Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa
File:                     323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa (raw, json)
Hash identifier:          H/UCWRHnemB6rQm78/4R4Vf8xdeXPSwQL5gQmX1TGFg=
Subject key identifier:   F6:29:FE:2C:BD:56:40:DC:03:55:70:B1:C6:F0:CD:FA:30:0A:09:2D
Certificate issuer:       /CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
Certificate serial:       55A7AD5086DED6EC6F42CB13A3E1C134858DBC77
Authority key identifier: 78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa
Signing time:             Fri 16 May 2025 13:05:01 +0000
ROA not before:           Fri 16 May 2025 13:00:01 +0000
ROA not after:            Fri 15 May 2026 13:05:01 +0000
asID:                     268296
IP address blocks:        2804:4efc:9000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl
                          rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 14:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a7:ad:50:86:de:d6:ec:6f:42:cb:13:a3:e1:c1:34:85:8d:bc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C
        Validity
            Not Before: May 16 13:00:01 2025 GMT
            Not After : May 15 13:05:01 2026 GMT
        Subject: CN=F629FE2CBD5640DC035570B1C6F0CDFA300A092D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5b:6b:08:9c:d5:de:54:cc:40:e8:7b:49:73:
                    73:32:b4:0b:74:36:d1:6e:e9:d0:f6:33:74:90:9a:
                    0c:93:66:86:35:25:51:5d:c7:e3:3b:a1:78:a8:3f:
                    14:71:f1:97:c2:00:97:d6:17:0f:19:19:d1:f8:e1:
                    e6:e4:d6:6f:aa:6b:f2:90:a2:13:24:4b:ef:9c:58:
                    5f:64:5c:61:b3:a7:f8:87:df:7a:ef:69:30:35:e5:
                    27:64:4e:fb:f1:4d:6a:ac:d7:96:eb:10:96:ff:45:
                    2e:89:63:a9:e5:07:46:10:1a:63:68:41:58:27:e5:
                    60:1d:e7:c8:88:54:c1:27:f1:e9:cb:0a:5e:f1:48:
                    df:80:c4:86:ad:43:ef:ca:43:af:39:22:7a:48:b7:
                    cf:90:d6:c3:ad:23:5e:07:1d:4c:ef:b4:af:d6:6c:
                    86:3c:6a:a3:41:2a:5e:20:0a:f0:3a:7f:76:62:e7:
                    ee:42:09:0e:7e:36:20:67:1b:b4:98:2f:0a:2e:52:
                    a6:81:5e:26:29:1f:2c:d3:91:d8:fe:bc:f3:53:1c:
                    16:3d:b5:04:63:dc:43:b8:db:bf:92:d7:5f:51:74:
                    b6:c4:e0:82:5e:d8:34:a5:0e:26:67:56:74:bf:35:
                    80:14:c6:b8:9f:21:30:6d:6c:86:c0:67:3a:e5:e0:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:29:FE:2C:BD:56:40:DC:03:55:70:B1:C6:F0:CD:FA:30:0A:09:2D
            X509v3 Authority Key Identifier:
                keyid:78:DE:C8:C0:42:48:9F:1A:E6:8F:9C:8A:1D:8C:0D:29:DC:CB:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78DEC8C042489F1AE68F9C8A1D8C0D29DCCB437C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/323830343a346566633a393030303a3a2f33362d3336203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4efc:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:ff:f4:b4:a7:f1:52:b5:a3:cb:0c:f7:75:c9:ad:a3:4f:32:
         4e:bc:35:a5:3c:09:6b:b5:a5:4e:48:a1:0d:6e:c1:59:1e:db:
         5f:98:57:73:dd:e6:7f:b5:76:97:fd:a1:2e:f0:5b:84:7f:d7:
         02:9f:7b:c1:65:32:33:7b:9e:53:8b:3b:03:4d:1c:a2:7e:d4:
         cb:37:bd:8f:ee:b4:14:a0:e0:fb:d9:26:fa:f2:be:0b:7b:bc:
         90:71:b1:66:c4:e5:8d:db:cb:7a:64:99:58:cc:24:5c:9a:97:
         65:39:8a:b4:2b:4b:99:d9:cf:0d:88:b5:3b:32:f7:56:83:7f:
         bc:e8:b8:32:27:56:a5:39:77:f7:b7:35:7a:6e:40:32:0a:2b:
         97:d8:16:48:9c:99:1d:19:dd:88:5b:d1:a3:a0:93:35:c3:bb:
         1a:e8:47:87:c5:71:f1:1d:5b:95:50:53:00:6d:d7:91:ca:73:
         3d:11:09:95:d6:67:77:46:87:18:5e:f7:ad:4b:98:38:67:55:
         de:fd:ef:50:bc:fd:f2:de:3d:b7:65:e4:0d:b3:46:45:6d:fa:
         9b:01:02:07:10:8e:1a:ba:0b:ad:eb:76:d0:b8:de:4e:ed:c0:
         40:ed:4b:61:56:a2:a4:10:e8:78:72:86:31:82:ff:6e:66:52:
         1d:6d:5b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:15:53 2025 by rpki-client