Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          XvgdP5H7A1Ip2lnWq2rX9B07M84Ldn1Z6BokGbwui3c=
Subject key identifier:   93:A7:6C:27:74:B4:88:61:F9:33:FD:88:92:B6:15:A3:A2:36:18:E6
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       50E3BDA60101708DEF1FB2C931115302F1F6FC26
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:03 +0000
ROA not before:           Fri 16 May 2025 13:00:03 +0000
ROA not after:            Fri 15 May 2026 13:05:03 +0000
asID:                     268296
IP address blocks:        2804:4efc:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 08:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e3:bd:a6:01:01:70:8d:ef:1f:b2:c9:31:11:53:02:f1:f6:fc:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:03 2025 GMT
            Not After : May 15 13:05:03 2026 GMT
        Subject: CN=93A76C2774B48861F933FD8892B615A3A23618E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f8:51:29:55:cf:34:db:d2:78:79:9e:1c:18:
                    9e:57:93:fb:5d:9b:c5:f9:08:bd:b6:dd:f0:7a:e3:
                    d7:3c:97:28:1a:f3:96:bc:8e:1f:e4:7d:aa:b8:69:
                    7b:c7:88:18:6d:d0:fe:df:ab:27:65:06:ad:84:dc:
                    f9:86:d6:e4:64:54:cd:d9:90:fd:a2:15:0b:cd:a9:
                    8c:17:f6:8b:34:d3:e6:93:0b:10:f1:84:28:d7:03:
                    67:99:21:6f:a2:ee:59:c3:1d:68:56:92:2d:d2:09:
                    25:9f:61:03:c4:89:27:1f:d2:cc:28:2b:9b:32:64:
                    31:9c:88:29:7e:95:f6:44:85:4b:92:d4:89:6c:8d:
                    dc:4b:0a:bc:e8:23:e2:8b:0b:b3:a9:8c:3b:e6:2b:
                    a5:62:ff:e1:ec:4c:2e:2e:1c:13:a9:c3:af:b1:9f:
                    16:19:1d:0b:71:cd:64:b9:04:d5:82:e3:ea:d0:a1:
                    6f:df:83:8e:a4:21:e8:5d:b3:a8:6a:fb:15:a4:93:
                    61:25:8f:ad:df:00:95:13:11:bb:36:86:7a:f0:9a:
                    1a:3d:1a:ba:03:a7:d4:e6:0c:74:1d:59:b1:1e:fe:
                    4d:fb:3f:85:b8:97:3b:8e:ad:7c:06:e3:02:88:81:
                    2b:e9:8e:8c:0c:0d:3f:34:0a:c3:7c:fb:cc:bc:7f:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A7:6C:27:74:B4:88:61:F9:33:FD:88:92:B6:15:A3:A2:36:18:E6
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a333030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1c:42:45:71:95:45:a3:71:35:ad:0d:83:83:30:08:24:85:3a:
         cf:dd:8a:46:32:7b:26:58:22:e1:1c:23:f1:83:55:48:3f:38:
         03:36:4b:a2:08:b2:0f:eb:fc:85:35:b3:1f:73:f0:ba:93:b6:
         69:05:91:6f:18:50:25:7a:95:01:ef:74:86:e9:ff:18:49:77:
         ab:6a:e5:16:44:1e:1b:70:5c:5b:c1:75:36:c9:be:98:91:2d:
         05:9a:66:31:60:6e:67:51:59:58:7e:20:70:c6:c6:b7:79:86:
         ae:ad:83:d8:16:86:87:6e:e7:e2:81:16:98:55:3f:2f:23:f9:
         66:0e:86:16:f3:49:46:f6:82:08:84:3c:71:e5:ce:1b:b1:47:
         6b:17:d4:be:72:87:31:28:54:53:45:e6:3a:f3:10:7a:30:94:
         15:83:50:e9:e7:80:2e:2b:d7:e9:3b:03:a1:1e:f7:b3:3e:d3:
         e2:1a:ec:a8:02:fd:91:00:29:86:58:c8:86:cc:3c:07:90:fa:
         d0:4d:55:82:db:25:1e:3a:3f:06:f9:00:b9:33:c2:de:9c:8f:
         8b:2c:07:36:29:4d:89:8d:9a:3e:20:15:08:ae:c9:55:5d:a2:
         a4:42:70:dc:12:29:5e:f1:ec:82:65:2c:dc:31:41:ea:77:26:
         68:63:c8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:14:48 2025 by rpki-client