Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/323830343a326566343a383330303a3a2f34362d3436203d3e20323634383633.roa
File:                     323830343a326566343a383330303a3a2f34362d3436203d3e20323634383633.roa (raw, json)
Hash identifier:          PHYNy11CFTOZZbKa85D1E+Yn3osSAF7H6BFPGTJCwPw=
Subject key identifier:   E1:9B:08:7A:F3:2F:D1:B8:C9:89:76:99:8A:4B:DE:59:CA:57:09:07
Certificate issuer:       /CN=384D54C7517BDF05BA4AAC096D48C357130887E0
Certificate serial:       56BFFA20703809995BD2F7296D89F5C5B5D603C8
Authority key identifier: 38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/323830343a326566343a383330303a3a2f34362d3436203d3e20323634383633.roa
Signing time:             Tue 10 Jun 2025 14:14:50 +0000
ROA not before:           Tue 10 Jun 2025 14:09:50 +0000
ROA not after:            Tue 09 Jun 2026 14:14:50 +0000
asID:                     264863
IP address blocks:        2804:2ef4:8300::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl
                          rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 18:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bf:fa:20:70:38:09:99:5b:d2:f7:29:6d:89:f5:c5:b5:d6:03:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384D54C7517BDF05BA4AAC096D48C357130887E0
        Validity
            Not Before: Jun 10 14:09:50 2025 GMT
            Not After : Jun  9 14:14:50 2026 GMT
        Subject: CN=E19B087AF32FD1B8C98976998A4BDE59CA570907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:0e:b3:ad:7e:55:7a:67:cc:a8:e4:c9:0b:
                    79:aa:1e:fe:85:ac:f3:4c:d5:2c:23:4e:05:74:95:
                    c4:7a:c8:a6:0a:1f:7f:61:e3:3e:29:42:60:69:51:
                    8c:a0:1e:d8:17:50:a9:db:0a:12:99:dd:43:71:19:
                    27:cc:f3:00:6a:5c:af:1c:79:67:61:ad:bc:cb:6c:
                    3d:e1:77:36:52:f5:e9:cd:3d:f1:58:38:df:09:b0:
                    24:25:66:2f:12:9a:08:bc:24:ad:37:24:d2:d7:12:
                    0e:39:ac:c7:f6:c7:3c:7b:97:6a:e0:16:f3:9f:ec:
                    f0:ad:b6:3e:dd:85:52:dc:95:bc:08:d2:a5:cc:c8:
                    c2:a1:7d:dc:e4:fe:d5:b5:43:09:3e:7c:b2:ed:50:
                    f7:50:a6:fe:8b:32:bc:10:99:4e:5f:2b:66:8a:42:
                    31:db:a8:34:70:02:49:ee:0f:cc:b3:07:3d:72:15:
                    39:2c:37:35:18:4f:0a:63:52:02:ae:7f:04:1e:bd:
                    50:7d:9b:a8:82:f9:7c:ae:f5:cb:c9:e2:32:87:07:
                    02:1b:a4:3b:4d:4a:ad:98:d9:c6:35:f7:66:5d:a5:
                    f2:cb:f5:8e:00:c8:f9:fa:86:ca:e7:dc:ab:4c:69:
                    63:e1:78:38:af:34:36:6c:db:0e:61:11:6b:a9:ea:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9B:08:7A:F3:2F:D1:B8:C9:89:76:99:8A:4B:DE:59:CA:57:09:07
            X509v3 Authority Key Identifier:
                keyid:38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/323830343a326566343a383330303a3a2f34362d3436203d3e20323634383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ef4:8300::/46

    Signature Algorithm: sha256WithRSAEncryption
         35:16:52:7d:10:8d:00:fa:18:fc:49:33:62:5e:04:64:92:0d:
         64:eb:f7:fc:e0:d8:fd:f8:5d:be:00:2c:12:38:86:a4:01:18:
         3d:a2:b0:f9:ac:1b:33:d9:91:ff:6f:87:ed:16:64:ec:5c:3c:
         06:f1:30:61:c6:78:94:40:69:51:a7:d7:d1:41:8f:bb:bf:b6:
         d8:cf:cd:35:0f:30:f3:02:da:f5:4b:14:ad:67:7d:e6:70:98:
         30:51:a2:9b:b5:50:5a:98:b8:d9:1a:7f:00:ea:ce:bb:5b:9a:
         4c:d0:e0:d4:23:60:3f:72:fc:0e:f9:10:4f:c6:46:e0:fa:c9:
         ce:d4:44:3b:cf:32:c4:45:b8:38:bd:86:06:df:c7:fd:8c:32:
         e9:b3:ea:4a:88:f1:f7:2d:2f:a9:7b:54:ac:c7:99:10:b6:48:
         55:72:bc:69:99:bb:b3:85:4b:30:5c:8e:cf:5c:b8:76:a0:4a:
         6c:14:c2:d1:b9:13:c2:2b:ab:b7:b6:cc:ce:e7:75:99:bd:b9:
         0b:a6:b4:aa:58:d5:11:17:7b:25:1e:97:fe:7b:19:d8:fd:be:
         2a:7b:f8:10:2a:98:f3:96:fa:05:9e:6b:c6:62:af:9e:f8:a3:
         83:dd:94:ca:51:67:04:54:07:dc:de:10:62:76:10:62:f0:62:
         b9:10:4c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 11:07:29 2025 by rpki-client