Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa
File:                     323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa (raw, json)
Hash identifier:          VEE4/t5dmZFRStRb1fb0wA+etXd4a4juK2OsFd3nOyI=
Subject key identifier:   AA:71:27:4D:F9:F7:1B:A4:C2:B4:BF:29:1F:2A:8E:67:95:49:39:E5
Certificate issuer:       /CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
Certificate serial:       09853C603CC69556AA46B86C76C36EDAE898FDDB
Authority key identifier: 1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa
Signing time:             Tue 17 Jun 2025 20:18:37 +0000
ROA not before:           Tue 17 Jun 2025 20:13:37 +0000
ROA not after:            Tue 16 Jun 2026 20:18:37 +0000
asID:                     271624
IP address blocks:        2804:7e70:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 10:39:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:85:3c:60:3c:c6:95:56:aa:46:b8:6c:76:c3:6e:da:e8:98:fd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B53B172975323FAF6658D8A0A1F69E7CF3CA14D
        Validity
            Not Before: Jun 17 20:13:37 2025 GMT
            Not After : Jun 16 20:18:37 2026 GMT
        Subject: CN=AA71274DF9F71BA4C2B4BF291F2A8E67954939E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:23:22:64:5b:36:01:33:eb:b5:be:a2:1c:
                    48:ee:5c:16:24:01:74:53:37:7f:11:5b:58:a3:7f:
                    62:ed:3d:5a:6b:4e:57:21:89:bb:a4:73:54:53:d3:
                    41:a4:37:1e:1c:47:34:a9:2b:c0:0f:f7:41:33:6c:
                    c9:9d:e8:42:da:eb:38:40:d1:04:81:d4:a1:64:68:
                    29:3a:10:ee:57:f9:a0:15:49:c3:bb:a8:0a:08:34:
                    0d:cf:9a:1a:ea:4a:30:60:10:1d:a0:bf:bb:6f:c1:
                    27:2a:f7:84:2b:54:d9:e7:cd:46:73:69:4e:3c:7d:
                    ea:7a:5a:26:cd:85:ed:10:87:58:53:0a:da:1e:2a:
                    6d:53:81:ce:6a:ce:c4:80:f4:e8:7c:e9:92:7e:dd:
                    30:b4:65:ed:ce:72:2b:c7:e4:eb:91:56:96:2b:be:
                    2c:f9:e2:e7:05:14:29:e6:37:26:f4:b8:6f:55:8b:
                    6d:be:19:80:60:23:99:f1:6c:6d:6a:55:6e:4a:6a:
                    5c:2b:d9:92:c8:d7:9d:ed:b5:be:87:2f:4c:3f:e6:
                    d8:d7:a8:74:8e:c6:0c:17:2a:8d:40:1c:a0:f7:47:
                    34:c2:40:d6:6a:d4:c6:20:83:52:9e:b1:27:3f:4f:
                    c4:93:f2:19:bf:61:45:29:ff:b7:32:8d:2a:c9:11:
                    23:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:71:27:4D:F9:F7:1B:A4:C2:B4:BF:29:1F:2A:8E:67:95:49:39:E5
            X509v3 Authority Key Identifier:
                keyid:1B:53:B1:72:97:53:23:FA:F6:65:8D:8A:0A:1F:69:E7:CF:3C:A1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B53B172975323FAF6658D8A0A1F69E7CF3CA14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a633030303a3a2f33342d3334203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e70:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5b:45:4f:c8:fa:38:ff:dc:ab:f2:70:6e:bc:c9:ef:16:b1:4a:
         1e:d8:bd:30:47:8b:2d:8a:2e:29:af:00:08:20:14:e4:7c:24:
         87:38:65:7d:8e:20:bb:14:f3:b7:e7:1a:74:72:06:b3:57:61:
         0f:ba:f0:48:ed:1e:d5:20:bd:5d:1b:f9:a5:5c:9d:b4:3c:af:
         d0:44:49:83:9c:f7:c4:63:56:5e:cc:ae:6e:0c:49:f9:12:1d:
         af:2a:d3:cd:6c:98:54:6f:e0:e9:5c:88:d7:aa:20:f3:77:eb:
         5b:c9:4c:d6:65:6e:37:dc:ad:73:cc:f7:f4:08:e5:86:6d:ba:
         e3:82:37:09:6b:9a:d4:4d:a5:79:73:5c:96:b6:16:d1:80:34:
         53:4c:7a:ec:4b:b7:c6:6d:91:29:ba:2a:2e:d1:b1:f4:24:9f:
         ea:cc:62:01:47:40:14:d3:bb:f4:57:30:38:ab:fb:e7:cb:76:
         95:e1:64:c4:6f:86:a2:90:37:59:a6:de:7d:58:dd:4f:0d:59:
         f6:22:19:e0:5f:6f:14:0c:72:9e:e5:b4:cd:6a:1b:5a:f7:20:
         32:0d:00:b8:d7:2c:39:38:f5:86:0c:93:99:36:23:a5:b5:63:
         69:ae:0d:4a:3d:2a:ce:68:00:41:bd:6e:33:4f:4c:e9:ad:77:
         9a:9d:76:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:02:13 2025 by rpki-client