Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/323830343a373230303a3a2f33322d313238203d3e20323730383236.roa
File:                     323830343a373230303a3a2f33322d313238203d3e20323730383236.roa (raw, json)
Hash identifier:          xcSFuqZca8BDhXKDKSjmIo7Z3ibuDlPqLMNRO8Fz0iM=
Subject key identifier:   FA:02:95:90:F5:F9:2B:A5:05:E9:1F:AD:1A:68:EA:42:11:56:B4:84
Certificate issuer:       /CN=615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E
Certificate serial:       3ED168807B76F965551F61EEAC2DFFC1A28F5455
Authority key identifier: 61:5B:BE:24:D3:8E:2F:3D:EF:05:DE:9B:7A:3F:DA:AF:CB:D3:B6:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/323830343a373230303a3a2f33322d313238203d3e20323730383236.roa
Signing time:             Fri 20 Jun 2025 21:03:33 +0000
ROA not before:           Fri 20 Jun 2025 20:58:33 +0000
ROA not after:            Fri 19 Jun 2026 21:03:33 +0000
asID:                     270826
IP address blocks:        2804:7200::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.crl
                          rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 23:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d1:68:80:7b:76:f9:65:55:1f:61:ee:ac:2d:ff:c1:a2:8f:54:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E
        Validity
            Not Before: Jun 20 20:58:33 2025 GMT
            Not After : Jun 19 21:03:33 2026 GMT
        Subject: CN=FA029590F5F92BA505E91FAD1A68EA421156B484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:fe:16:be:59:73:36:32:87:4d:6a:3a:1f:
                    9a:c4:27:69:4d:da:72:a5:9b:46:d2:7b:26:ce:ac:
                    60:03:5b:66:96:f4:df:a6:a2:cb:20:bc:57:ce:85:
                    c3:3d:fd:d9:05:6d:64:43:bc:0d:38:23:9c:98:e7:
                    79:68:f4:8b:21:ae:d9:5d:6e:da:89:9f:e9:88:92:
                    cf:41:69:19:7b:64:a7:71:82:82:2a:2c:e6:dc:c1:
                    f7:12:60:23:72:c1:39:62:5d:30:e7:87:6c:13:41:
                    e4:b5:46:a4:8e:ab:38:85:e6:38:e5:9c:d0:ff:fb:
                    c0:66:cc:38:3d:d4:c8:13:06:95:14:ef:60:42:85:
                    66:ce:72:9b:f8:6f:72:c7:36:71:2e:a8:df:d2:fc:
                    f0:6a:6c:9c:4f:d2:78:a9:57:8c:e0:0d:8e:3a:1e:
                    4c:9b:b9:50:ad:f8:f4:d0:cc:d2:cb:9f:b5:90:3c:
                    51:7c:f5:68:07:73:11:5c:31:d5:28:ff:bb:25:fc:
                    aa:a7:6f:22:78:1f:1c:5e:78:d5:91:ed:01:e6:0b:
                    92:e6:e5:b0:7d:3a:c8:5f:c4:91:a2:e2:a0:0e:15:
                    ad:0b:47:62:a3:dc:ec:e8:4e:2f:29:22:5f:1b:7f:
                    31:8b:5f:a4:42:15:a6:21:61:7c:74:00:4a:bf:12:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:02:95:90:F5:F9:2B:A5:05:E9:1F:AD:1A:68:EA:42:11:56:B4:84
            X509v3 Authority Key Identifier:
                keyid:61:5B:BE:24:D3:8E:2F:3D:EF:05:DE:9B:7A:3F:DA:AF:CB:D3:B6:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/323830343a373230303a3a2f33322d313238203d3e20323730383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7200::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:32:71:54:64:42:0d:7d:85:8d:5c:b1:e3:40:7d:42:4a:f7:
         2a:1b:c1:12:76:df:c7:d6:ed:f1:91:3c:3b:fc:3c:e5:24:6b:
         97:ef:6e:e2:68:c6:78:86:78:d8:7c:24:b8:c6:fb:85:54:71:
         23:06:e3:d9:29:e5:4a:71:4b:d0:db:cd:e9:e4:a6:af:d3:74:
         23:56:59:60:ea:b8:01:65:37:3a:17:cf:78:32:27:e1:54:93:
         30:e8:00:a2:3e:df:3b:49:46:6d:79:22:96:8e:3d:6b:bd:dd:
         96:60:7c:3c:fa:7b:de:9b:8b:6d:4f:69:85:0d:dc:a7:fb:61:
         09:a5:4c:ee:46:d2:17:25:04:e5:d2:d4:e1:46:64:0d:e8:1e:
         d6:c2:c4:8d:9b:00:5c:e1:78:ea:8e:31:59:c4:9e:c5:d3:ff:
         ba:ea:37:79:11:af:97:2f:fa:ed:aa:5b:e1:b8:e7:48:4b:41:
         9f:93:4c:79:ca:4e:99:e9:56:28:f9:10:e2:4d:21:10:df:0f:
         26:ab:ee:b0:ae:bb:63:04:56:ac:6a:3e:7a:db:c9:15:0d:aa:
         f2:f7:b8:0d:76:03:48:0a:ed:07:25:c1:2a:23:ce:30:f4:cd:
         2c:1e:a4:6a:78:97:10:e8:60:cf:f5:18:e0:91:f1:e5:2c:22:
         4c:e3:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:08:01 2025 by rpki-client