Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a343030303a3a2f33342d3334203d3e20323731333538.roa
File:                     323830343a376134303a343030303a3a2f33342d3334203d3e20323731333538.roa (raw, json)
Hash identifier:          db2UPFMVYoilMOLNarI1dS1Y80Wjaw6+PmInxhKKJHM=
Subject key identifier:   0F:0A:16:EF:3D:2B:AB:EB:FD:C2:3C:57:3C:FA:2A:70:50:0E:07:2E
Certificate issuer:       /CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
Certificate serial:       05DEA0D5E1B7EDCACBE521EA5ADF830986AAB168
Authority key identifier: 9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a343030303a3a2f33342d3334203d3e20323731333538.roa
Signing time:             Mon 28 Jul 2025 20:27:55 +0000
ROA not before:           Mon 28 Jul 2025 20:22:55 +0000
ROA not after:            Mon 27 Jul 2026 20:27:55 +0000
asID:                     271358
IP address blocks:        2804:7a40:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl
                          rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 12 Aug 2025 01:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:de:a0:d5:e1:b7:ed:ca:cb:e5:21:ea:5a:df:83:09:86:aa:b1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EE45671B244BF73463D23EF8E56E13CE6A19A84
        Validity
            Not Before: Jul 28 20:22:55 2025 GMT
            Not After : Jul 27 20:27:55 2026 GMT
        Subject: CN=0F0A16EF3D2BABEBFDC23C573CFA2A70500E072E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b4:e7:9a:89:f1:6a:ac:58:38:ed:65:2f:98:
                    54:e8:8f:06:7f:69:14:bf:2a:f4:45:08:f7:e8:f1:
                    ad:de:13:b1:9a:a2:aa:08:08:78:44:17:b2:25:ce:
                    23:0f:67:b6:71:76:1d:31:d2:94:28:cb:47:22:93:
                    58:ea:39:df:ce:af:bb:31:c8:20:94:b2:8e:6a:12:
                    62:9f:ae:83:3b:ae:d6:9a:89:4c:1e:ad:1f:d9:6a:
                    b8:c6:74:31:69:61:9c:a1:60:2e:41:89:4a:8e:0c:
                    ec:16:47:d4:34:03:24:f3:24:6e:76:20:0c:17:b8:
                    72:42:36:30:53:46:ce:09:46:eb:95:77:94:47:9b:
                    57:67:c1:13:e3:c2:dc:12:85:bf:52:4c:7e:39:bf:
                    8e:55:f4:b9:fe:39:39:77:c5:69:12:6d:67:38:e8:
                    fa:ad:73:08:51:b1:82:aa:37:8d:db:d9:27:cb:dd:
                    c1:7c:0b:f3:1b:2e:65:4f:1b:7f:5c:25:f2:07:cb:
                    2d:03:10:a0:46:e7:47:9e:3d:33:bc:5f:26:b6:b5:
                    ed:24:84:38:1d:ee:58:7d:6e:af:38:8b:e3:83:3b:
                    8f:ec:b6:81:ba:80:5a:a8:cb:27:b6:39:55:fd:37:
                    e4:cb:50:90:37:e2:82:c5:b3:66:d7:8d:43:7b:b9:
                    e5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0A:16:EF:3D:2B:AB:EB:FD:C2:3C:57:3C:FA:2A:70:50:0E:07:2E
            X509v3 Authority Key Identifier:
                keyid:9E:E4:56:71:B2:44:BF:73:46:3D:23:EF:8E:56:E1:3C:E6:A1:9A:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/9EE45671B244BF73463D23EF8E56E13CE6A19A84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9EE45671B244BF73463D23EF8E56E13CE6A19A84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DitoLgRXeBCMqaNMdCWp8tj1kpZ94FkWThNLkfGfEtat/0/323830343a376134303a343030303a3a2f33342d3334203d3e20323731333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a40:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:aa:d1:c8:33:f1:4e:1b:0f:c0:df:27:dc:23:06:d4:92:
         fe:f4:4b:7f:e3:3c:af:81:ed:21:24:ea:30:e9:98:f5:5d:af:
         55:0b:a5:65:7a:07:f3:b9:c4:fc:1e:61:1b:02:e6:06:08:13:
         fc:c0:47:f4:34:bc:22:9a:06:23:8a:73:c2:b7:24:f2:21:16:
         4f:cd:f2:de:6e:2f:43:84:7d:b7:05:db:14:55:7e:53:9a:ca:
         22:05:e6:df:00:c4:c2:aa:5a:50:52:f2:b3:7a:97:3a:53:b0:
         e4:b5:d5:57:2e:91:47:52:55:56:b4:69:17:ed:2d:59:a6:35:
         2e:a9:1a:28:87:ba:85:55:9f:d8:dd:88:b4:68:d4:1a:ea:79:
         e9:a9:67:9c:bc:41:09:82:92:60:e3:5a:65:9a:52:a9:fa:39:
         2d:7f:8a:ce:80:0b:b0:c9:3c:c0:1d:dc:0d:d5:9b:e6:ce:b8:
         0f:84:2e:9e:62:08:bf:8e:bf:72:f5:40:e1:79:7c:ad:6e:45:
         bb:79:46:a4:41:de:48:a9:1b:23:d6:2d:89:1c:e1:2d:3c:c7:
         67:da:fa:ae:49:5b:f3:2a:83:9f:72:f4:a0:0c:4a:fe:0b:d0:
         78:37:92:b8:12:2d:8a:91:f3:74:1f:1c:5b:92:1e:8f:3a:da:
         a9:58:a7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:57:04 2025 by rpki-client