Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3332203d3e20323638313331.roa
File:                     323830343a353837383a3a2f33322d3332203d3e20323638313331.roa (raw, json)
Hash identifier:          o712cBG4hVGA//PBX0FB/svdi3YsE7E/rUiUf67iUFs=
Subject key identifier:   75:F3:76:C5:AE:A1:EE:ED:23:8E:C4:45:E1:C6:B8:21:23:75:8F:76
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       45554CC3377BE975A596710A43A21D119FB2A982
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3332203d3e20323638313331.roa
Signing time:             Tue 03 Jun 2025 16:36:25 +0000
ROA not before:           Tue 03 Jun 2025 16:31:25 +0000
ROA not after:            Tue 02 Jun 2026 16:36:25 +0000
asID:                     268131
IP address blocks:        2804:5878::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 22:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:55:4c:c3:37:7b:e9:75:a5:96:71:0a:43:a2:1d:11:9f:b2:a9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: Jun  3 16:31:25 2025 GMT
            Not After : Jun  2 16:36:25 2026 GMT
        Subject: CN=75F376C5AEA1EEED238EC445E1C6B82123758F76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:99:48:24:4e:27:33:70:d5:81:56:8c:13:
                    6e:54:be:39:3e:87:1d:7a:e2:80:ae:63:4b:75:d8:
                    3d:8d:ab:2d:79:86:cd:80:d1:56:69:bf:38:d2:1f:
                    15:a7:7d:63:c4:03:4e:32:26:68:f3:ba:da:05:2b:
                    47:85:b6:a3:bf:23:a8:6d:67:5c:99:68:26:55:92:
                    dc:6f:52:2a:15:6f:0c:74:d2:20:cd:4c:1d:18:76:
                    bc:6a:3e:18:3c:09:e7:84:54:35:22:98:dc:f5:27:
                    7e:5f:3a:57:8b:bd:4d:4d:ff:5e:e5:d6:9f:76:0c:
                    a7:dc:1a:2a:93:15:aa:86:4f:8e:e9:38:d6:64:57:
                    37:58:7d:10:1f:a1:f5:9b:af:34:35:e9:26:27:ac:
                    b9:15:1d:70:44:2b:66:cb:5d:db:94:b1:fe:a2:93:
                    45:c2:66:59:69:c9:d6:ab:ed:c1:31:cc:d1:34:12:
                    39:3d:87:03:c2:fb:25:0b:6f:4b:25:c3:30:56:85:
                    39:e5:3a:b6:97:53:ac:80:e6:d9:54:a3:3c:0b:ce:
                    53:2f:2a:f1:f2:b6:c8:fa:49:dc:d9:34:4a:4a:7e:
                    1d:c8:67:dc:ce:bd:fc:e5:d2:29:f1:5f:86:84:47:
                    91:ab:ff:d7:60:0c:fe:36:d3:e2:19:af:25:b1:64:
                    b1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F3:76:C5:AE:A1:EE:ED:23:8E:C4:45:E1:C6:B8:21:23:75:8F:76
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33322d3332203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5878::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:29:3c:a6:54:c9:f2:01:20:59:41:d7:1a:6a:37:79:08:c0:
         21:5a:7c:51:d9:1c:d2:89:25:a5:2b:c9:38:fe:b2:52:ee:74:
         25:43:17:ca:d7:68:b1:e5:bb:dd:02:2d:2b:95:f6:6b:9d:5d:
         14:45:f5:21:2a:0e:2f:5c:0f:fb:d0:97:39:7d:45:1a:2a:30:
         f8:29:de:38:55:90:9a:61:b1:a5:86:57:59:d3:22:bb:4c:fd:
         a1:54:f9:e8:dc:e8:b6:be:bb:d6:c3:ee:8d:88:3d:b5:11:06:
         03:19:42:fd:bf:25:8d:b2:32:2d:cb:87:27:96:4a:b6:42:f6:
         b2:8f:1d:f4:9e:14:17:37:fd:24:84:6b:f2:9a:ad:13:0b:e6:
         69:7e:05:09:d3:e7:06:d7:3a:52:28:e7:47:e3:8a:3a:ff:f5:
         27:17:1d:6d:33:d0:fe:3b:88:85:ba:c6:54:17:f1:3d:4c:55:
         27:c6:70:b9:bc:7a:67:fc:01:1a:94:63:1a:d0:0d:6d:0e:43:
         97:08:32:66:f7:0d:d7:ec:92:92:11:e0:9a:4c:23:f4:31:e2:
         ac:1f:ca:58:2f:a3:eb:f5:86:b8:4a:a9:be:3b:49:05:0b:4c:
         cb:16:21:2e:25:51:3f:91:ae:4d:56:69:c3:50:ee:5f:09:68:
         c2:27:fc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:04:29 2025 by rpki-client