Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33332d3333203d3e20323638313331.roa
File:                     323830343a353837383a3a2f33332d3333203d3e20323638313331.roa (raw, json)
Hash identifier:          vstmsY9Bxo51pO/q7iKPVEPpP1nhCTQDRYXv4ff95ZU=
Subject key identifier:   C8:9D:74:78:36:24:49:15:6D:98:D5:E8:D4:08:A9:F9:C1:1D:0A:96
Certificate issuer:       /CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
Certificate serial:       176B613A9ABC68790FC47CBE6B4565421FE7A5A9
Authority key identifier: A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33332d3333203d3e20323638313331.roa
Signing time:             Tue 03 Jun 2025 16:36:22 +0000
ROA not before:           Tue 03 Jun 2025 16:31:22 +0000
ROA not after:            Tue 02 Jun 2026 16:36:22 +0000
asID:                     268131
IP address blocks:        2804:5878::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl
                          rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 09:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:6b:61:3a:9a:bc:68:79:0f:c4:7c:be:6b:45:65:42:1f:e7:a5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11
        Validity
            Not Before: Jun  3 16:31:22 2025 GMT
            Not After : Jun  2 16:36:22 2026 GMT
        Subject: CN=C89D7478362449156D98D5E8D408A9F9C11D0A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:bb:8e:b9:15:91:53:6f:d8:d8:ba:2a:41:
                    97:bc:42:72:e9:7d:2b:f1:e1:42:7a:62:ee:77:e6:
                    5d:42:c2:14:e7:c0:1f:5d:95:8d:d2:68:fe:e0:2f:
                    42:a8:27:71:ba:d3:58:3d:49:ec:fb:9e:98:7a:00:
                    2e:c5:99:04:e1:31:c7:22:a0:f1:09:80:eb:5d:2f:
                    90:68:6f:fa:b8:79:ec:3b:75:d9:2e:3d:d6:eb:fd:
                    da:1f:b0:83:42:19:a1:41:2d:de:47:47:6d:a4:98:
                    8c:21:4d:21:be:4c:62:5d:5c:82:3e:5f:e7:da:88:
                    37:e6:52:b8:a6:4d:7d:1f:cd:02:2c:58:5a:c0:4a:
                    9f:70:e6:24:34:d2:c4:04:a9:bf:8a:51:08:b1:01:
                    2b:00:c5:11:57:4a:98:ab:24:9d:a2:9e:30:ee:aa:
                    77:9a:f2:e8:47:95:dc:ef:22:65:9a:d4:50:1e:62:
                    8e:af:6e:7a:2d:0f:87:6b:d2:aa:98:f1:c9:cc:27:
                    23:47:47:f1:e0:af:85:74:3b:bf:7b:66:b1:0f:f3:
                    39:6a:84:eb:3a:fd:0b:79:d7:65:2e:8f:0f:32:c6:
                    24:ca:30:99:1f:fd:9a:31:ef:c2:b8:36:67:a3:e6:
                    09:a4:d2:5c:49:73:71:45:2d:8b:e0:f1:04:c6:cc:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9D:74:78:36:24:49:15:6D:98:D5:E8:D4:08:A9:F9:C1:1D:0A:96
            X509v3 Authority Key Identifier:
                keyid:A0:CD:D2:CF:58:9D:FC:4A:B4:82:AC:02:EC:05:EB:B5:C3:BE:5B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0CDD2CF589DFC4AB482AC02EC05EBB5C3BE5B11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/323830343a353837383a3a2f33332d3333203d3e20323638313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5878::/33

    Signature Algorithm: sha256WithRSAEncryption
         1e:39:bd:47:70:82:22:ff:a9:e1:e4:be:af:ba:fa:2d:6e:85:
         b4:6a:68:72:f0:d0:b3:54:23:54:ad:36:a4:fa:1c:28:78:b9:
         1a:ea:63:7a:b6:9d:2c:f5:13:db:1e:71:e6:83:0c:d2:62:89:
         d0:38:74:00:c5:6a:ba:af:57:36:c5:d9:a3:84:9e:58:37:01:
         cf:82:16:28:69:a1:d9:e6:62:1a:3f:9e:d4:cf:2e:f2:37:b0:
         16:1e:39:60:7c:e1:75:94:50:80:5d:74:ed:1a:67:64:0c:2d:
         77:f2:21:cc:9e:d6:b5:e7:8e:b5:81:79:e0:a4:91:7c:42:f6:
         87:13:f4:8b:cd:1f:f4:ad:0a:72:b8:de:56:29:fe:32:cd:4a:
         47:48:21:8b:df:f0:73:f1:1f:4f:47:a5:a6:a8:fd:29:7d:88:
         85:46:85:17:a9:19:08:7e:8f:08:e4:6b:4e:ca:71:79:51:41:
         b5:ea:67:27:87:be:11:f3:7d:fd:72:f6:e9:96:f6:d2:31:52:
         fd:96:a6:90:e8:df:19:69:09:82:0d:dd:ce:54:ab:1b:d7:08:
         c6:b1:cf:fc:52:94:e0:9f:d1:c6:d4:8a:f4:4c:61:7f:81:d9:
         3a:bd:c8:cc:5d:5e:e3:10:07:da:cf:3a:17:0e:85:fa:e3:23:
         c0:fd:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:42:10 2025 by rpki-client