Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa
File:                     323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa (raw, json)
Hash identifier:          ANSsuzPLaiNqEp7Flof1CCXj92TPkxroKmAlZjZPxck=
Subject key identifier:   E3:2A:EC:FB:AB:10:92:BD:0E:B1:C7:BC:7E:25:E3:F7:75:E6:DE:41
Certificate issuer:       /CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
Certificate serial:       711877EF4FABF630C837F73140D931AD6989A192
Authority key identifier: 5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa
Signing time:             Wed 09 Jul 2025 01:43:33 +0000
ROA not before:           Wed 09 Jul 2025 01:38:33 +0000
ROA not after:            Wed 08 Jul 2026 01:43:33 +0000
asID:                     270544
IP address blocks:        2804:6d9c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl
                          rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 03:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:18:77:ef:4f:ab:f6:30:c8:37:f7:31:40:d9:31:ad:69:89:a1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD5FC84B74FD9F8D75C2840737B942D7C5DF659
        Validity
            Not Before: Jul  9 01:38:33 2025 GMT
            Not After : Jul  8 01:43:33 2026 GMT
        Subject: CN=E32AECFBAB1092BD0EB1C7BC7E25E3F775E6DE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:f7:75:76:d2:fb:88:85:17:ce:fc:36:00:
                    bc:54:f7:cd:a8:e3:05:28:d0:e1:26:e5:3e:3b:3e:
                    12:df:d9:cc:0e:e0:16:3c:4e:d5:fd:e1:8f:1f:d4:
                    ca:84:4f:ef:8a:a7:87:85:b3:0c:be:af:d5:e8:5f:
                    99:a7:2e:6b:32:0d:18:d7:cf:b8:5c:ef:fc:d2:ce:
                    59:9b:48:a2:e0:b4:ae:9a:46:a9:7f:52:d1:c6:65:
                    25:dc:aa:92:0b:dd:b9:9e:b7:b2:a9:8b:ec:93:38:
                    a0:40:f9:5f:ca:1e:90:44:fb:af:b8:eb:0d:00:bb:
                    7e:b4:57:71:e6:ad:ba:7f:8c:00:c6:a5:48:07:90:
                    21:1a:88:65:4e:13:76:6f:49:eb:8f:6f:77:92:ee:
                    14:63:e8:06:17:fd:10:ff:68:2e:ce:10:8d:c2:dc:
                    ed:31:0d:6a:94:d5:e8:12:1a:7a:ba:18:97:4f:80:
                    f7:f0:54:e8:6f:57:1e:ae:f6:7d:fb:99:9d:46:87:
                    d8:21:5d:aa:b3:f0:f6:69:4e:ac:a5:0d:5b:d2:c3:
                    f9:c1:93:bc:e1:4b:27:dd:c8:33:ae:6b:b9:d3:9a:
                    97:48:ed:c5:29:64:e5:f9:ed:7f:e1:ee:09:60:f5:
                    63:ae:fd:16:49:5e:d5:9d:df:b3:4e:ff:bd:01:60:
                    82:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2A:EC:FB:AB:10:92:BD:0E:B1:C7:BC:7E:25:E3:F7:75:E6:DE:41
            X509v3 Authority Key Identifier:
                keyid:5D:D5:FC:84:B7:4F:D9:F8:D7:5C:28:40:73:7B:94:2D:7C:5D:F6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DD5FC84B74FD9F8D75C2840737B942D7C5DF659.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/323830343a366439633a633030303a3a2f33342d3334203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d9c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1b:9a:91:d4:e3:1e:d9:3d:d5:0e:a1:66:f3:a0:84:36:46:e8:
         72:92:fa:2d:83:44:b7:fd:81:d3:d1:b2:b7:e7:30:45:31:f6:
         25:1f:f4:e7:c6:ca:84:bb:9f:62:e8:2d:27:cd:a4:17:78:d3:
         be:66:fb:9d:83:9c:c9:33:75:2c:4d:97:e5:f5:e1:21:2e:79:
         0a:44:47:0b:d7:5f:2a:66:09:b4:c1:bd:10:42:ca:36:c5:3c:
         11:e5:56:9f:6c:11:02:d2:d6:8c:ff:b9:b9:c6:fd:87:0b:84:
         58:2b:0f:82:e2:92:81:6c:7c:c6:ea:33:7e:50:ed:3e:39:d6:
         ca:84:0e:88:6f:ca:1e:39:d7:fd:10:7d:92:c0:c1:2d:51:99:
         2f:39:6d:ea:fa:43:51:f6:29:0e:0d:88:09:a5:ca:30:60:94:
         b6:f6:85:84:76:c7:6f:39:b7:ef:75:e6:5b:52:1b:2c:10:45:
         f2:e4:94:9d:4e:95:95:b6:2d:3e:22:b4:1b:8f:d6:6b:f0:de:
         56:dd:2e:ba:f4:57:db:4e:bf:89:2a:a9:79:d5:e7:ea:0d:e4:
         c6:bb:ab:90:75:01:8a:dc:b4:9d:bf:38:db:b2:0a:9d:21:fa:
         93:84:df:ec:ca:ff:eb:bc:8b:b5:0f:68:62:e8:e6:52:66:36:
         2e:73:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 17:04:55 2025 by rpki-client