Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3a2f33322d3536203d3e20323632343539.roa
File:                     323830343a3462303a3a2f33322d3536203d3e20323632343539.roa (raw, json)
Hash identifier:          JAXiiRxibRaepfBCNWRSz0Ox9U6Y5GlDmiHznPXQYl8=
Subject key identifier:   32:B5:3D:D6:8B:6F:78:28:01:ED:DD:37:82:36:49:E2:DF:93:D1:74
Certificate issuer:       /CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
Certificate serial:       7ED6E280CDA91AE2051C1346283AD7C0B40B54F6
Authority key identifier: B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3a2f33322d3536203d3e20323632343539.roa
Signing time:             Fri 16 May 2025 21:00:24 +0000
ROA not before:           Fri 16 May 2025 20:55:24 +0000
ROA not after:            Fri 15 May 2026 21:00:24 +0000
asID:                     262459
IP address blocks:        2804:4b0::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl
                          rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d6:e2:80:cd:a9:1a:e2:05:1c:13:46:28:3a:d7:c0:b4:0b:54:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B12F857CE71E72E7E892CF977D80B6A8B75C78A4
        Validity
            Not Before: May 16 20:55:24 2025 GMT
            Not After : May 15 21:00:24 2026 GMT
        Subject: CN=32B53DD68B6F782801EDDD37823649E2DF93D174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f1:60:0d:a8:01:39:3a:cc:87:87:19:2c:a1:
                    76:20:00:dc:ab:90:5d:10:2e:c7:fd:5b:31:73:02:
                    0f:fe:88:30:32:cb:06:ac:10:15:64:d1:ad:7a:e6:
                    3c:cd:8e:b8:08:48:88:a9:14:e4:69:5b:50:ba:5d:
                    aa:07:b6:17:d2:cb:60:60:c8:fd:ad:0b:08:42:76:
                    6d:b0:99:2e:45:50:bd:ba:d5:57:aa:57:75:1b:c8:
                    65:19:72:64:37:82:3b:6d:23:1f:96:8d:0c:46:68:
                    3a:14:a4:2b:9f:6a:03:0a:ee:53:14:11:4b:c3:02:
                    a1:a2:ac:1c:0a:12:45:7f:e8:c5:51:5f:ca:ff:8c:
                    e8:f0:06:0d:9c:a9:f4:07:3e:03:4f:ba:15:73:a2:
                    1b:20:e1:8d:5f:ba:8b:d0:4a:1d:1a:4d:83:f3:62:
                    0f:be:03:8a:4a:45:4b:40:c9:01:e5:9f:88:91:5d:
                    82:ec:ef:d4:ab:10:55:12:15:71:22:9f:a3:51:1e:
                    60:70:10:47:ca:ab:a6:ba:4b:2a:b1:3f:69:e3:d3:
                    44:d5:37:12:c6:83:4b:e0:60:18:52:a1:ff:7b:9a:
                    16:13:3f:86:c2:ba:96:7b:f2:3c:25:b4:dd:66:16:
                    29:19:d1:fe:e6:b7:85:df:af:3f:0b:26:29:b4:fc:
                    f6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B5:3D:D6:8B:6F:78:28:01:ED:DD:37:82:36:49:E2:DF:93:D1:74
            X509v3 Authority Key Identifier:
                keyid:B1:2F:85:7C:E7:1E:72:E7:E8:92:CF:97:7D:80:B6:A8:B7:5C:78:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B12F857CE71E72E7E892CF977D80B6A8B75C78A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/1/323830343a3462303a3a2f33322d3536203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:4c:4d:99:79:b4:0b:33:b6:66:ba:eb:a2:67:a8:31:18:a0:
         0d:98:0d:97:68:17:e4:ad:e5:1e:fa:2a:12:82:df:ec:5c:97:
         3d:36:4e:bf:c5:78:ad:5b:2a:c3:9a:9f:ce:34:82:3f:a6:00:
         b7:02:d2:53:2f:47:f9:39:14:07:c4:3e:b8:3f:22:35:4b:14:
         10:47:cd:ef:85:fd:26:7c:9e:8d:69:02:b2:2f:36:44:69:7f:
         08:5c:bb:d6:be:76:ca:22:e4:ad:b8:82:ed:a9:74:5c:9b:a8:
         57:eb:54:3b:8a:f0:cf:b2:d8:0e:8d:46:d3:be:c5:ca:b2:81:
         cf:76:24:53:a7:e7:f2:d5:69:59:bf:50:0a:e8:83:ea:bf:e9:
         0e:3e:ea:90:5a:28:bb:aa:28:a9:8d:33:01:d6:d3:3a:c6:e8:
         bb:b7:2e:97:46:dd:f4:93:cd:7a:a1:7b:4b:d9:60:cb:06:74:
         57:2c:5d:3a:0b:b9:bb:84:81:b6:bb:27:6d:60:e2:37:f3:ed:
         1b:81:69:7c:b0:e1:62:4c:b5:e8:6d:1c:4e:92:8f:92:18:8b:
         71:c7:9f:a8:f0:a8:33:9a:6e:18:a5:c8:fd:1e:91:31:4b:6d:
         fd:42:63:ac:53:22:e4:dc:8d:57:06:83:b1:d9:52:19:9d:95:
         5d:c3:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:52 2025 by rpki-client