Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33332d3333203d3e20323638323936.roa
File:                     323830343a346566633a383030303a3a2f33332d3333203d3e20323638323936.roa (raw, json)
Hash identifier:          rP+cLZldsnktiyiliCOnRM3EJUfcry2t2wLrAhpRYlc=
Subject key identifier:   F1:E8:64:25:F2:B3:BD:04:23:8D:67:BF:F3:E9:76:09:5C:D1:3C:A3
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       364E8C0D0D56B9607FBC375F7D5CB5D9F3A4AF0C
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33332d3333203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:04 +0000
ROA not before:           Fri 16 May 2025 13:00:04 +0000
ROA not after:            Fri 15 May 2026 13:05:04 +0000
asID:                     268296
IP address blocks:        2804:4efc:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 08:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4e:8c:0d:0d:56:b9:60:7f:bc:37:5f:7d:5c:b5:d9:f3:a4:af:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:04 2025 GMT
            Not After : May 15 13:05:04 2026 GMT
        Subject: CN=F1E86425F2B3BD04238D67BFF3E976095CD13CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:6b:67:41:f6:28:83:83:7d:d6:aa:c0:ff:
                    c3:1e:03:52:b0:a4:c8:ae:24:3a:3c:8c:fd:68:8d:
                    56:6c:57:e2:f5:42:88:fc:28:c8:e1:7a:1f:85:65:
                    02:aa:2a:01:ee:12:80:37:70:46:17:07:52:2b:72:
                    bd:21:11:8e:90:db:25:7f:2e:5b:43:92:dd:95:2d:
                    e3:b3:eb:29:ea:23:f4:97:b4:b5:f8:2a:1e:af:75:
                    56:8d:cd:02:aa:5f:7f:6b:32:2e:2c:86:68:fd:58:
                    b4:5c:38:ad:6c:25:bb:89:20:4c:6a:7b:e4:84:bd:
                    f0:4c:bc:37:65:e2:2e:9d:37:7f:21:27:20:c2:0a:
                    37:92:95:52:62:83:92:18:76:33:48:63:17:ef:a0:
                    f9:d2:55:8a:82:9b:a5:37:1d:f9:27:b0:bb:0b:c0:
                    fc:c5:71:91:76:53:6c:b6:90:67:62:62:47:3b:31:
                    c9:c3:b8:d3:10:c6:b1:06:4c:2c:6a:f5:de:ae:49:
                    fe:62:75:c4:55:ba:e7:a6:4c:c2:75:87:f6:1f:76:
                    1b:d7:81:13:5c:e2:0b:bd:d5:fe:b3:99:5d:22:63:
                    3b:29:48:e0:a2:dd:d1:7a:7e:e8:55:12:5b:a1:29:
                    6e:1a:23:c4:72:8c:6d:11:dc:73:e0:fc:da:d0:49:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:64:25:F2:B3:BD:04:23:8D:67:BF:F3:E9:76:09:5C:D1:3C:A3
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a383030303a3a2f33332d3333203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         96:54:87:fe:ca:26:3f:39:d8:1f:34:d0:c3:79:0b:2d:82:0f:
         da:8d:e4:ad:c2:74:26:c1:0c:93:8c:ce:91:26:61:51:cc:b6:
         23:28:9a:db:18:7f:e6:d6:48:84:41:6b:b9:b7:04:09:9e:65:
         f0:0a:02:8b:2d:39:35:91:81:e0:8a:27:bc:56:cd:ab:30:2e:
         72:da:5c:2c:81:bf:64:1b:fd:b6:33:8f:66:81:eb:35:a5:57:
         ea:3b:e4:62:e0:8d:a9:51:85:55:44:d8:95:7d:1d:96:c6:9b:
         3d:60:8a:63:0b:64:2f:9d:8e:1a:6c:37:22:82:a5:3d:b5:de:
         86:ed:03:a7:50:d3:9a:80:ca:75:0a:99:ff:f0:c8:a7:da:41:
         90:5a:32:0f:9c:3a:eb:fb:12:b5:0c:9c:97:03:66:93:d8:65:
         f2:ca:17:e6:d1:51:3c:dd:b1:09:4d:7f:f7:be:77:12:39:00:
         9e:0d:ea:ce:e2:3a:49:a1:a0:6f:d1:67:05:2e:e9:f8:b6:5d:
         b1:9e:de:6c:c9:3d:03:c6:3b:5f:39:98:fe:35:b2:b8:2d:82:
         41:66:3b:b1:3f:98:d9:96:d4:3a:1c:80:78:bb:ec:63:12:d7:
         73:ce:65:ec:d0:20:f3:c4:fa:7e:e0:a7:2d:41:74:ca:32:18:
         bd:ca:b6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:48:55 2025 by rpki-client