:65:3f:0b:
         8f:c0:33:bf:6e:95:1f:23:83:16:04:34:09:3b:58:ec:97:f8:
         d9:c9:5b:55:51:7f:ec:e4:d2:33:6c:5d:fd:e6:36:50:8d:cc:
         92:c2:7b:b0:62:9d:cd:af:74:48:86:5c:81:8a:cb:e8:59:65:
         7c:39:6a:96:6f:65:53:2c:9b:bb:20:58:c9:ff:b4:65:25:f4:
         8f:ef:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:26:19 2025 by rpki-client