Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a383030303a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          XUgaF7KS16fwhExPW+vQJbanUPcUzDYWrKy68yxYJjw=
Subject key identifier:   A9:B3:4F:1E:DD:FD:DC:D8:99:3D:4B:5F:62:4B:B1:1E:45:48:BC:F0
Certificate issuer:       /CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
Certificate serial:       675FCA442B158491B7207287C36C72C5ADC6C02D
Authority key identifier: 5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Wed 09 Jul 2025 01:43:32 +0000
ROA not before:           Wed 09 Jul 2025 01:38:32 +0000
ROA not after:            Wed 08 Jul 2026 01:43:32 +0000
asID:                     270544
IP address blocks:        2804:6d9c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl
                          rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 03:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5f:ca:44:2b:15:84:91:b7:20:72:87:c3:6c:72:c5:ad:c6:c0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
        Validity
            Not Before: Jul  9 01:38:32 2025 GMT
            Not After : Jul  8 01:43:32 2026 GMT
        Subject: CN=A9B34F1EDDFDDCD8993D4B5F624BB11E4548BCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e5:96:f9:e5:48:8f:4c:1b:ae:30:ec:ef:95:
                    82:f1:61:01:6a:f0:01:7c:2f:86:6d:2f:92:c9:2f:
                    1f:ff:ba:7e:0b:22:c5:27:cc:37:00:4a:6f:80:89:
                    3c:ef:8c:a1:17:2d:1a:66:33:0c:22:a3:dd:e5:2c:
                    fd:46:ca:91:c5:05:61:d2:1e:fa:fc:f1:59:f1:40:
                    20:bf:e7:7f:b0:c3:94:d2:df:84:94:16:db:42:33:
                    5c:da:ab:de:23:23:f0:a1:f6:36:9f:43:93:f2:d0:
                    45:1e:11:bb:e6:ff:04:c7:a7:ec:54:eb:71:4a:1a:
                    07:f2:09:ea:f3:9f:50:26:5d:c5:9d:70:80:b9:69:
                    e4:2d:3d:58:c3:48:5b:6a:c3:df:6f:3c:16:51:b7:
                    a5:8a:1c:36:03:62:0e:4f:af:60:8c:09:b7:13:db:
                    87:f1:43:fb:b0:23:85:a9:9e:ba:16:17:f9:51:31:
                    96:af:a8:7e:52:55:58:df:a0:7e:44:61:12:05:9d:
                    6a:2a:5b:1b:83:4d:81:17:bc:d0:45:d0:04:4e:cd:
                    54:28:71:16:04:3f:de:0d:4b:23:1b:91:35:a1:b7:
                    7d:ae:ea:46:e8:a2:fd:59:11:49:bf:2f:e1:9b:71:
                    8a:ab:97:01:db:bb:ed:03:7b:f8:1f:e1:29:8d:68:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B3:4F:1E:DD:FD:DC:D8:99:3D:4B:5F:62:4B:B1:1E:45:48:BC:F0
            X509v3 Authority Key Identifier:
                keyid:5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a383030303a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         92:55:03:06:26:ff:fc:1f:6a:dd:58:fa:b0:ef:2d:02:4a:d1:
         06:8f:df:dc:0d:8e:e2:f6:95:0e:7c:4f:03:cc:d1:90:5d:d2:
         3a:56:0d:67:5a:39:20:e3:0a:83:ba:86:39:18:23:01:f7:58:
         0e:bd:f9:96:e1:7f:d3:df:3f:a2:a5:3e:7e:ae:8f:f7:42:f9:
         49:70:a8:2e:ed:d0:70:50:ce:f4:45:b6:aa:d9:4e:b7:18:aa:
         07:a4:54:7c:b1:dd:9f:63:fd:f1:bd:c0:01:1b:fc:7c:d0:cd:
         e9:51:e9:4e:88:6a:04:0c:f2:e5:4f:6e:68:40:4d:d7:1d:d7:
         9b:af:c6:b8:f1:cc:60:6a:0c:92:a1:9f:ab:b3:69:34:95:f6:
         59:a2:dd:f1:5b:15:6b:7a:62:cc:ba:4d:96:a1:84:e0:80:6b:
         ec:f9:44:7d:a8:d8:df:97:16:a1:e5:90:b1:a7:71:a3:5a:db:
         33:20:d7:6e:eb:bd:4f:f0:70:2e:f8:a6:0b:03:40:09:17:2f:
         b3:4f:78:9e:4c:94:06:81:3d:91:ad:da:f3:bb:20:44:50:9b:
         bd:27:4f:59:0f:41:23:11:e9:e1:de:b6:d3:2f:95:62:72:4a:
         95:98:6c:f0:c5:aa:dd:7a:6d:19:dc:be:94:50:e9:24:fd:ea:
         3f:5e:3f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 14:07:58 2025 by rpki-client