Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          jMbcc/qFdyFdQjZtrxWXNFRBkYwAM3Vjro0dENN43Iw=
Subject key identifier:   2E:6C:9F:A6:AF:5E:40:46:49:9E:B3:BB:E0:7B:5C:87:89:B8:0E:87
Certificate issuer:       /CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Certificate serial:       477A677A1BC0494687BFE362E542B2B63BE92FCE
Authority key identifier: 8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Sun 27 Apr 2025 10:17:39 +0000
ROA not before:           Sun 27 Apr 2025 10:12:39 +0000
ROA not after:            Sun 26 Apr 2026 10:17:39 +0000
asID:                     269566
IP address blocks:        2804:6688:73::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 12:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7a:67:7a:1b:c0:49:46:87:bf:e3:62:e5:42:b2:b6:3b:e9:2f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
        Validity
            Not Before: Apr 27 10:12:39 2025 GMT
            Not After : Apr 26 10:17:39 2026 GMT
        Subject: CN=2E6C9FA6AF5E4046499EB3BBE07B5C8789B80E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:9a:6a:79:26:6c:17:b0:c3:6d:88:2a:b1:
                    70:8e:90:a4:01:ee:c5:72:f9:a8:24:6e:08:01:79:
                    a1:33:f4:52:cd:0e:9f:96:91:1b:fe:ea:ba:c2:05:
                    35:12:3a:4d:19:a0:71:ca:87:78:d7:84:3b:a1:1e:
                    27:ff:4e:ce:d9:b4:58:23:15:51:b4:59:99:70:44:
                    20:36:3d:64:62:71:9a:14:9a:e6:c3:53:40:f6:94:
                    61:90:44:7b:2a:16:be:c8:6a:4f:6f:81:75:c5:65:
                    d9:d8:5f:4f:83:06:62:1c:c3:74:6c:58:36:d1:16:
                    3e:fd:96:99:9e:89:a3:ee:27:dc:82:c6:04:a3:d2:
                    6e:9c:aa:54:c4:24:89:c3:eb:69:52:01:9d:eb:3e:
                    1e:6f:04:96:41:21:b3:1b:b5:10:9c:1f:a7:92:61:
                    da:96:bc:46:5c:4f:0a:90:39:66:43:51:7b:62:12:
                    ce:71:4d:7f:df:8d:c6:db:78:7e:97:ac:9d:77:6f:
                    05:f0:bf:82:87:3f:62:7f:f2:94:b7:3b:7d:92:07:
                    02:41:0f:87:63:45:58:46:40:dc:12:f5:74:74:aa:
                    96:91:7f:25:ea:37:1c:96:5f:83:6a:a3:74:60:10:
                    9f:3b:6e:99:03:76:1f:4a:ac:cf:59:51:27:64:da:
                    a4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6C:9F:A6:AF:5E:40:46:49:9E:B3:BB:E0:7B:5C:87:89:B8:0E:87
            X509v3 Authority Key Identifier:
                keyid:8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:73::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:44:38:17:c7:f0:e3:80:69:6c:e3:d0:5a:19:5d:41:30:95:
         d1:26:81:55:8d:a9:57:80:6b:74:5f:11:67:96:4c:42:52:ae:
         4a:99:27:3f:f7:57:47:d2:1e:a7:8e:eb:0c:4d:17:6f:bd:a6:
         01:36:94:be:ac:31:26:a9:a2:95:af:77:65:4e:3c:b3:6c:8e:
         8e:bb:e8:16:21:a3:3a:9c:1c:f1:d0:5a:a8:69:55:71:4b:6c:
         b3:7f:3f:99:11:06:b5:2d:c4:b6:3b:ca:5d:2b:a1:5a:7b:3f:
         f9:4d:c4:1d:af:c4:1d:43:c8:ba:bc:76:e7:51:a6:f8:3f:8e:
         fe:0b:0c:5b:9e:d0:d2:3b:37:49:06:0b:e1:95:f4:79:a4:1c:
         62:28:58:52:67:f8:4d:2d:f7:a1:9f:44:6b:b5:52:ef:3a:74:
         59:bd:b7:57:73:6b:ee:2a:de:3f:d3:7d:ba:70:d9:f6:12:02:
         64:1c:d1:aa:08:d2:ec:20:a6:5f:5e:5c:99:ae:2e:0a:03:e7:
         29:c1:57:4d:2f:d8:25:4c:2c:95:19:9a:88:f8:a9:5f:05:64:
         e1:b7:85:41:97:89:f0:33:9e:a7:69:54:95:a4:14:e1:2f:03:
         d9:4a:42:41:f9:88:78:60:a8:72:e6:a9:a2:99:3a:4f:45:03:
         fb:04:a9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 00:56:51 2025 by rpki-client