Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33322d3334203d3e20323731333833.roa
File:                     323830343a376161343a3a2f33322d3334203d3e20323731333833.roa (raw, json)
Hash identifier:          vxQxmFCt9E0nxYJOt/0X0YNotaJuOGuDeX1OIJZ7JpA=
Subject key identifier:   D2:21:89:67:FC:B8:DD:0B:5C:99:DB:C2:45:A1:F3:54:7A:2C:30:07
Certificate issuer:       /CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
Certificate serial:       1EAC7B3408E40DB786572FDF51E7185001237711
Authority key identifier: D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33322d3334203d3e20323731333833.roa
Signing time:             Fri 09 May 2025 18:37:48 +0000
ROA not before:           Fri 09 May 2025 18:32:48 +0000
ROA not after:            Fri 08 May 2026 18:37:48 +0000
asID:                     271383
IP address blocks:        2804:7aa4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Jun 2025 18:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ac:7b:34:08:e4:0d:b7:86:57:2f:df:51:e7:18:50:01:23:77:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D45D3138F5EB85594C2205AF938DBA4D8D129CC4
        Validity
            Not Before: May  9 18:32:48 2025 GMT
            Not After : May  8 18:37:48 2026 GMT
        Subject: CN=D2218967FCB8DD0B5C99DBC245A1F3547A2C3007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:bd:e5:ba:74:e4:82:41:ff:45:60:63:05:
                    03:b1:08:3f:20:fc:4c:ea:4e:9a:c0:cc:a4:f5:94:
                    79:88:7e:ac:ed:df:be:a2:53:1a:ea:44:84:9a:a1:
                    b1:92:09:bf:72:91:a5:a1:22:79:cc:07:70:95:4b:
                    00:a5:b9:96:60:da:0e:ca:52:f9:ee:b3:08:95:fb:
                    86:f5:73:ca:8d:c2:35:b1:a0:ad:b5:5c:35:fe:11:
                    5c:a5:85:4a:97:b2:57:84:97:e4:37:bf:4b:43:e3:
                    45:a4:8a:cf:fd:2d:f6:f0:63:b0:c6:42:0a:27:19:
                    87:ad:70:a3:d5:69:55:ac:23:1f:59:85:48:b4:de:
                    33:e4:df:cc:2d:48:46:11:8c:eb:02:95:19:61:d7:
                    4d:eb:5d:96:c6:50:ec:1a:e7:9e:8d:6f:af:2d:4e:
                    86:67:fc:1a:93:54:8f:4e:a7:5e:2a:9b:3e:36:03:
                    f5:b0:47:c5:13:2b:87:14:fc:d6:13:14:94:0d:69:
                    a2:e1:25:ab:28:b3:ba:01:76:82:bd:e5:18:fa:3b:
                    65:d8:2a:a6:fb:4b:37:87:73:07:c9:34:a1:fe:fe:
                    50:5e:cf:35:3d:2f:9a:ec:a4:51:a8:1a:44:ba:f1:
                    ba:68:b0:b0:80:b8:c3:bd:97:80:8e:25:51:c4:ab:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:21:89:67:FC:B8:DD:0B:5C:99:DB:C2:45:A1:F3:54:7A:2C:30:07
            X509v3 Authority Key Identifier:
                keyid:D4:5D:31:38:F5:EB:85:59:4C:22:05:AF:93:8D:BA:4D:8D:12:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D45D3138F5EB85594C2205AF938DBA4D8D129CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/323830343a376161343a3a2f33322d3334203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:46:ec:91:6c:10:96:5e:ea:58:85:84:e8:c4:63:1e:32:4f:
         48:d8:7d:03:33:18:2e:a3:52:54:11:a4:b4:bc:36:74:20:32:
         dc:24:8b:92:5c:73:f4:77:bc:e9:4a:f2:73:8a:02:19:55:c5:
         65:30:2d:60:f2:07:d6:b5:37:e7:de:92:fc:3e:14:a9:5a:68:
         40:67:bb:a1:6c:45:16:dd:11:07:46:3b:64:ec:ca:e0:86:87:
         5f:f1:cf:15:5b:fe:be:44:eb:c2:1f:05:3c:f0:1e:b8:11:7f:
         dd:15:b3:5b:91:36:1d:f4:3b:c5:a2:52:06:0e:7e:aa:19:32:
         12:06:7a:0b:8c:14:cf:48:9e:5b:7d:4f:c5:af:46:0e:0e:fa:
         57:7b:99:9b:f1:94:55:71:e3:14:a2:3e:b3:df:0e:44:8d:9e:
         8f:c8:2a:1b:56:78:66:53:0a:a3:ee:8b:af:f1:5c:b6:c9:4d:
         b8:a0:21:56:1d:6e:6c:78:b1:a4:f6:18:06:b2:8f:87:1f:04:
         65:ef:b1:47:f1:cc:9f:70:f8:b2:87:d5:65:b2:6a:c2:5a:62:
         eb:53:40:bd:f6:2d:6f:65:1d:47:35:39:4a:69:f2:3f:b1:82:
         e4:6c:a5:c7:41:b8:d4:3b:3b:f2:ee:23:eb:73:ad:f8:7c:dd:
         99:1e:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:41:49 2025 by rpki-client