Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/323830343a373839633a3a2f33322d3332203d3e20323731323534.roa
File:                     323830343a373839633a3a2f33322d3332203d3e20323731323534.roa (raw, json)
Hash identifier:          mbiljivRQx8iMNNvSKPbVGsfe/yI75cxkBJOMpgTbsk=
Subject key identifier:   80:82:33:06:E3:AF:E7:14:21:0C:BE:A6:54:08:0A:9A:4B:8D:EC:B8
Certificate issuer:       /CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7
Certificate serial:       05416EE6720E14B0F0F2B1A86ED1E181F8A7A55A
Authority key identifier: 9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/323830343a373839633a3a2f33322d3332203d3e20323731323534.roa
Signing time:             Mon 02 Jun 2025 18:13:46 +0000
ROA not before:           Mon 02 Jun 2025 18:08:46 +0000
ROA not after:            Mon 01 Jun 2026 18:13:46 +0000
asID:                     271254
IP address blocks:        2804:789c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl
                          rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 15:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:41:6e:e6:72:0e:14:b0:f0:f2:b1:a8:6e:d1:e1:81:f8:a7:a5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7
        Validity
            Not Before: Jun  2 18:08:46 2025 GMT
            Not After : Jun  1 18:13:46 2026 GMT
        Subject: CN=80823306E3AFE714210CBEA654080A9A4B8DECB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:35:d2:9e:e6:58:ae:68:ff:30:35:53:77:
                    b1:0d:77:93:7f:6c:ba:31:89:a5:f6:7e:a5:94:1b:
                    b0:16:dd:cb:f1:5c:8b:79:10:09:1f:00:25:89:64:
                    16:83:f6:9a:0b:dd:a9:6a:e7:06:71:72:f2:e2:45:
                    1b:cd:cb:ec:1b:b5:20:b9:1c:20:7b:1e:16:5b:a8:
                    ba:2b:ae:8d:22:34:65:b4:a0:07:92:c3:df:18:00:
                    3d:f7:84:76:8f:0c:9e:e7:cc:75:b2:a7:50:09:fe:
                    98:9d:15:9f:3f:5f:48:51:ee:4d:f0:ad:d0:35:98:
                    a6:b4:c4:27:89:2e:66:c3:eb:a5:5e:33:fe:de:7a:
                    85:6c:b4:6e:ff:68:82:ee:b7:3c:7f:4a:e0:04:16:
                    b0:84:f6:bc:8a:dc:41:78:dc:4e:a4:71:87:27:c5:
                    22:da:3b:a5:88:64:1f:99:e1:6d:ce:1b:6d:58:52:
                    4d:7b:b0:6b:de:25:b2:92:b2:8d:e1:b9:fb:0d:b7:
                    27:6e:91:87:b5:25:37:3e:fc:04:0b:86:e5:e2:48:
                    d2:8b:5c:d4:28:0d:f2:34:3c:3b:38:e0:b3:4b:55:
                    af:6f:db:de:af:f0:92:f1:8c:7b:17:f7:b8:94:45:
                    c4:00:72:2f:99:5e:bf:c4:0c:0b:65:9b:da:c5:24:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:82:33:06:E3:AF:E7:14:21:0C:BE:A6:54:08:0A:9A:4B:8D:EC:B8
            X509v3 Authority Key Identifier:
                keyid:9A:FB:58:CB:77:96:0F:3E:EF:AF:73:FA:07:38:0F:CE:DD:3F:4B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AFB58CB77960F3EEFAF73FA07380FCEDD3F4BC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETEsAzEfX1rLgRhyE8DiHnbqkRADGHcN2Zam4HjeeMdt/0/323830343a373839633a3a2f33322d3332203d3e20323731323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:789c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:42:3c:6e:35:38:88:5b:88:db:ae:14:1b:78:bf:18:8d:fe:
         f2:99:39:76:6d:35:a4:59:3f:b6:4c:72:f8:9d:4b:58:eb:f3:
         1b:db:94:a0:99:40:88:2e:ae:de:d7:fe:d4:a8:e8:ff:d8:62:
         93:bf:ad:a3:1a:fd:ef:82:7a:fd:09:5c:7c:d8:94:43:a4:34:
         86:9f:84:36:b7:94:33:b2:39:ee:ca:c3:8c:ae:3f:7e:3c:0a:
         ce:0c:e2:0a:ee:1e:66:b4:38:f7:73:d2:88:3f:2b:39:3f:c2:
         7b:42:4d:02:41:3d:17:fb:3d:65:b0:be:a0:9e:61:58:ea:81:
         9a:2c:55:e9:c3:6d:c2:b1:a8:c1:45:11:b6:15:b9:57:05:45:
         72:d0:61:36:a1:18:7a:2e:3c:e6:77:76:90:96:eb:76:03:32:
         9f:28:8e:6c:c2:de:06:d6:00:d9:f8:04:42:ea:d0:43:b5:69:
         b4:02:7e:c6:44:8a:42:93:69:7b:94:7e:8d:86:b7:d6:20:9e:
         54:a5:1a:22:00:fc:dd:38:34:d3:42:8a:60:ba:3c:9b:d7:8e:
         2b:a3:b2:13:b8:0d:7e:d7:12:27:c7:96:e6:47:01:2b:b1:10:
         1b:b0:60:a0:a9:1c:a5:51:c5:b9:6b:8a:c8:cf:ad:0f:1b:31:
         4b:40:02:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:41:12 2025 by rpki-client