Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/323830343a326235343a3a2f33322d3438203d3e20323635313437.roa
File:                     323830343a326235343a3a2f33322d3438203d3e20323635313437.roa (raw, json)
Hash identifier:          Up7hYu8pL57ypuhIsDMop1XNnMMs3XsTaNlI7MtKO/c=
Subject key identifier:   11:AE:81:F2:2C:67:7A:BF:FF:39:C1:CA:F0:89:10:66:C6:2F:EE:42
Certificate issuer:       /CN=7776F4A23F28A21CFF17F04D68A489CEC9241597
Certificate serial:       53A7DF76604F399DBE961B467410C7468BF877A3
Authority key identifier: 77:76:F4:A2:3F:28:A2:1C:FF:17:F0:4D:68:A4:89:CE:C9:24:15:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7776F4A23F28A21CFF17F04D68A489CEC9241597.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/323830343a326235343a3a2f33322d3438203d3e20323635313437.roa
Signing time:             Thu 15 May 2025 20:44:35 +0000
ROA not before:           Thu 15 May 2025 20:39:35 +0000
ROA not after:            Thu 14 May 2026 20:44:35 +0000
asID:                     265147
IP address blocks:        2804:2b54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/7776F4A23F28A21CFF17F04D68A489CEC9241597.crl
                          rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/7776F4A23F28A21CFF17F04D68A489CEC9241597.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7776F4A23F28A21CFF17F04D68A489CEC9241597.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 05:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a7:df:76:60:4f:39:9d:be:96:1b:46:74:10:c7:46:8b:f8:77:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7776F4A23F28A21CFF17F04D68A489CEC9241597
        Validity
            Not Before: May 15 20:39:35 2025 GMT
            Not After : May 14 20:44:35 2026 GMT
        Subject: CN=11AE81F22C677ABFFF39C1CAF0891066C62FEE42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bd:ef:93:5d:20:58:e3:f3:4d:af:a4:da:c3:
                    9b:40:ca:e3:b7:94:21:a6:96:ec:69:c3:5f:16:73:
                    d6:54:12:e0:38:76:9d:2c:db:56:10:48:79:75:db:
                    11:ba:41:00:70:e1:92:4c:49:55:c9:9c:3d:0a:09:
                    74:fe:7c:50:05:f4:1f:54:f5:5c:bd:32:5e:ed:37:
                    46:1d:0a:30:cd:5c:0d:17:f4:db:bc:01:74:e4:d1:
                    8b:6d:20:72:6e:ac:e4:ac:27:e2:52:3a:7a:13:eb:
                    d2:65:fe:97:36:51:49:ab:48:6f:5f:f7:6f:a4:1d:
                    c7:43:73:11:36:60:5b:24:fd:de:31:62:d0:c9:92:
                    94:1a:7e:05:a2:ce:6d:e2:11:54:9c:61:f2:ea:81:
                    64:8c:9c:f2:dc:43:b2:31:ad:b4:13:17:3b:05:53:
                    5f:2d:aa:d1:fa:c2:17:38:8b:d3:c4:0a:98:30:5a:
                    e6:69:7e:8f:00:7a:70:b4:e7:d6:c1:80:3d:40:b9:
                    8f:4d:0f:b7:6a:57:30:3f:c5:e1:0a:af:b0:93:7b:
                    dd:a2:88:e2:16:96:dc:15:3d:83:d1:84:ad:ea:a4:
                    f8:4e:42:58:90:f1:fe:f2:3b:6b:47:b0:9e:5e:49:
                    24:e7:0a:8b:de:a9:80:cc:0e:b0:74:56:05:ec:c0:
                    53:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AE:81:F2:2C:67:7A:BF:FF:39:C1:CA:F0:89:10:66:C6:2F:EE:42
            X509v3 Authority Key Identifier:
                keyid:77:76:F4:A2:3F:28:A2:1C:FF:17:F0:4D:68:A4:89:CE:C9:24:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/7776F4A23F28A21CFF17F04D68A489CEC9241597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7776F4A23F28A21CFF17F04D68A489CEC9241597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7etSEGsoNQcqyij1BvYy9xugP5yMzyDTAy89En3UyuUD/0/323830343a326235343a3a2f33322d3438203d3e20323635313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:aa:1f:be:5a:9a:1a:ee:5a:a7:00:b6:54:d2:93:d1:b4:e5:
         c5:5f:1b:03:e3:10:e5:75:56:12:fc:32:20:fc:a7:58:8e:d0:
         e9:48:c7:48:e9:cc:e9:c0:0f:a8:50:6c:fd:c7:74:1c:76:ff:
         53:05:86:57:6e:ec:6b:9d:d7:b6:61:67:34:a1:b0:2c:68:b7:
         e1:82:ff:2d:35:a1:3e:a7:4e:2d:99:15:00:6d:99:ec:c0:e1:
         cf:c7:58:a5:35:70:fa:8b:61:70:38:8f:7e:82:70:60:bb:f2:
         9c:f9:e4:6f:4d:e4:5f:91:7d:40:90:a6:02:f7:d3:51:2b:4e:
         b4:74:90:98:c9:27:a6:03:35:c7:1f:97:08:d0:81:84:6b:14:
         b9:5b:b1:09:19:dd:df:14:f3:67:83:56:83:0d:b2:1b:2d:23:
         e3:47:8a:41:b2:62:6f:51:99:51:7b:8c:a8:22:c4:93:a3:e2:
         fd:85:c7:e2:f5:a7:b8:6c:17:2a:ae:37:a3:e9:ac:8d:aa:40:
         ea:3a:d2:c8:a4:82:a3:be:9f:93:e4:b4:bb:85:07:8e:0c:44:
         9e:53:40:71:46:de:8e:d6:59:93:1f:81:6d:15:14:ea:f8:57:
         b7:eb:29:43:21:e5:2d:97:cd:0c:01:d5:1f:f7:4d:d3:b3:c9:
         a6:51:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:18:45 2025 by rpki-client