Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/323830343a313361383a3a2f33322d313238203d3e20323633353434.roa
File:                     323830343a313361383a3a2f33322d313238203d3e20323633353434.roa (raw, json)
Hash identifier:          Vh6IZTV5mVQ2qGqgZ43w1KYLnQ6qZM5fy6yz2yIEKik=
Subject key identifier:   E3:26:0B:02:E8:EA:57:5A:F7:4E:2C:A8:8D:01:20:DD:70:20:5D:6F
Certificate issuer:       /CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
Certificate serial:       5F7DA14A7BF48514841EA65EE90C4A76307C9FCC
Authority key identifier: E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/323830343a313361383a3a2f33322d313238203d3e20323633353434.roa
Signing time:             Wed 28 May 2025 16:56:06 +0000
ROA not before:           Wed 28 May 2025 16:51:06 +0000
ROA not after:            Wed 27 May 2026 16:56:06 +0000
asID:                     263544
IP address blocks:        2804:13a8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl
                          rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 01:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:7d:a1:4a:7b:f4:85:14:84:1e:a6:5e:e9:0c:4a:76:30:7c:9f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
        Validity
            Not Before: May 28 16:51:06 2025 GMT
            Not After : May 27 16:56:06 2026 GMT
        Subject: CN=E3260B02E8EA575AF74E2CA88D0120DD70205D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:27:57:d3:ef:02:78:c9:f1:d7:1e:38:d4:
                    3d:bb:40:00:1b:fa:a9:60:e6:c5:ed:82:f0:b7:1c:
                    07:6a:42:63:d6:e5:da:e8:e7:7b:03:30:f2:56:15:
                    c1:c7:bf:d0:3f:e6:3f:99:84:08:23:9e:6e:27:a9:
                    87:85:f3:17:43:6e:3b:4d:86:44:5a:af:81:56:85:
                    25:cf:94:37:41:e6:c9:ab:ca:48:f9:5c:d3:16:f0:
                    26:91:f1:45:6a:c7:c5:e3:6e:3c:22:f8:1d:c1:20:
                    28:3f:da:95:ed:c3:bc:51:bd:df:5a:80:ce:96:7e:
                    c1:23:b0:c1:5f:90:04:c8:8f:7f:15:fe:0b:3d:cb:
                    b7:64:14:ab:a8:63:cf:04:31:6e:d5:ee:8b:73:ba:
                    ac:07:4f:3a:24:f5:6a:58:4a:46:5c:bd:39:57:0f:
                    f6:ec:11:71:09:31:69:93:76:f7:bc:63:bd:e5:b0:
                    9f:45:70:b2:20:f8:37:7e:fb:33:7a:bf:15:95:05:
                    31:39:3d:54:90:93:19:62:2e:46:dc:4d:5e:2c:c0:
                    6c:1b:9f:62:9b:17:db:8e:ba:54:b6:09:38:bc:9a:
                    68:5e:c8:1b:1e:8b:77:1b:06:cb:c4:d8:fc:5b:55:
                    b9:bc:0b:e2:1d:f6:50:a3:79:38:98:65:a1:da:c2:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:26:0B:02:E8:EA:57:5A:F7:4E:2C:A8:8D:01:20:DD:70:20:5D:6F
            X509v3 Authority Key Identifier:
                keyid:E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/323830343a313361383a3a2f33322d313238203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:de:47:ce:79:4e:13:a2:c0:0f:95:08:8b:68:ed:e0:77:7a:
         fb:e2:83:1a:e7:2f:37:8c:b2:32:f6:81:3b:fd:3e:5b:62:66:
         df:e7:ba:f3:94:bf:28:0e:bb:81:93:d0:8c:66:d2:59:be:fe:
         f8:03:3e:d8:b0:89:a2:29:37:0e:77:86:9a:9d:64:ab:25:5c:
         20:09:c7:6a:48:fc:c7:e2:0b:88:e8:30:68:ef:a5:06:8a:56:
         e4:c4:e5:f8:a9:ba:c7:bc:35:9a:b5:45:9d:f6:db:c1:ca:e9:
         08:93:c5:4d:d7:7d:29:3a:a1:c8:87:e5:b8:07:ac:f9:f1:b8:
         36:85:80:63:97:bb:1e:b4:db:ba:0a:0e:b1:25:3a:b7:b2:b1:
         ce:e6:31:48:d0:d6:f7:88:1c:6f:32:f6:0f:dd:c2:23:ee:6a:
         1b:88:92:1a:97:61:b7:53:28:b4:fe:30:58:5e:fe:f2:47:2a:
         14:09:1a:a7:08:8c:3d:42:76:18:70:dc:d9:1d:55:64:51:a9:
         1c:22:10:5f:6a:24:6b:6a:09:0c:21:b6:a4:04:b0:10:52:3d:
         21:2b:aa:08:b0:f7:3b:21:dd:39:14:52:d3:49:17:c0:7f:2e:
         a3:51:98:4c:21:39:bd:fa:d8:f2:c9:8d:85:6a:e7:65:af:40:
         9f:f9:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:46:42 2025 by rpki-client