Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/323830343a326362303a34303a3a2f34322d3432203d3e20323635323337.roa
File:                     323830343a326362303a34303a3a2f34322d3432203d3e20323635323337.roa (raw, json)
Hash identifier:          BBfNfofxx6Q5ilIyZEhUXMoZFvmcM80tnooLTh3bn0g=
Subject key identifier:   EA:E0:9A:EC:52:65:B1:02:A1:A5:9E:BA:35:00:47:36:40:DA:38:78
Certificate issuer:       /CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
Certificate serial:       0C15119B7867C02288104CFE496EB9190AFE0FC5
Authority key identifier: 9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/323830343a326362303a34303a3a2f34322d3432203d3e20323635323337.roa
Signing time:             Fri 18 Apr 2025 15:25:45 +0000
ROA not before:           Fri 18 Apr 2025 15:20:45 +0000
ROA not after:            Fri 17 Apr 2026 15:25:45 +0000
asID:                     265237
IP address blocks:        2804:2cb0:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl
                          rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 07:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:15:11:9b:78:67:c0:22:88:10:4c:fe:49:6e:b9:19:0a:fe:0f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ED61BBB952B0175F930148E2D9C222C7409D32C
        Validity
            Not Before: Apr 18 15:20:45 2025 GMT
            Not After : Apr 17 15:25:45 2026 GMT
        Subject: CN=EAE09AEC5265B102A1A59EBA3500473640DA3878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:10:38:3c:2c:ca:05:3a:61:3e:ae:d5:bb:
                    32:6c:63:46:8e:f5:d2:87:a9:64:91:c2:ff:60:22:
                    64:39:d2:1f:eb:56:86:48:06:1b:a1:09:2c:06:d8:
                    e6:e3:c8:f6:3c:f3:e2:b0:57:fa:02:18:11:ea:17:
                    30:d8:f5:e0:c5:d2:af:b3:f0:49:2a:6f:58:74:50:
                    72:52:5b:bb:da:03:37:f4:dc:26:cf:1e:9f:a0:c4:
                    36:74:5c:35:0d:c6:f4:5e:86:77:5e:68:72:03:10:
                    e9:98:53:07:ad:46:e3:31:ad:90:34:9f:6c:85:04:
                    24:fa:1b:17:5c:f1:6a:30:21:15:b3:1d:f7:40:e9:
                    ef:00:10:0e:60:2c:5d:38:9a:65:9e:4b:e6:28:d9:
                    a6:7e:42:58:a0:9b:cf:d3:4f:ba:3d:84:74:c7:a2:
                    8d:40:69:70:2b:7a:05:f6:d5:7e:65:06:29:5e:35:
                    30:9d:b9:95:02:55:a8:15:65:13:63:bc:ec:f1:e2:
                    d7:a5:62:03:1c:6a:d6:c8:9c:ae:f1:40:4e:fd:c7:
                    45:d5:9f:bf:6a:37:38:65:c6:99:b9:c2:c6:77:2f:
                    ad:85:f3:80:7d:d2:b8:b4:8a:1c:79:d4:2f:48:70:
                    86:39:62:f2:f0:c2:3d:03:ce:c8:22:bc:5e:b9:89:
                    c0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E0:9A:EC:52:65:B1:02:A1:A5:9E:BA:35:00:47:36:40:DA:38:78
            X509v3 Authority Key Identifier:
                keyid:9E:D6:1B:BB:95:2B:01:75:F9:30:14:8E:2D:9C:22:2C:74:09:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/9ED61BBB952B0175F930148E2D9C222C7409D32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ED61BBB952B0175F930148E2D9C222C7409D32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei1x7C4PLT4TrfZYbMKFU8kMK2CvB3pjcxKz1K8HHtE3/0/323830343a326362303a34303a3a2f34322d3432203d3e20323635323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cb0:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         18:f5:4a:f2:40:aa:f3:4b:b4:ba:e1:c9:88:2b:6a:28:92:30:
         4b:42:72:27:32:ca:5b:97:05:34:c2:2e:e5:7a:b5:8c:85:3c:
         c7:94:c5:4f:95:7a:d5:d3:a5:8e:6a:57:99:3f:10:ad:cd:a1:
         00:f7:9a:2e:e6:5d:d9:89:e7:32:8c:4c:8c:ed:44:0d:e7:fd:
         94:dc:80:ed:ec:4f:c4:dd:5b:c7:2d:b6:40:77:56:1b:3c:a5:
         0a:c3:03:00:27:ae:87:8f:3c:54:a9:79:a5:45:af:24:57:12:
         64:41:b4:e3:b4:19:9b:f7:5f:95:4f:8d:6d:9b:59:7f:c4:27:
         9a:19:75:04:c0:2d:51:d0:48:08:52:ad:84:d7:a2:f4:3e:7d:
         c4:f3:78:5c:44:1f:d0:08:9a:e0:34:30:15:4f:40:83:4b:7d:
         50:6b:53:5c:8d:cb:af:4a:3d:42:98:02:99:62:90:60:b3:c5:
         27:f4:b7:4f:21:83:a0:95:dd:6a:89:ad:3d:1a:a8:53:72:66:
         6e:f8:03:00:a2:fb:3b:85:92:5d:69:d4:73:40:85:b4:1a:42:
         7c:21:eb:75:8a:a8:03:a4:dd:86:18:39:fb:8a:67:3b:b5:53:
         16:97:bf:7c:df:3b:93:64:8c:a8:cb:57:46:7f:b0:22:f0:ae:
         86:8c:42:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:49:32 2025 by rpki-client