Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313038313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a313038313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          GLzTy831U5UrPOr5cTQNxDjxvcSXbpt1rm6K2o5pY7A=
Subject key identifier:   17:57:A4:3D:1E:CA:76:37:B4:93:EE:DF:05:C5:1C:D2:39:81:44:D1
Certificate issuer:       /CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Certificate serial:       510CC6194F29A8C4178A183E40B32DC02A510B22
Authority key identifier: 8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313038313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Sun 27 Apr 2025 10:15:13 +0000
ROA not before:           Sun 27 Apr 2025 10:10:13 +0000
ROA not after:            Sun 26 Apr 2026 10:15:13 +0000
asID:                     269566
IP address blocks:        2804:6688:1081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 04:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0c:c6:19:4f:29:a8:c4:17:8a:18:3e:40:b3:2d:c0:2a:51:0b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
        Validity
            Not Before: Apr 27 10:10:13 2025 GMT
            Not After : Apr 26 10:15:13 2026 GMT
        Subject: CN=1757A43D1ECA7637B493EEDF05C51CD2398144D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:75:62:bd:86:47:2b:20:25:a7:61:2a:24:
                    23:c5:ee:79:71:91:38:77:1b:99:d6:7b:75:0d:07:
                    3e:77:19:a4:46:a6:29:75:1e:07:c6:e5:16:2a:47:
                    a4:99:40:a2:38:70:9e:73:e6:19:2d:cf:7c:30:15:
                    37:cd:d8:24:79:56:a4:fa:99:4d:2e:ea:a6:d0:0a:
                    58:7c:1f:ea:35:6b:96:92:43:96:3d:55:bc:66:7b:
                    61:bd:c9:6a:1b:30:a3:10:4f:20:93:b4:51:51:08:
                    d9:24:69:90:c0:be:63:a7:f5:e2:9d:65:45:08:90:
                    42:1e:b4:f4:cc:6c:d4:9f:c1:3a:bd:8c:87:d6:65:
                    39:7d:02:88:b9:a7:7c:cc:cf:4b:f6:52:fe:e6:4b:
                    2b:42:91:12:47:f1:a4:2f:d0:4d:1e:e3:70:97:9d:
                    e6:cb:eb:e1:e4:0a:2c:ad:fb:19:95:65:47:7e:42:
                    fe:2e:90:90:f7:e5:d5:f1:81:8c:45:00:33:a3:5f:
                    5f:55:12:b6:81:ff:c2:64:ff:b8:e6:55:85:db:0c:
                    f4:4f:4b:63:36:de:c2:d1:26:e3:66:57:1e:44:59:
                    6d:d2:78:99:05:cb:99:79:4f:15:6d:84:d4:56:5e:
                    fc:99:f2:73:5c:86:97:fb:c7:e2:f2:58:3f:fa:bf:
                    28:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:57:A4:3D:1E:CA:76:37:B4:93:EE:DF:05:C5:1C:D2:39:81:44:D1
            X509v3 Authority Key Identifier:
                keyid:8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313038313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:1081::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:98:c3:49:eb:98:a5:be:48:48:7a:d2:31:b2:8a:88:e6:03:
         4b:26:fd:db:70:c1:59:e9:93:75:77:18:6e:59:5d:1f:e6:39:
         8d:4d:76:66:0d:06:f2:58:e0:85:04:da:66:23:8b:f2:2f:fa:
         99:39:fc:11:64:bc:0a:ca:d7:16:1e:e7:91:cd:ba:be:04:08:
         7a:37:2c:87:a0:1a:19:f1:58:9e:3e:03:78:cf:5d:ae:a3:4d:
         a7:bc:7d:68:13:23:72:a8:8c:f3:96:c9:25:eb:8b:04:24:48:
         4a:81:fd:94:5f:ba:fa:fa:15:99:c4:4d:30:95:cc:43:3e:55:
         fe:43:87:8f:a0:98:70:48:1c:72:75:fa:07:85:ff:55:ee:9f:
         6d:b0:c3:79:3f:96:53:6e:1b:7d:04:bd:0a:c6:b0:1b:6a:66:
         c9:c9:ef:f0:8b:75:fa:a4:3f:47:c0:dd:96:d3:dd:10:71:9c:
         71:f5:9f:e1:b2:94:2e:72:72:be:9d:f2:a5:77:12:a6:5c:75:
         4d:7a:c6:5a:2f:79:d1:5a:97:54:4f:75:b5:ec:16:b5:ad:2e:
         d0:92:3a:9b:ff:2d:8e:c7:00:11:fc:92:3f:ca:df:45:cb:69:
         a7:d2:e4:14:e1:a0:ac:ab:48:d9:2d:7c:b8:25:ff:bd:80:23:
         11:63:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:49:15 2025 by rpki-client