Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a643030303a3a2f33362d3336203d3e20323732353639.roa
File:                     323830343a383534383a643030303a3a2f33362d3336203d3e20323732353639.roa (raw, json)
Hash identifier:          ZHoTT00mx4p4NzZU3uG0mFn4gULuFNZCKY5a6tow2ag=
Subject key identifier:   35:A3:4E:A2:76:10:11:39:C4:E7:05:85:66:21:C3:B7:44:2D:82:B0
Certificate issuer:       /CN=EA4894284A8A492BEA8815B30211B946E091575C
Certificate serial:       10FA2399245A3EE4A9EB3ED3B7B955A1AF7F3D4B
Authority key identifier: EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a643030303a3a2f33362d3336203d3e20323732353639.roa
Signing time:             Mon 09 Jun 2025 18:21:30 +0000
ROA not before:           Mon 09 Jun 2025 18:16:30 +0000
ROA not after:            Mon 08 Jun 2026 18:21:30 +0000
asID:                     272569
IP address blocks:        2804:8548:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl
                          rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 09:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fa:23:99:24:5a:3e:e4:a9:eb:3e:d3:b7:b9:55:a1:af:7f:3d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA4894284A8A492BEA8815B30211B946E091575C
        Validity
            Not Before: Jun  9 18:16:30 2025 GMT
            Not After : Jun  8 18:21:30 2026 GMT
        Subject: CN=35A34EA276101139C4E705856621C3B7442D82B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:a8:3f:db:76:fd:3b:d5:f2:1b:30:b6:e7:
                    db:bd:c5:22:56:70:88:81:f0:1a:ad:a7:e1:48:c3:
                    09:51:b9:c2:59:cf:c2:16:a3:65:59:1e:d4:1f:35:
                    08:ae:d9:a5:ad:17:b8:5f:21:05:7c:a4:fe:df:4d:
                    f2:09:2f:0c:2a:b7:ae:e7:e7:e2:6a:67:1e:f4:55:
                    e0:a1:e8:97:4c:17:a8:6c:31:d9:13:20:ee:c3:ab:
                    02:d3:00:27:85:42:25:17:c3:80:1a:81:71:24:1e:
                    56:d6:b5:90:4c:3b:e2:05:e5:af:78:53:5a:b0:19:
                    b6:81:36:26:94:a3:da:17:b2:38:05:43:3c:b0:76:
                    c4:c6:42:f4:65:f7:16:79:b0:93:32:55:0d:0f:09:
                    64:c6:b4:67:48:0a:34:e5:05:df:b4:4c:98:c5:1f:
                    b9:33:d9:f3:a3:31:79:56:b2:67:6a:69:8a:5a:9e:
                    a2:24:06:c4:6b:1c:b4:8e:a1:b8:28:8f:1d:5c:5c:
                    77:dc:e3:d1:60:8c:29:f9:55:35:6c:4a:92:e4:63:
                    37:03:b2:e9:24:62:ae:35:69:3f:d3:4d:74:9f:8e:
                    5d:d3:ce:9b:f3:0c:a4:cd:ff:ac:f0:70:be:5a:76:
                    3d:c2:68:48:ef:ec:34:a4:e8:f6:ad:0d:a6:c5:e9:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A3:4E:A2:76:10:11:39:C4:E7:05:85:66:21:C3:B7:44:2D:82:B0
            X509v3 Authority Key Identifier:
                keyid:EA:48:94:28:4A:8A:49:2B:EA:88:15:B3:02:11:B9:46:E0:91:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/EA4894284A8A492BEA8815B30211B946E091575C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA4894284A8A492BEA8815B30211B946E091575C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5d6fnF9TbQHw5h3bvNy9gxGqNvwNMy57gbJjB4uTWuPs/0/323830343a383534383a643030303a3a2f33362d3336203d3e20323732353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8548:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         c1:28:73:9e:cb:ae:dc:ed:10:66:a4:d1:f0:a9:07:e2:3c:3f:
         d0:2e:0f:d2:84:57:db:2a:3f:a5:99:be:87:48:89:d5:40:a6:
         20:86:1b:fb:0c:d4:da:36:b8:e1:97:1d:9e:ef:3f:6b:a5:16:
         f1:43:21:4b:57:12:b5:c8:34:c2:e5:44:63:4c:b8:a1:37:4c:
         2a:92:f3:5f:d3:9a:4e:d9:67:c1:68:08:fb:db:87:31:8c:32:
         16:82:ee:9f:9f:15:1e:42:49:e9:df:08:59:7d:a9:e1:cb:23:
         89:1b:94:bc:aa:3c:8b:24:3c:40:a6:fe:7e:c4:4c:ba:8f:37:
         a3:cb:42:66:c1:9b:34:81:e5:81:c8:05:d6:33:67:9d:46:bd:
         6a:62:61:3b:ec:11:f9:75:cd:44:a3:05:45:34:e7:8d:6c:88:
         66:dd:d0:53:f8:54:ed:78:95:00:8b:d7:43:ce:f8:87:09:b6:
         3e:30:d1:37:a4:e2:ba:08:cd:94:b2:b9:38:ba:04:df:b8:a0:
         ae:b8:a9:af:b6:2b:20:39:c9:4b:94:57:3c:c2:e6:c0:9f:19:
         84:f5:f6:50:f9:db:3a:25:1a:ea:f7:b8:c4:65:27:99:6a:3e:
         e0:f1:ea:3d:7c:3a:6d:9b:8a:05:0f:5e:b5:89:00:fd:0c:66:
         2d:cf:26:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 01:09:40 2025 by rpki-client