Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a39313a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a39313a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          pGhVA6FLiJQiQpBs7FmiJ0APnLVnShxcFUg3mj8HLyo=
Subject key identifier:   C1:EE:66:08:EF:C4:11:1F:D5:C0:6A:0D:CD:1D:E1:3D:AD:24:21:A3
Certificate issuer:       /CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Certificate serial:       39D9967F06C6FDF40AE0C663745C46AB40EFF7A9
Authority key identifier: 8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a39313a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Sun 27 Apr 2025 10:17:01 +0000
ROA not before:           Sun 27 Apr 2025 10:12:01 +0000
ROA not after:            Sun 26 Apr 2026 10:17:01 +0000
asID:                     269566
IP address blocks:        2804:6688:91::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl
                          rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 12:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d9:96:7f:06:c6:fd:f4:0a:e0:c6:63:74:5c:46:ab:40:ef:f7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
        Validity
            Not Before: Apr 27 10:12:01 2025 GMT
            Not After : Apr 26 10:17:01 2026 GMT
        Subject: CN=C1EE6608EFC4111FD5C06A0DCD1DE13DAD2421A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a9:d0:c3:5f:3a:0e:fb:01:01:2f:94:f7:c9:
                    71:4f:4a:a7:90:98:59:4f:fc:6e:84:51:7c:9d:75:
                    ba:83:96:a8:fd:1b:ed:c2:d0:dc:d0:ec:66:df:4b:
                    af:d4:16:64:d1:31:9a:ca:b6:c0:0e:16:84:73:f0:
                    01:70:18:93:88:4f:f4:04:dd:a7:55:e4:42:ca:6e:
                    6b:76:77:ae:5f:1e:04:ba:4e:e8:dc:f1:c5:c2:a1:
                    cc:44:fb:ff:8b:7b:e5:24:5f:6f:7d:37:45:32:c6:
                    1e:7d:e5:c8:4c:12:ad:34:02:7f:1e:7e:c3:d5:57:
                    b9:a0:ea:90:81:20:79:09:cd:78:0a:e5:47:7c:1c:
                    ce:fe:48:43:44:fb:c9:da:13:92:5f:1b:60:06:0e:
                    cc:bc:d1:f1:a7:a9:0e:ce:9c:da:76:23:dd:fd:08:
                    63:a9:10:e7:96:9a:b0:31:9d:a3:06:99:8a:1b:02:
                    a5:91:46:04:96:07:7b:08:b6:ef:72:87:14:fd:33:
                    f3:81:77:dd:e5:d5:52:c0:b8:b4:9d:43:70:24:52:
                    dd:73:22:00:0d:68:d1:47:95:fd:55:9b:90:62:e6:
                    6c:f2:5d:8c:6a:e0:b9:ae:94:2f:03:0b:17:d9:7c:
                    76:04:84:0c:bf:1e:bd:5c:49:2e:bb:da:10:32:c7:
                    1e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EE:66:08:EF:C4:11:1F:D5:C0:6A:0D:CD:1D:E1:3D:AD:24:21:A3
            X509v3 Authority Key Identifier:
                keyid:8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a39313a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:91::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:27:dc:dc:cf:8b:bd:6a:8c:c8:4b:79:f2:33:f9:a9:e3:94:
         72:b2:ee:d3:aa:24:9e:b0:83:c1:ff:a2:e2:49:ef:73:5e:2e:
         29:05:78:69:5c:db:44:8f:0a:95:af:68:74:39:6b:fe:63:42:
         9b:7a:2b:e5:fe:70:13:0e:6e:c7:76:5c:87:ce:66:fc:16:b5:
         4d:dd:f8:7e:41:3a:c9:76:95:6d:32:04:a2:f6:02:7f:47:16:
         d0:33:82:88:a7:aa:40:b7:3e:13:49:77:50:bf:35:c9:6f:8f:
         f2:e4:98:6f:85:2b:74:69:ed:cd:b5:83:fe:a4:8f:a0:5c:af:
         2b:53:d6:db:5a:21:27:10:2b:f7:13:ff:2f:a3:22:d0:ab:58:
         a3:2f:89:97:5a:39:dd:45:66:b9:a5:e9:37:f5:f2:01:ad:0c:
         96:ab:0e:f1:00:64:ef:58:32:b4:69:ea:f7:2a:95:a4:68:7f:
         57:24:f1:99:80:2e:20:3b:eb:0f:a9:ec:94:19:65:cd:27:a6:
         d7:39:f3:91:6a:d1:a4:b2:63:eb:46:d8:83:6b:34:55:56:ea:
         e8:fb:a5:74:ba:08:73:d8:8c:c9:33:da:67:28:59:e0:a4:92:
         cb:a8:6c:99:d1:eb:d6:4a:19:80:3d:bf:fe:b0:fd:5d:80:0f:
         02:1c:10:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:04:29 2025 by rpki-client