Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          USRH0XB9GOyThKfvL/3NzeGcN4rOcG32cPjfz1iz1w0=
Subject key identifier:   3B:1D:73:07:D4:32:EA:17:0B:33:BF:96:6B:6D:A8:8A:CE:0D:30:B4
Certificate issuer:       /CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
Certificate serial:       54773DB88E19E06F271BD1C41BF23D5260F0329E
Authority key identifier: 5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Wed 09 Jul 2025 01:43:36 +0000
ROA not before:           Wed 09 Jul 2025 01:38:36 +0000
ROA not after:            Wed 08 Jul 2026 01:43:36 +0000
asID:                     270544
IP address blocks:        2804:6d9c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl
                          rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 03:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:77:3d:b8:8e:19:e0:6f:27:1b:d1:c4:1b:f2:3d:52:60:f0:32:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
        Validity
            Not Before: Jul  9 01:38:36 2025 GMT
            Not After : Jul  8 01:43:36 2026 GMT
        Subject: CN=3B1D7307D432EA170B33BF966B6DA88ACE0D30B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:3a:b7:02:bb:06:11:b8:ce:ba:59:e1:5c:
                    2b:5a:7e:6d:a6:b7:d1:89:33:07:8b:78:07:2d:aa:
                    09:2c:2e:85:8c:7b:f4:e1:7d:54:50:5f:89:c2:87:
                    5e:9a:a6:90:2e:69:74:2b:6c:db:ad:83:27:39:65:
                    e5:61:eb:56:1f:a5:21:85:44:76:14:a5:23:36:c7:
                    65:4a:de:03:0b:d2:94:3d:ce:e5:ba:aa:43:46:50:
                    62:39:1d:06:fa:0e:86:4c:39:9e:13:f7:b4:55:81:
                    3e:93:04:9d:e8:c4:18:95:f1:e0:03:10:76:b2:26:
                    b4:1b:ab:ec:ac:1a:18:07:1c:21:36:74:fa:25:0c:
                    d7:d5:90:77:78:1a:71:8f:4a:a8:64:44:e3:05:c7:
                    d8:fa:a0:d8:c6:d9:81:fa:ee:e9:78:39:1e:b2:11:
                    37:07:f2:f0:fc:29:24:4b:3c:89:06:15:1b:e1:e1:
                    7e:74:79:4c:0f:cf:8e:d9:df:d8:c3:b3:b4:6a:05:
                    7a:c2:b4:2b:e3:3b:49:44:51:8e:6c:cc:be:a5:f7:
                    21:0b:7c:1a:3e:3a:50:53:16:15:5a:72:37:66:e5:
                    f0:8e:29:4b:ce:6c:48:d9:5d:82:35:b6:1b:d5:ed:
                    9b:7e:67:8e:fa:ac:df:b6:96:a2:2b:51:db:b2:e7:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1D:73:07:D4:32:EA:17:0B:33:BF:96:6B:6D:A8:8A:CE:0D:30:B4
            X509v3 Authority Key Identifier:
                keyid:5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c::/34

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:93:01:e0:7f:87:b7:5e:8b:22:03:93:f3:e1:4b:12:e1:
         c8:af:4b:29:5f:61:35:2d:ed:e9:2e:2e:8a:2d:8c:7c:6d:aa:
         bb:6a:82:11:9b:7e:0d:78:cb:2f:cd:26:37:bd:5b:4a:75:41:
         24:3d:23:a1:5d:6c:5e:78:cb:0c:67:15:b5:32:3d:3a:6b:11:
         92:14:c1:21:99:9d:da:e4:cb:b1:72:c9:4b:ed:f1:ee:d0:2a:
         85:8e:83:25:22:33:d3:ea:6d:df:fc:4b:c4:cf:77:f0:75:df:
         23:6c:73:2f:2c:39:c3:d4:ad:4e:26:f3:62:db:47:3a:14:76:
         3e:0e:5f:f0:a4:5c:bc:5e:6e:67:be:46:e4:ec:f5:96:e1:46:
         12:09:ba:fc:87:1b:b4:00:6f:0a:ef:9c:2f:27:55:35:40:9e:
         0f:d6:fb:03:d0:dc:3e:1b:17:8f:be:df:d9:41:ba:32:9e:c8:
         93:a7:89:21:a7:57:67:80:9e:88:be:d9:01:39:86:c5:c3:37:
         af:2d:af:19:58:3c:a4:cd:ed:c1:14:bb:7d:1b:90:ed:f1:42:
         16:7b:ff:57:9c:d1:80:25:38:07:dc:eb:f2:8b:e7:e6:bc:7f:
         a3:ec:29:39:15:4e:f8:55:86:15:f5:f0:47:f1:a7:37:1a:50:
         9b:83:6b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 13:52:05 2025 by rpki-client