Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/323830343a333534383a3a2f33322d3334203d3e20323636323739.roa
File:                     323830343a333534383a3a2f33322d3334203d3e20323636323739.roa (raw, json)
Hash identifier:          klK6zphPZwHrsHFSwSut6wtKerPng7sWvbhzKXuNWGI=
Subject key identifier:   95:09:FC:DF:95:FA:B4:85:CD:3B:F9:82:91:4C:1E:70:02:E1:8C:CE
Certificate issuer:       /CN=79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1
Certificate serial:       56DF08317544AC8C6BE72275CA565635F2A5A0E7
Authority key identifier: 79:E1:12:00:E9:DB:04:5F:5A:94:8F:7C:DE:1F:2E:88:F8:EF:E1:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/323830343a333534383a3a2f33322d3334203d3e20323636323739.roa
Signing time:             Wed 07 May 2025 07:49:07 +0000
ROA not before:           Wed 07 May 2025 07:44:07 +0000
ROA not after:            Wed 06 May 2026 07:49:07 +0000
asID:                     266279
IP address blocks:        2804:3548::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.crl
                          rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 12:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:df:08:31:75:44:ac:8c:6b:e7:22:75:ca:56:56:35:f2:a5:a0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1
        Validity
            Not Before: May  7 07:44:07 2025 GMT
            Not After : May  6 07:49:07 2026 GMT
        Subject: CN=9509FCDF95FAB485CD3BF982914C1E7002E18CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:f4:2c:a7:08:db:28:3a:fe:bd:1c:0e:98:
                    f9:39:d5:41:5e:3c:2d:b8:15:d3:c9:1a:41:38:73:
                    38:e4:6a:ee:b5:63:41:21:ca:48:f4:99:2e:79:c2:
                    ca:75:8f:de:64:1d:46:59:44:4f:d3:3f:d3:29:48:
                    12:a1:29:8c:89:ce:3e:4b:f4:eb:0b:29:3d:ed:01:
                    61:76:8b:3b:7f:11:9c:6d:a9:3b:37:12:83:4c:ae:
                    0c:1a:03:84:bb:13:30:df:60:20:e8:73:f7:59:01:
                    31:55:53:4a:25:51:f9:f8:43:2f:3a:9f:90:b5:6a:
                    c4:be:6a:3b:ad:42:de:07:4c:4d:95:47:bf:63:51:
                    f1:f3:42:68:fd:f8:19:2f:b7:63:ae:0d:f2:a2:84:
                    ee:b3:78:12:4d:97:7f:c1:4b:c0:78:bc:19:56:ac:
                    ba:a1:1a:f2:ec:04:84:50:58:a5:90:e9:4d:a7:63:
                    36:98:81:f0:2d:d9:7f:40:2a:b8:be:12:a5:fd:0a:
                    bf:dd:30:40:67:42:39:78:9b:4f:97:e4:5a:07:78:
                    39:2a:97:03:d7:af:98:b1:d6:d8:1d:06:9b:8c:9a:
                    6c:97:ba:15:13:38:c7:bb:88:05:86:20:fc:e5:09:
                    a2:62:1d:18:6d:39:1d:b4:5e:0a:2a:11:c7:b3:9c:
                    6e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:09:FC:DF:95:FA:B4:85:CD:3B:F9:82:91:4C:1E:70:02:E1:8C:CE
            X509v3 Authority Key Identifier:
                keyid:79:E1:12:00:E9:DB:04:5F:5A:94:8F:7C:DE:1F:2E:88:F8:EF:E1:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E11200E9DB045F5A948F7CDE1F2E88F8EFE1A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/323830343a333534383a3a2f33322d3334203d3e20323636323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3548::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:c1:2a:ae:49:2e:6e:d6:93:88:4c:b4:8b:2b:95:0c:f5:3c:
         8f:0f:b0:a1:bf:7e:de:bf:1d:4e:94:96:1b:74:c1:32:2c:85:
         f8:bc:53:9a:65:c4:9a:87:13:67:cb:31:43:ef:43:35:b0:80:
         9f:6b:cc:3e:88:25:41:8c:7f:b9:20:65:c6:2c:ca:e4:52:15:
         58:10:19:9f:02:dc:a7:14:6e:4a:7a:37:28:f8:3b:03:a6:63:
         9f:49:fd:73:d4:db:60:51:71:cc:4c:c4:21:27:04:d9:af:03:
         bf:d2:7e:eb:67:03:45:b5:8b:1e:6c:8b:87:d4:94:1f:07:53:
         93:05:d1:ea:e0:24:70:c6:50:52:c5:2d:d7:b4:cb:33:bb:a4:
         88:46:6f:00:ba:2a:ba:17:4f:87:6f:89:3f:26:37:55:17:55:
         e5:70:3e:02:dd:a7:a9:07:3d:bf:e0:ab:0c:b3:0f:b7:af:3b:
         5c:83:9c:fc:9c:e3:d9:9b:b5:60:2a:ac:5f:68:3a:52:4c:f8:
         be:88:78:19:4a:88:c8:67:0b:b1:18:ca:28:1c:1e:92:38:89:
         c6:66:a1:1c:41:1d:88:a2:68:c0:28:61:c2:2e:db:c8:a0:4a:
         42:90:2d:fd:2f:36:21:11:8f:d8:24:c6:bc:ef:cb:36:59:8e:
         a5:74:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 02:26:06 2025 by rpki-client