Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a3a2f33332d3333203d3e20323733363634.roa
File:                     323830343a386135633a3a2f33332d3333203d3e20323733363634.roa (raw, json)
Hash identifier:          5CmcIU/vS1Rv9N6s6xqwYRYa+UAdiZf20l3gN+MdMKY=
Subject key identifier:   9D:76:A6:AE:F1:0D:2F:EC:54:06:98:70:7B:8D:80:CB:E7:37:5D:D7
Certificate issuer:       /CN=62877F2B1F6C47CB9BE968F819C94EFC7AA528B9
Certificate serial:       7BD5158DBC8CE70DC017FC08D40D534F8D9D4758
Authority key identifier: 62:87:7F:2B:1F:6C:47:CB:9B:E9:68:F8:19:C9:4E:FC:7A:A5:28:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a3a2f33332d3333203d3e20323733363634.roa
Signing time:             Fri 20 Jun 2025 00:59:52 +0000
ROA not before:           Fri 20 Jun 2025 00:54:52 +0000
ROA not after:            Fri 19 Jun 2026 00:59:52 +0000
asID:                     273664
IP address blocks:        2804:8a5c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.crl
                          rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 02:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d5:15:8d:bc:8c:e7:0d:c0:17:fc:08:d4:0d:53:4f:8d:9d:47:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62877F2B1F6C47CB9BE968F819C94EFC7AA528B9
        Validity
            Not Before: Jun 20 00:54:52 2025 GMT
            Not After : Jun 19 00:59:52 2026 GMT
        Subject: CN=9D76A6AEF10D2FEC540698707B8D80CBE7375DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:23:07:42:89:5d:bf:ed:5c:7b:11:d8:f9:01:
                    f5:b8:19:31:38:d2:da:c3:33:7a:4b:4d:ba:7e:86:
                    76:ab:bf:ab:c2:57:bf:37:99:43:ac:41:74:cf:0e:
                    9a:2e:46:64:64:e7:62:2c:33:b5:01:53:9c:ea:a8:
                    bc:13:e6:1b:46:c1:63:56:fa:97:b6:c5:3d:18:0c:
                    ac:d5:72:03:81:4c:a5:88:39:09:3b:98:29:c0:06:
                    0b:a0:96:c5:96:d8:bb:29:ba:0e:7b:f4:4a:d6:d6:
                    04:8f:8b:9c:85:16:c1:7e:24:92:a5:fa:70:4c:04:
                    4c:c7:e3:d3:2f:7b:17:bd:08:55:70:f6:38:db:a9:
                    e4:7d:95:37:7d:6c:bf:fc:9c:fd:93:75:93:a9:cb:
                    94:47:83:da:70:c2:20:89:11:38:d1:70:7e:88:84:
                    50:a2:0c:ff:ee:7c:65:e0:88:a3:95:47:89:d5:2e:
                    41:85:9c:67:01:ea:5d:d4:d1:79:dc:80:c2:b6:70:
                    dd:d1:63:8d:21:2e:f3:45:79:db:ea:d4:33:f8:bb:
                    ff:ae:1f:c8:23:e5:38:3d:1b:59:e7:39:8a:39:76:
                    02:0e:27:a3:e9:f2:fa:de:68:a4:6e:5d:10:b6:52:
                    ee:77:2b:34:e0:fe:08:0c:48:eb:a1:e5:9d:2b:5c:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:76:A6:AE:F1:0D:2F:EC:54:06:98:70:7B:8D:80:CB:E7:37:5D:D7
            X509v3 Authority Key Identifier:
                keyid:62:87:7F:2B:1F:6C:47:CB:9B:E9:68:F8:19:C9:4E:FC:7A:A5:28:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62877F2B1F6C47CB9BE968F819C94EFC7AA528B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eLfyXw114CeA99WGRhrai8e1G477GWaGPwN9Rd8QsFr/0/323830343a386135633a3a2f33332d3333203d3e20323733363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a5c::/33

    Signature Algorithm: sha256WithRSAEncryption
         98:ca:24:2a:bf:e1:a6:f3:6e:80:83:0c:c8:cd:76:79:09:41:
         00:9d:1b:ee:cc:df:dc:74:cd:20:f7:49:a4:89:37:de:86:e6:
         21:4e:b0:3e:08:b7:cd:15:69:5d:f0:19:e8:34:c6:1c:1f:55:
         c3:6c:37:3a:27:e3:24:96:49:4f:87:30:46:42:d8:26:19:ed:
         61:c9:02:de:a1:f8:0e:bc:4f:49:41:b0:74:79:ce:d0:6b:e9:
         c1:98:a8:93:6f:9d:5d:5d:40:3d:14:46:01:03:d2:64:25:d2:
         e4:a1:7d:9d:58:35:a0:b9:fb:da:18:d7:11:b7:d1:a6:64:d1:
         28:52:9c:a1:bf:74:41:c1:3b:41:81:46:9c:8f:34:b3:d7:a4:
         76:48:2a:0e:66:d7:90:64:bd:48:f4:41:b5:09:c9:d7:dd:ce:
         6c:c7:d6:65:af:de:c1:22:04:a4:c7:f2:8e:54:8b:86:51:0c:
         e1:81:ff:4b:ad:05:0e:4a:a6:de:86:09:22:82:e7:18:f4:ce:
         56:6f:f0:72:a1:75:30:93:fa:a8:ec:4c:c6:89:c2:68:64:80:
         17:fc:5d:74:66:f8:ff:0c:6f:0a:c6:2d:1c:1b:f8:4c:10:2a:
         90:77:c0:f6:95:60:90:7c:ea:f8:8d:e5:81:87:5f:53:b9:66:
         e2:e8:19:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 10:01:17 2025 by rpki-client