Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa
File:                     323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa (raw, json)
Hash identifier:          q8XYZIgTLYGbcGqSIkr4paN2AIzOqln3K0n2r2BH1AY=
Subject key identifier:   BA:57:FA:D9:D8:FD:49:EE:5E:2E:EE:4B:69:3D:9A:F1:FB:87:26:64
Certificate issuer:       /CN=F63047CFCA73277026C41BFD930CC304F5F342B7
Certificate serial:       2D1CF29E81401E6E04A1B24AA24E58DADF478AAC
Authority key identifier: F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa
Signing time:             Fri 25 Apr 2025 14:05:02 +0000
ROA not before:           Fri 25 Apr 2025 14:00:02 +0000
ROA not after:            Fri 24 Apr 2026 14:05:02 +0000
asID:                     264022
IP address blocks:        2804:2990:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl
                          rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 15:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1c:f2:9e:81:40:1e:6e:04:a1:b2:4a:a2:4e:58:da:df:47:8a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F63047CFCA73277026C41BFD930CC304F5F342B7
        Validity
            Not Before: Apr 25 14:00:02 2025 GMT
            Not After : Apr 24 14:05:02 2026 GMT
        Subject: CN=BA57FAD9D8FD49EE5E2EEE4B693D9AF1FB872664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:63:78:08:04:07:0f:ce:6c:51:67:b5:6d:
                    ea:17:ac:04:36:38:4b:22:7c:57:69:0f:60:cf:61:
                    89:5a:31:58:fe:96:72:60:78:22:f4:7d:b4:c7:a3:
                    68:cc:d5:49:2b:be:13:37:7b:47:b2:75:32:d2:2f:
                    2e:7b:9d:a0:9d:7d:88:bd:68:ed:2d:3f:e3:5d:d7:
                    49:8b:37:72:92:86:50:bc:8b:d3:50:57:e3:da:00:
                    48:93:34:fe:62:e2:45:40:ac:7e:90:77:c5:47:05:
                    81:9b:1b:9c:cb:ee:ac:36:46:58:c2:79:c6:75:07:
                    0c:72:da:d1:49:70:0c:43:93:62:d5:ab:50:1b:ae:
                    8d:0f:33:4f:2a:78:85:47:8a:39:ea:5a:3c:91:86:
                    ac:f4:cc:50:38:e5:fa:c9:3a:79:51:b8:ee:0f:1c:
                    0c:bf:ae:f1:b3:a8:a1:c1:5e:b4:b3:1b:6e:5f:af:
                    72:b9:8e:96:a7:01:19:60:72:d3:e6:0f:e7:6e:70:
                    cd:9b:0a:a2:ac:d2:f5:df:67:56:6b:de:82:df:3a:
                    b0:05:c8:f1:b8:f4:54:35:8d:17:cb:32:f5:bb:af:
                    97:c4:d6:14:07:0a:ba:56:52:0e:7c:49:4f:a3:e0:
                    17:d3:f9:62:a2:e1:0e:9f:4a:f6:43:81:fc:f4:5f:
                    9e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:57:FA:D9:D8:FD:49:EE:5E:2E:EE:4B:69:3D:9A:F1:FB:87:26:64
            X509v3 Authority Key Identifier:
                keyid:F6:30:47:CF:CA:73:27:70:26:C4:1B:FD:93:0C:C3:04:F5:F3:42:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/F63047CFCA73277026C41BFD930CC304F5F342B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F63047CFCA73277026C41BFD930CC304F5F342B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a633030303a3a2f33342d3334203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0e:7e:4b:22:2b:42:eb:86:97:2f:80:7b:38:ca:ac:b0:e7:e3:
         f9:38:78:25:04:30:5b:a2:0c:71:68:e2:3e:02:8f:e3:8b:c5:
         f0:a2:4f:97:2d:ba:fb:2e:9a:ab:08:93:e3:95:f9:a9:3c:29:
         1d:08:20:6e:fe:2a:d4:1e:da:0f:67:b2:7a:ac:c1:7c:e3:7a:
         43:89:31:69:50:85:ab:f2:01:52:4f:cb:3e:73:07:f8:63:10:
         36:45:22:05:cc:64:ae:df:29:50:43:43:36:1c:b8:ed:fd:e3:
         db:e5:8e:93:38:ab:f8:02:39:94:41:c8:4e:26:06:7f:92:d2:
         dc:a2:80:fc:6b:95:22:b4:b9:cd:ec:a1:f5:f5:7b:1a:51:0b:
         ad:15:34:15:b2:d2:27:2f:b8:13:20:bb:53:89:84:59:a9:ee:
         9c:09:09:e9:84:20:da:bf:96:75:88:74:7f:ba:72:1c:17:f2:
         f7:c0:13:11:b7:48:33:9a:4f:f0:c1:a0:50:e4:e5:77:1e:66:
         8d:3b:5a:37:81:c7:45:72:c3:7f:16:39:22:2f:92:8b:e8:e2:
         e1:ed:58:71:f7:08:5a:8c:d4:12:c5:8f:bb:8f:86:b3:fc:60:
         d4:ed:28:33:e3:a1:4e:f5:c4:f2:38:44:9a:e7:aa:7a:53:05:
         5b:9f:68:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:44:42 2025 by rpki-client