Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a3a2f33342d3334203d3e20323733343137.roa
File:                     323830343a386535303a3a2f33342d3334203d3e20323733343137.roa (raw, json)
Hash identifier:          gJTFM0QrGA3UWoYbF8fvbQmPmeMopgKgjLe1FjetpSo=
Subject key identifier:   E6:97:20:2A:48:97:A9:96:73:4A:9C:EA:06:9E:CC:8E:95:60:AF:CA
Certificate issuer:       /CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
Certificate serial:       2F3E10764A24DC7ACFC05EE3CB07317FA9B3E4D8
Authority key identifier: 0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a3a2f33342d3334203d3e20323733343137.roa
Signing time:             Wed 11 Jun 2025 22:03:14 +0000
ROA not before:           Wed 11 Jun 2025 21:58:14 +0000
ROA not after:            Wed 10 Jun 2026 22:03:14 +0000
asID:                     273417
IP address blocks:        2804:8e50::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl
                          rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 05:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3e:10:76:4a:24:dc:7a:cf:c0:5e:e3:cb:07:31:7f:a9:b3:e4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1
        Validity
            Not Before: Jun 11 21:58:14 2025 GMT
            Not After : Jun 10 22:03:14 2026 GMT
        Subject: CN=E697202A4897A996734A9CEA069ECC8E9560AFCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:7f:2b:12:e5:1d:67:7e:fd:9c:a5:45:85:
                    e5:4d:c2:cb:6c:96:f7:ec:12:50:47:07:91:82:fa:
                    26:a8:74:32:b2:a9:4a:ed:fd:4f:08:06:c6:3e:5b:
                    b6:ec:be:9d:56:d8:9c:be:d7:b7:ef:b1:47:de:14:
                    82:67:41:fd:b9:f0:a9:fa:6b:6d:5d:91:08:8e:4e:
                    fd:c0:8a:f6:b6:c0:b9:f8:5a:c0:20:10:b0:9f:9c:
                    9a:14:20:0b:90:75:0f:a5:a2:b3:98:7b:22:07:d7:
                    c0:57:6e:e8:22:fe:35:70:25:9d:f1:a3:59:aa:55:
                    fb:7f:2e:d4:0e:68:df:e2:86:c3:54:34:d0:3a:bf:
                    0f:9c:88:c6:b2:b8:4d:8e:31:da:f3:36:c4:c7:3f:
                    ae:a0:b0:6f:8e:90:e6:da:dc:a3:e5:53:1e:85:72:
                    32:81:9e:e3:a1:42:ef:a1:d9:22:38:a2:b8:12:b7:
                    79:e6:0f:f2:d8:23:bd:e5:4f:48:b9:78:68:86:cf:
                    17:4f:9e:6e:1e:54:31:28:81:ce:61:42:b6:4d:36:
                    53:40:2d:d1:d2:73:6a:3c:88:ee:b0:43:51:65:fe:
                    70:d1:1e:48:be:60:9f:04:d7:ae:90:a5:a2:a5:0a:
                    e1:6c:9b:75:6c:55:f4:1b:cb:c7:67:f2:a4:46:14:
                    91:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:20:2A:48:97:A9:96:73:4A:9C:EA:06:9E:CC:8E:95:60:AF:CA
            X509v3 Authority Key Identifier:
                keyid:0E:A5:8A:AB:56:6A:B7:47:E7:DD:6A:0E:CB:4C:77:5E:67:07:D6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EA58AAB566AB747E7DD6A0ECB4C775E6707D6E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nepkpssXfvYcK5K1Hcji3X3grsRAMpP9YM4avmpBYxW/0/323830343a386535303a3a2f33342d3334203d3e20323733343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e50::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:5d:fb:61:3d:4d:4b:79:a6:89:cc:99:dc:27:18:b9:86:
         2b:63:59:f4:3a:67:c8:ae:a4:37:43:69:52:39:cb:57:96:7a:
         1f:2d:80:b0:2d:62:ac:8d:3a:d3:68:84:cf:09:57:1f:b6:9f:
         41:d2:b6:1e:af:fe:61:70:6f:bf:ce:00:d8:24:32:b8:e1:a3:
         4f:96:82:3b:89:aa:64:1f:17:9d:f6:36:49:32:d5:d6:df:42:
         33:9c:4b:56:2b:e8:02:44:7e:31:b3:77:ab:0e:b3:c5:e0:ca:
         d0:0c:04:57:cc:78:4b:60:a2:46:d6:0a:f1:cf:84:43:a2:8c:
         91:83:ab:59:15:65:c8:24:5e:8e:0a:cc:99:8e:3d:34:e5:0e:
         fd:3e:7c:2b:93:1b:89:67:b3:87:7b:7e:98:c9:a8:91:fc:17:
         d4:92:a6:a7:dc:e3:4c:93:96:1c:90:df:e6:9c:8f:6f:45:04:
         59:12:e9:dc:75:d4:71:0e:81:4a:a2:e8:eb:67:03:5f:18:a9:
         18:40:77:36:16:bc:0e:0c:9b:ff:e4:92:0f:91:9d:ec:43:89:
         9e:d8:65:03:11:19:3a:b1:76:8b:db:6a:7d:13:cf:ba:51:5b:
         1f:46:cc:b6:03:4f:17:b7:fe:f3:54:53:d9:44:f4:8b:1e:99:
         db:94:7c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:55:15 2025 by rpki-client