Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a3a2f33332d3333203d3e20323733343137.roa
File:                     323830343a386535303a3a2f33332d3333203d3e20323733343137.roa (raw, json)
Hash identifier:          oa39zwk+DOlFtKxgGEDMTAys54WdC9OthVvLXeD9ByE=
Subject key identifier:   83:76:15:2B:22:81:EF:98:76:F2:38:4D:13:E8:0B:3E:50:4F:4F:A5
Certificate issuer:       /CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
Certificate serial:       6803A57114D2AEFE5D0C9A986686BEF03519D519
Authority key identifier: 0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a3a2f33332d3333203d3e20323733343137.roa
Signing time:             Wed 11 Jun 2025 22:03:13 +0000
ROA not before:           Wed 11 Jun 2025 21:58:13 +0000
ROA not after:            Wed 10 Jun 2026 22:03:13 +0000
asID:                     273417
IP address blocks:        2804:8e50::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 03:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:03:a5:71:14:d2:ae:fe:5d:0c:9a:98:66:86:be:f0:35:19:d5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
        Validity
            Not Before: Jun 11 21:58:13 2025 GMT
            Not After : Jun 10 22:03:13 2026 GMT
        Subject: CN=8376152B2281EF9876F2384D13E80B3E504F4FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9e:0d:be:fc:21:49:c1:2c:e6:6f:08:82:f7:
                    3f:cd:fb:43:1f:1c:46:58:26:6b:ec:91:78:55:ca:
                    de:80:a2:ce:9b:c6:e3:ff:58:72:6a:0c:de:9a:49:
                    f4:57:02:c4:72:c4:04:80:3a:b5:c1:b3:59:b5:7a:
                    bd:0d:67:bd:b8:bd:a7:01:f7:35:04:66:9f:95:ac:
                    02:c4:10:ba:04:26:7d:0b:88:2d:b9:13:34:e8:f9:
                    e1:cf:0b:08:b5:14:28:50:e6:12:c1:9b:64:9d:b7:
                    0c:a2:ad:a4:55:6c:ae:23:bc:ae:c0:e1:88:c3:fc:
                    fe:6c:f8:5d:fe:71:4c:fa:62:18:b7:26:34:60:8d:
                    f6:01:8a:e2:a3:db:83:50:a1:5f:17:22:c5:64:b4:
                    75:31:fc:e7:92:b6:7f:da:ca:36:76:6f:31:ac:7c:
                    a7:e0:eb:b7:0f:4b:9c:f9:21:cc:c5:67:78:92:96:
                    64:fa:6b:78:7a:3e:d0:71:f4:f5:3b:8c:62:1c:b7:
                    2c:65:77:e2:40:b5:ca:24:97:0b:27:aa:3b:75:56:
                    eb:53:05:0b:4a:ef:5a:da:97:81:63:12:47:18:2d:
                    16:11:4b:64:42:a8:0e:24:64:5f:8a:b5:26:c7:fc:
                    fe:ea:81:89:95:b2:cd:c5:11:df:a2:f2:20:a0:c1:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:76:15:2B:22:81:EF:98:76:F2:38:4D:13:E8:0B:3E:50:4F:4F:A5
            X509v3 Authority Key Identifier:
                keyid:0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a3a2f33332d3333203d3e20323733343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e50::/33

    Signature Algorithm: sha256WithRSAEncryption
         6e:00:6f:c7:18:86:ef:74:89:c8:26:33:63:95:84:42:2d:82:
         3e:ea:6c:23:95:ad:06:12:43:f1:21:14:bc:e0:e5:62:e6:ff:
         4a:66:fd:43:70:2b:99:13:e0:5d:88:57:46:3d:c0:df:d9:b1:
         fa:06:ea:ab:d8:e2:13:6b:91:f9:83:6c:4f:a9:09:74:2d:2f:
         a2:55:75:f9:51:8e:a1:f0:fa:5d:d4:d5:30:c7:af:97:63:49:
         39:35:c0:e7:c4:ad:3e:bd:36:d9:0a:9f:43:f3:a3:31:a3:15:
         a2:ce:4a:1f:58:b2:43:7e:24:7a:31:26:12:3a:66:f2:87:90:
         20:50:9e:f6:65:cc:a6:24:f0:03:88:27:e2:49:35:d2:25:41:
         84:f5:57:df:41:a8:99:ff:8d:4b:99:0b:d9:bb:b2:48:74:1d:
         84:98:a4:2c:b1:2a:5a:c1:5e:34:eb:82:06:5f:65:52:73:26:
         bc:8b:cf:19:59:d0:56:39:d5:7d:b3:07:22:87:da:47:8b:04:
         d3:be:e5:6b:c0:ff:7b:3f:0c:73:e5:02:31:93:ab:db:7e:70:
         5e:3a:42:91:c7:d9:ea:cc:62:e4:48:be:2e:30:27:16:28:42:
         6f:ba:7f:3b:55:39:03:4d:8e:2f:4d:59:14:17:34:b2:87:24:
         de:37:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:38:59 2025 by rpki-client