Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33332d3333203d3e20323730353434.roa
File:                     323830343a366439633a3a2f33332d3333203d3e20323730353434.roa (raw, json)
Hash identifier:          kgorXkQAV2OC5F+5bIt7rz1UqacSUL36HcpKznAzEaE=
Subject key identifier:   C8:5E:61:A9:03:C1:5D:5E:94:63:81:8B:65:58:F2:59:A8:52:34:D8
Certificate issuer:       /CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
Certificate serial:       0E29A2CF7E3B3452EB47A6AAC6A3732CF6A67305
Authority key identifier: 5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33332d3333203d3e20323730353434.roa
Signing time:             Wed 09 Jul 2025 01:43:36 +0000
ROA not before:           Wed 09 Jul 2025 01:38:36 +0000
ROA not after:            Wed 08 Jul 2026 01:43:36 +0000
asID:                     270544
IP address blocks:        2804:6d9c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl
                          rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 03:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:29:a2:cf:7e:3b:34:52:eb:47:a6:aa:c6:a3:73:2c:f6:a6:73:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
        Validity
            Not Before: Jul  9 01:38:36 2025 GMT
            Not After : Jul  8 01:43:36 2026 GMT
        Subject: CN=C85E61A903C15D5E9463818B6558F259A85234D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:74:0b:5d:87:20:81:f2:3c:a3:5b:8d:3c:
                    a1:b3:1e:82:c0:c1:a7:8f:3e:de:d8:88:ac:75:b7:
                    2c:c4:e4:a2:59:da:47:fa:8b:60:51:b1:cc:3c:f1:
                    71:99:bf:8a:09:12:33:83:92:bc:3b:1d:a7:4b:32:
                    17:43:ff:2f:8c:7c:f1:11:d0:b5:6c:bc:9f:88:fb:
                    ca:e8:35:4e:05:96:ee:a2:92:92:73:34:20:e0:b6:
                    44:06:f0:10:1c:ba:f8:8d:d1:ed:04:e4:8f:a9:81:
                    e0:66:01:59:f7:e6:b3:40:be:a7:1c:79:6f:d2:f1:
                    32:31:98:c3:b9:07:cb:d3:74:af:e8:10:c3:5f:58:
                    4c:c6:11:f1:29:49:e4:5a:c0:80:ae:65:6b:86:e9:
                    76:91:3d:09:36:4d:83:10:d9:96:c8:73:e7:5f:ca:
                    cf:0a:9b:ed:b6:d0:97:63:96:92:1c:85:17:77:4d:
                    4b:e0:dd:ff:f8:be:9b:67:3c:9d:63:30:0f:7b:4d:
                    30:e8:11:2e:5a:c8:c9:37:67:68:ef:bd:e8:48:44:
                    db:43:0f:a8:f6:9e:e8:25:98:42:4d:64:6a:f3:73:
                    8a:0c:d1:f3:8d:15:2a:81:23:50:f2:2a:e6:e0:af:
                    ce:cf:56:d1:65:fd:20:f6:53:84:c6:1b:ec:2b:df:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5E:61:A9:03:C1:5D:5E:94:63:81:8B:65:58:F2:59:A8:52:34:D8
            X509v3 Authority Key Identifier:
                keyid:5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33332d3333203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c::/33

    Signature Algorithm: sha256WithRSAEncryption
         b7:f6:2c:37:1a:7f:13:d5:a9:fc:ca:a7:d4:56:6a:11:58:ef:
         56:bb:e7:f4:48:63:94:03:bc:40:02:34:24:61:83:88:84:ee:
         54:4f:fe:42:70:15:3e:d3:74:68:ad:a5:1a:98:06:67:61:27:
         0a:bd:43:35:28:4f:66:ef:3b:8b:eb:c6:0f:75:b1:08:cf:eb:
         d5:5b:63:f1:18:3d:3d:53:78:67:71:81:f7:fe:1c:14:dc:c4:
         87:0d:97:05:09:8f:d3:9c:b2:11:99:19:93:f8:28:98:9c:1d:
         f6:09:92:b6:28:09:1d:07:a3:70:03:b1:29:66:fd:6a:d8:22:
         75:e4:26:dd:d0:f3:c0:d5:6d:54:9b:d1:f7:ba:d3:93:3b:7f:
         ba:e2:ab:2a:e9:c4:e6:2a:f3:4c:ca:0c:dc:e1:dd:fb:e1:df:
         f9:4a:89:ab:20:0e:81:52:6d:7c:84:a9:11:ef:a8:67:f3:b2:
         d3:cd:8e:31:6f:5d:ba:30:97:4c:98:e8:a3:b7:3e:9d:54:17:
         a1:18:b9:69:ba:9e:cb:7c:bf:dc:2e:81:bb:fc:3a:a0:fa:08:
         27:8f:e8:09:6e:85:37:d4:f9:19:39:13:54:8b:8b:13:3c:27:
         a9:87:88:48:79:df:81:80:4a:78:98:30:32:b6:a4:21:b8:17:
         23:ad:c1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:11:48 2025 by rpki-client