Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          CpeUTZBsZy7cpYdqYMmzqhKmYzz0SQ01p/KrHTN9MYU=
Subject key identifier:   DF:9B:A9:0F:EF:6D:DB:02:99:76:33:93:45:17:06:6C:A6:73:B7:3B
Certificate issuer:       /CN=ADFB743F78B2F288155F57415C2B114473B48D92
Certificate serial:       32CAA30F5689BD60B99E6D7136BD219F0EDD9B2E
Authority key identifier: AD:FB:74:3F:78:B2:F2:88:15:5F:57:41:5C:2B:11:44:73:B4:8D:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Sat 14 Jun 2025 17:25:56 +0000
ROA not before:           Sat 14 Jun 2025 17:20:56 +0000
ROA not after:            Sat 13 Jun 2026 17:25:56 +0000
asID:                     274726
IP address blocks:        2804:92a8:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ca:a3:0f:56:89:bd:60:b9:9e:6d:71:36:bd:21:9f:0e:dd:9b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFB743F78B2F288155F57415C2B114473B48D92
        Validity
            Not Before: Jun 14 17:20:56 2025 GMT
            Not After : Jun 13 17:25:56 2026 GMT
        Subject: CN=DF9BA90FEF6DDB02997633934517066CA673B73B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b8:b7:45:26:9b:3a:50:1a:97:4d:70:4f:d2:
                    03:a7:74:fd:d6:32:fb:54:b0:e6:e4:32:60:4e:e1:
                    cf:11:3b:02:50:eb:7b:17:c0:26:8b:d9:62:b5:e0:
                    d3:71:c8:7e:44:2d:53:c7:fc:59:9f:e7:36:25:23:
                    2a:79:f7:f9:a1:df:d6:3e:7e:d1:ce:50:88:0f:9d:
                    1f:ee:53:4a:b4:4b:24:fb:65:9a:5e:9e:07:2d:07:
                    d2:19:6f:b7:7d:f1:2a:1c:67:c0:dd:38:06:53:f9:
                    50:6b:50:08:0e:df:9f:df:f2:33:50:db:7c:54:d3:
                    f3:78:fc:3d:21:7d:24:35:fa:d5:db:40:28:cf:08:
                    ee:66:0f:25:87:7c:4d:e8:0f:23:a3:7d:dd:32:7a:
                    1c:27:1e:b4:a2:6a:e1:00:43:55:68:53:ff:dc:59:
                    e7:50:88:98:26:c6:f8:27:f3:af:f8:3b:1d:ae:35:
                    94:dd:1e:43:de:4e:48:6e:37:57:85:f6:4f:c4:ae:
                    3f:22:f5:b5:f4:32:91:44:c1:e4:e8:89:d2:70:16:
                    43:14:db:8f:54:f2:90:4f:06:3f:d5:52:a4:a0:49:
                    62:2a:24:ee:86:75:10:82:a6:fd:27:be:70:11:d9:
                    14:d8:69:81:73:c2:95:d8:43:b1:63:da:87:d7:df:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9B:A9:0F:EF:6D:DB:02:99:76:33:93:45:17:06:6C:A6:73:B7:3B
            X509v3 Authority Key Identifier:
                keyid:AD:FB:74:3F:78:B2:F2:88:15:5F:57:41:5C:2B:11:44:73:B4:8D:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/ADFB743F78B2F288155F57415C2B114473B48D92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADFB743F78B2F288155F57415C2B114473B48D92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a313030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:41:62:53:06:ea:c8:07:70:5c:dd:99:33:81:a7:d8:90:f2:
         9f:e2:a3:45:0d:b1:6b:7b:e0:eb:96:f6:ea:16:01:75:b9:81:
         fe:6b:ab:b8:82:e1:b3:06:b1:5e:25:69:dd:05:45:18:a3:1f:
         02:0d:04:af:98:6f:ef:1a:4c:63:96:46:77:46:69:8c:85:a5:
         e4:0e:2b:76:96:e4:cb:45:35:4a:33:ee:09:8d:99:cb:48:1f:
         38:7d:03:a8:8c:07:11:22:dc:55:d1:b3:0c:b4:fc:0d:66:54:
         45:23:bb:3e:0f:f8:52:aa:a4:b6:1d:92:39:40:38:de:10:ec:
         36:9f:6a:27:97:c1:8a:0d:88:49:6e:0d:55:cd:cf:ad:bf:74:
         1c:0e:9f:52:3b:e6:9e:3b:a4:a8:c8:b3:8a:de:be:d4:2e:cc:
         8e:92:ab:00:49:26:8c:66:dd:2b:8d:16:d4:4c:4f:d1:f4:f8:
         46:98:76:5f:d6:bc:75:e6:eb:ee:52:c5:75:d9:d5:b8:e9:a6:
         9e:c0:10:26:90:79:3a:f3:ac:ad:ef:8a:ac:f3:89:a5:13:df:
         10:57:e5:7e:10:56:45:6e:02:82:85:c7:db:35:c1:ec:ae:50:
         67:8c:2e:3f:44:6c:37:2d:fb:b1:62:5f:40:02:f1:e9:15:c1:
         06:01:6c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 09:32:32 2025 by rpki-client