Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EAGjsLqUFCBEUWn5xTfMAwBi7uM4HdyfdGFAzXHYwwxW/0/323830343a393338303a3a2f33322d3332203d3e20323734373831.roa
File:                     323830343a393338303a3a2f33322d3332203d3e20323734373831.roa (raw, json)
Hash identifier:          xIBk4Q97tW9lipii7XKEKYF8UfPcNOle+oaNcgj7mUE=
Subject key identifier:   92:74:10:37:54:BE:0E:A6:8C:84:6D:BF:1B:F8:18:5E:9F:56:4D:E1
Certificate issuer:       /CN=2FACDB6C0D4BC71D789C015B2191C19806081879
Certificate serial:       353248FD949B9217122E04FFDAA59A8BACFF4239
Authority key identifier: 2F:AC:DB:6C:0D:4B:C7:1D:78:9C:01:5B:21:91:C1:98:06:08:18:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FACDB6C0D4BC71D789C015B2191C19806081879.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EAGjsLqUFCBEUWn5xTfMAwBi7uM4HdyfdGFAzXHYwwxW/0/323830343a393338303a3a2f33322d3332203d3e20323734373831.roa
Signing time:             Fri 06 Jun 2025 03:56:10 +0000
ROA not before:           Fri 06 Jun 2025 03:51:10 +0000
ROA not after:            Fri 05 Jun 2026 03:56:10 +0000
asID:                     274781
IP address blocks:        2804:9380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EAGjsLqUFCBEUWn5xTfMAwBi7uM4HdyfdGFAzXHYwwxW/0/2FACDB6C0D4BC71D789C015B2191C19806081879.crl
                          rsync://rpki-repo.registro.br/repo/EAGjsLqUFCBEUWn5xTfMAwBi7uM4HdyfdGFAzXHYwwxW/0/2FACDB6C0D4BC71D789C015B2191C19806081879.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FACDB6C0D4BC71D789C015B2191C19806081879.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 12:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:32:48:fd:94:9b:92:17:12:2e:04:ff:da:a5:9a:8b:ac:ff:42:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FACDB6C0D4BC71D789C015B2191C19806081879
        Validity
            Not Before: Jun  6 03:51:10 2025 GMT
            Not After : Jun  5 03:56:10 2026 GMT
        Subject: CN=9274103754BE0EA68C846DBF1BF8185E9F564DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:6c:33:49:99:00:6e:67:5c:66:0d:82:df:
                    67:2b:cb:a1:9e:d5:d6:a8:9b:9e:99:d0:78:75:ab:
                    2c:d9:36:36:53:e1:05:a3:a5:43:fe:14:cf:c8:7f:
                    df:f1:a0:f0:dd:a1:e2:12:b1:91:51:b8:87:51:d2:
                    75:7a:d5:a7:6a:33:1b:f3:18:0a:52:40:ec:f9:f9:
                    71:80:fa:a1:41:20:40:63:50:9d:7a:9f:36:d2:ba:
                    c3:13:a0:3e:30:93:59:e7:b1:72:9f:24:a7:8a:3e:
                    00:de:fc:05:6a:49:82:bf:12:ea:6f:84:bf:14:0a:
                    b9:93:c1:97:3f:53:98:02:ed:ec:3f:20:9c:72:f3:
                    6c:ed:df:0b:32:b1:52:07:22:3b:0a:d2:38:b0:9c:
                    07:99:26:a4:d6:91:63:63:15:95:6d:5b:21:aa:83:
                    bf:22:f6:a8:d9:0b:50:29:ca:19:ab:29:d6:d8:ce:
                    96:0a:ee:b4:fc:90:f1:5e:3f:90:bf:8f:a2:f2:49:
                    fb:5e:d7:d1:4f:4b:8b:c3:08:d5:47:33:ef:e8:6f:
                    ec:b1:ca:fc:73:79:90:be:b9:e4:6a:e2:d1:c1:b9:
                    78:37:48:fd:2b:29:af:11:d5:de:2b:e0:97:c5:ee:
                    3d:15:dc:a4:da:37:fa:97:ad:1b:5c:92:c2:63:df:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:74:10:37:54:BE:0E:A6:8C:84:6D:BF:1B:F8:18:5E:9F:56:4D:E1
            X509v3 Authority Key Identifier:
                keyid:2F:AC:DB:6C:0D:4B:C7:1D:78:9C:01:5B:21:91:C1:98:06:08:18:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EAGjsLqUFCBEUWn5xTfMAwBi7uM4HdyfdGFAzXHYwwxW/0/2FACDB6C0D4BC71D789C015B2191C19806081879.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FACDB6C0D4BC71D789C015B2191C19806081879.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EAGjsLqUFCBEUWn5xTfMAwBi7uM4HdyfdGFAzXHYwwxW/0/323830343a393338303a3a2f33322d3332203d3e20323734373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9380::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:38:69:24:36:28:b5:dd:48:2a:94:d0:09:a6:a5:1f:ae:46:
         af:ef:64:3a:a1:ec:50:c0:46:6f:32:1e:ef:21:5c:e2:37:e5:
         f7:1a:7f:ec:5f:be:38:1d:5b:ac:97:3e:2b:72:34:0d:4d:e5:
         c4:2d:85:79:e0:88:81:9c:69:fe:ed:3d:e3:22:de:1a:8c:43:
         01:ec:21:53:80:8d:bb:d6:b7:78:9b:67:bc:b2:29:a7:28:a1:
         47:53:f3:ab:fd:57:a6:3a:84:29:9f:87:34:a5:9a:ab:ca:f3:
         f9:d3:67:05:9b:6b:f4:eb:a1:b2:b9:87:d7:9b:ba:0e:1e:f2:
         a2:f3:f7:f5:7b:a4:93:4f:4b:5a:74:92:86:9c:3c:4f:4d:e8:
         e8:cc:3e:d5:ed:da:7b:40:0d:23:d7:06:9f:0d:9d:17:34:26:
         bb:ae:d5:6e:75:63:26:b1:e5:2d:19:fe:aa:41:10:e1:0c:a4:
         4a:a0:a6:db:f9:85:ab:42:30:24:7a:2f:bd:7f:87:fb:a7:0c:
         58:b6:24:55:78:d4:33:ed:db:dc:fb:0f:50:ab:58:fd:94:e9:
         9b:e1:d9:84:76:d2:e6:65:93:1f:ae:73:af:e8:60:50:25:73:
         23:94:b6:a3:33:01:ce:7b:f6:83:a5:20:a5:85:b8:6e:ec:10:
         6c:44:02:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:53:07 2025 by rpki-client