Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313039313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a313039313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          5roue4hgbEBWxLNFxZ6H7je5wnR1yOHzmyAIrJCsNaw=
Subject key identifier:   A6:37:F4:76:8E:D2:1C:C9:54:87:D5:56:0D:76:7B:6E:F6:9B:C7:64
Certificate issuer:       /CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Certificate serial:       7F6B3743BBEF27894853C1C27245CDE56DB41603
Authority key identifier: 8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313039313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Sun 27 Apr 2025 10:16:40 +0000
ROA not before:           Sun 27 Apr 2025 10:11:40 +0000
ROA not after:            Sun 26 Apr 2026 10:16:40 +0000
asID:                     269566
IP address blocks:        2804:6688:1091::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 12:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6b:37:43:bb:ef:27:89:48:53:c1:c2:72:45:cd:e5:6d:b4:16:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
        Validity
            Not Before: Apr 27 10:11:40 2025 GMT
            Not After : Apr 26 10:16:40 2026 GMT
        Subject: CN=A637F4768ED21CC95487D5560D767B6EF69BC764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:3f:9f:a4:12:2f:e0:28:15:61:13:3c:e5:
                    ca:25:e0:d9:95:1d:69:85:b6:ca:1c:1f:91:1e:3a:
                    72:fc:ef:26:ac:af:c5:99:05:f4:8f:e1:47:1a:58:
                    ec:43:af:09:80:a5:74:ba:77:e7:64:47:ac:12:7e:
                    5a:58:8c:e7:99:c1:53:68:10:71:89:32:e1:78:b4:
                    82:30:18:96:f4:c2:7a:67:07:87:6a:02:13:f3:13:
                    ce:65:c0:b1:f4:39:ac:2b:a7:00:58:b4:20:13:bb:
                    f5:b0:87:24:c8:4a:c2:d8:09:86:00:82:cf:33:b3:
                    d1:f1:d4:a1:b8:f2:95:e8:e8:7e:61:4b:37:d7:d6:
                    43:37:d2:f0:c5:1a:e8:5f:96:43:ef:b0:58:f4:f6:
                    7c:45:ce:93:fc:a3:09:43:74:22:60:76:96:5b:e0:
                    c6:d8:7e:fd:a9:9e:d2:12:40:63:c9:8f:02:28:3e:
                    b6:79:a6:62:22:ca:a1:b5:b8:22:80:db:72:6f:46:
                    41:49:76:e5:9e:05:f0:a8:7f:fe:cf:e1:5e:0b:cc:
                    4e:f6:d9:6b:6a:cd:e8:c3:3b:ea:f1:70:7d:8d:2f:
                    6f:72:2e:a8:6a:6e:79:95:16:e1:87:5a:dc:1a:7c:
                    30:a9:52:4a:c8:cc:66:ae:c5:21:19:55:25:80:0c:
                    3a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:37:F4:76:8E:D2:1C:C9:54:87:D5:56:0D:76:7B:6E:F6:9B:C7:64
            X509v3 Authority Key Identifier:
                keyid:8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a313039313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:1091::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:92:bd:b7:ae:6c:71:9f:25:36:97:f0:25:dc:0e:ce:8e:
         85:84:6e:55:7f:59:2d:33:eb:dc:e0:d0:56:c1:2d:f2:da:d0:
         e2:a8:01:af:bf:c5:0d:d2:62:f6:f1:02:3f:f0:62:99:e2:9c:
         a3:4d:6b:d6:b7:c7:fa:6a:f1:3a:e9:89:f2:90:5a:1a:7c:ed:
         92:23:e7:6f:63:18:99:1b:65:5f:95:b9:50:c2:0e:04:65:82:
         d6:c3:aa:0e:f5:49:23:4f:3c:fa:d4:19:d6:3e:6f:f3:1e:a3:
         8f:72:93:d0:cd:b7:05:73:9c:fe:2f:20:b4:78:f8:92:cf:44:
         fa:25:0c:e1:00:6b:dc:51:64:cf:34:c9:ff:8d:97:e1:a5:e1:
         30:38:e8:e9:b0:5f:77:5a:d7:29:f3:15:28:34:47:75:d6:02:
         86:7d:32:16:31:27:94:27:cd:a1:09:ad:28:56:03:d3:c4:34:
         3e:ac:c3:76:97:f1:43:60:02:5c:df:5c:71:f6:d3:60:62:01:
         64:37:e0:b4:c1:7b:c2:66:04:1d:70:08:39:ae:f4:22:4c:82:
         57:e1:b8:6c:46:9e:44:79:96:3c:08:09:e2:e4:48:0c:81:fc:
         06:e0:80:fc:f0:0e:b3:22:94:6c:97:c8:2a:4e:38:f3:ff:f0:
         9a:aa:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:04:28 2025 by rpki-client