Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa
File:                     323830343a383039383a3a2f33322d3438203d3e20323731373631.roa (raw, json)
Hash identifier:          iGTxEC+RoGYsExBI4Q8v1oIrU04yVC6NbrVKSBGjuyQ=
Subject key identifier:   1A:A7:4F:EF:A9:2C:0D:1B:AC:0F:6A:EE:19:B7:5B:8D:CB:24:5C:F7
Certificate issuer:       /CN=6EA22A57869702BB3EC504F354E3A399C57E7BF5
Certificate serial:       5F9D78A27D58F5EB6C2F88EE3FD7DDB46B5D3E55
Authority key identifier: 6E:A2:2A:57:86:97:02:BB:3E:C5:04:F3:54:E3:A3:99:C5:7E:7B:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA22A57869702BB3EC504F354E3A399C57E7BF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa
Signing time:             Fri 20 Jun 2025 15:33:45 +0000
ROA not before:           Fri 20 Jun 2025 15:28:45 +0000
ROA not after:            Fri 19 Jun 2026 15:33:45 +0000
asID:                     271761
IP address blocks:        2804:8098::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/6EA22A57869702BB3EC504F354E3A399C57E7BF5.crl
                          rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/6EA22A57869702BB3EC504F354E3A399C57E7BF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA22A57869702BB3EC504F354E3A399C57E7BF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 08:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:9d:78:a2:7d:58:f5:eb:6c:2f:88:ee:3f:d7:dd:b4:6b:5d:3e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EA22A57869702BB3EC504F354E3A399C57E7BF5
        Validity
            Not Before: Jun 20 15:28:45 2025 GMT
            Not After : Jun 19 15:33:45 2026 GMT
        Subject: CN=1AA74FEFA92C0D1BAC0F6AEE19B75B8DCB245CF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:d2:96:e2:79:3a:d5:da:ae:43:1d:03:2a:
                    ee:7c:42:a7:2a:58:76:78:da:5a:74:c7:62:50:70:
                    3a:3e:78:8d:67:19:38:51:1f:11:33:e8:4a:ae:d0:
                    5e:05:6f:72:a2:5b:ca:d2:b9:60:94:ce:8e:e5:f8:
                    53:a0:46:4b:03:1e:ef:52:2a:1d:a4:e7:de:9a:91:
                    d1:c2:b7:61:87:f3:53:5f:fe:d5:95:85:b6:7c:4a:
                    83:67:85:38:6c:01:ea:3a:af:8e:54:33:39:0d:1a:
                    bc:cd:81:93:74:f7:cc:b2:2d:8f:d7:c9:24:34:6d:
                    62:d8:36:c4:6e:b9:c2:63:28:30:60:c5:ea:0f:38:
                    bf:b5:38:41:b2:77:80:a8:f8:9d:51:d8:08:ef:8a:
                    33:d2:59:2d:ed:98:ce:f4:6e:de:6f:c4:a1:ab:fa:
                    34:c6:00:1e:df:5a:01:30:cd:b4:12:3f:05:b1:d2:
                    b2:26:9d:d6:15:10:9e:da:e7:51:8c:a0:d7:30:0a:
                    d8:61:29:2f:b2:78:9a:ac:de:85:30:c0:0f:1f:0a:
                    5b:8e:11:62:10:36:41:7e:ab:4e:23:09:44:35:27:
                    ed:a8:2d:40:ee:2c:c5:1c:86:1d:75:b9:46:2c:9d:
                    ee:19:da:30:02:bd:c1:c5:01:9d:1b:2c:be:6c:78:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A7:4F:EF:A9:2C:0D:1B:AC:0F:6A:EE:19:B7:5B:8D:CB:24:5C:F7
            X509v3 Authority Key Identifier:
                keyid:6E:A2:2A:57:86:97:02:BB:3E:C5:04:F3:54:E3:A3:99:C5:7E:7B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/6EA22A57869702BB3EC504F354E3A399C57E7BF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EA22A57869702BB3EC504F354E3A399C57E7BF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8098::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:5b:00:cf:7a:5e:1c:98:18:ad:2f:f0:5c:33:89:fa:00:91:
         59:2e:64:b6:6e:11:ca:7f:77:10:0c:d2:49:63:2d:09:5e:e7:
         a3:85:e5:36:dd:bc:de:28:d8:b4:1b:50:6c:51:bd:31:74:99:
         b6:c3:c2:7b:99:a5:c8:fe:bb:36:c3:10:ac:0c:7e:5f:ba:e7:
         96:65:5e:73:ad:49:0d:a2:d7:d0:4d:66:cb:db:c0:92:32:f4:
         51:95:4f:07:8f:ba:15:88:9a:7e:19:cf:35:f4:f5:b9:13:ac:
         19:be:9d:88:2a:bd:91:cd:be:a7:f9:85:a0:56:82:74:f8:b1:
         92:52:11:d2:d9:fd:fc:8c:d2:91:75:44:d5:24:79:6c:b1:7c:
         77:1f:8e:d8:ee:b5:64:fa:88:d7:41:a2:66:1d:77:69:fb:66:
         5c:a0:71:6f:63:02:7f:14:9c:2b:85:dc:c0:04:e2:79:9a:39:
         b4:e5:46:70:7c:4e:35:88:58:e2:c7:a2:97:d0:c7:d4:e3:88:
         1b:15:ab:b4:8a:40:fb:7d:dd:73:dc:f9:0e:6b:12:1c:ef:85:
         96:e9:fb:1e:7f:3b:19:8c:d9:48:fe:41:b5:b7:48:d2:f2:44:
         be:1b:79:fd:61:53:e2:6f:fc:ea:4f:62:aa:59:25:a2:b4:72:
         96:a8:0f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:22:44 2025 by rpki-client