Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa
File:                     323830343a376537303a3a2f33342d3334203d3e20323731363234.roa (raw, json)
Hash identifier:          ICnAkGG4yb5Iq5UU0HixMRSiCmle+BX8YoSbtVTGJSc=
Subject key identifier:   7D:83:BC:E2:7F:53:5B:2B:B3:49:ED:94:4F:2B:AE:C9:6B:EE:2A:D6
Certificate issuer:       /CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
Certificate serial:       5E20E6BE9C9F9FF165E8A7AC75D8A820165A3BFD
Authority key identifier: 1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa
Signing time:             Tue 17 Jun 2025 20:18:36 +0000
ROA not before:           Tue 17 Jun 2025 20:13:36 +0000
ROA not after:            Tue 16 Jun 2026 20:18:36 +0000
asID:                     271624
IP address blocks:        2804:7e70::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 17:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:20:e6:be:9c:9f:9f:f1:65:e8:a7:ac:75:d8:a8:20:16:5a:3b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
        Validity
            Not Before: Jun 17 20:13:36 2025 GMT
            Not After : Jun 16 20:18:36 2026 GMT
        Subject: CN=7D83BCE27F535B2BB349ED944F2BAEC96BEE2AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:fa:35:aa:75:cd:7b:73:01:1f:90:3a:38:
                    2d:8d:fd:ed:3f:ca:a5:ae:3b:0e:e1:db:a3:65:78:
                    95:d7:40:f7:9c:1d:73:1e:9b:af:c0:4f:26:84:81:
                    6a:f9:a1:46:78:ab:fb:07:84:66:5f:78:79:f3:34:
                    a1:ef:66:cf:0d:58:4b:d5:9f:36:77:aa:01:e9:46:
                    2a:d5:73:da:84:99:b5:ac:d6:01:7c:90:0a:d5:9c:
                    5f:36:7a:c2:6c:82:14:44:9b:f6:f3:cd:88:6f:23:
                    29:1f:ab:d0:f8:d3:4f:50:ce:74:89:4d:0c:24:c6:
                    5c:af:f1:59:32:bb:e1:37:b7:f4:d9:bd:aa:71:c4:
                    65:5f:9f:0b:c5:cb:aa:95:5c:af:c8:56:d4:c8:e3:
                    22:24:3f:90:df:45:69:4c:90:d8:40:b1:b3:ac:4a:
                    1b:a0:3a:b2:12:c2:fd:dc:10:ea:aa:6f:af:6e:3d:
                    f8:69:a0:3c:45:3c:d3:3c:26:85:e9:98:8c:c8:70:
                    f1:cd:f6:43:f8:bf:e1:37:bc:1e:c2:e6:06:b5:6f:
                    6a:03:4d:a8:2f:f9:cc:4d:29:14:cf:ea:10:ad:0d:
                    49:4d:08:96:2c:c3:f1:55:a5:8f:21:e5:94:fe:43:
                    17:76:a5:ec:14:c4:76:0d:54:29:02:2f:ed:56:06:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:83:BC:E2:7F:53:5B:2B:B3:49:ED:94:4F:2B:AE:C9:6B:EE:2A:D6
            X509v3 Authority Key Identifier:
                keyid:1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e70::/34

    Signature Algorithm: sha256WithRSAEncryption
         40:62:60:fd:9b:8a:30:28:69:1d:9b:be:f8:7b:4e:83:97:90:
         22:23:f2:1c:b6:e5:94:d5:54:6c:f8:52:ba:c1:5b:9d:05:b2:
         92:62:b5:41:c6:6b:fa:9b:53:33:f0:8a:5a:49:d8:06:02:de:
         db:53:91:a1:d2:6f:a9:ab:4b:ad:d1:7b:3d:4e:50:e4:9d:bf:
         02:8b:f4:42:4b:8a:e2:f4:50:b9:e2:3e:73:03:8b:62:e1:99:
         33:ee:dc:00:db:50:66:46:da:2a:e6:e4:03:38:25:41:13:fc:
         39:82:a0:07:02:58:80:50:aa:a5:a9:bb:96:28:bd:00:08:6d:
         26:fe:a6:ba:a2:70:32:ed:2a:4f:65:61:8c:bc:5e:18:27:f0:
         ac:93:bc:b2:ec:a6:74:a7:b5:61:8e:96:21:3a:40:ef:5a:35:
         43:e8:d2:d2:f2:d2:5a:60:10:6e:6c:4f:87:ef:fa:77:b4:3a:
         37:50:9b:80:d0:5d:37:14:c5:44:cb:ef:93:89:0f:e8:28:7d:
         1e:de:39:af:83:fb:35:0e:a3:71:d0:5f:85:36:2d:db:f5:20:
         96:fd:f9:c7:b4:a7:ce:9a:0f:bc:58:a9:6a:07:52:10:b5:0f:
         c8:61:4b:c1:26:97:d2:23:8b:96:f2:86:cc:98:ed:15:cb:db:
         ac:00:d4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:21:11 2025 by rpki-client