Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa
File:                     323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa (raw, json)
Hash identifier:          XlTKbGvQ+ts1QNCgxJY1KsO24iRE+kbXR0edz4kfO/c=
Subject key identifier:   1E:90:FD:5C:C9:5F:66:71:A8:8C:A5:BC:1A:EB:1F:19:F4:E6:61:FA
Certificate issuer:       /CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78
Certificate serial:       59A2EA68072B6E90BADEBA35D9B30AE0BA7EF9CE
Authority key identifier: 54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa
Signing time:             Sat 25 May 2024 14:56:40 +0000
ROA not before:           Sat 25 May 2024 14:51:40 +0000
ROA not after:            Sat 24 May 2025 14:56:40 +0000
asID:                     272438
IP address blocks:        2804:8130:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl
                          rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 01:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a2:ea:68:07:2b:6e:90:ba:de:ba:35:d9:b3:0a:e0:ba:7e:f9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5445B268F95C5A86AE66A9F2C23E2E41A58C3D78
        Validity
            Not Before: May 25 14:51:40 2024 GMT
            Not After : May 24 14:56:40 2025 GMT
        Subject: CN=1E90FD5CC95F6671A88CA5BC1AEB1F19F4E661FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ff:67:28:df:27:e7:e3:70:86:ce:ac:79:a8:
                    51:a8:e4:43:57:8e:9d:cb:bc:9f:72:1c:63:9d:41:
                    4e:91:62:b8:86:fb:32:e2:99:9a:5c:84:5f:f9:7b:
                    08:48:f4:fe:2d:90:f3:6d:44:db:ef:15:31:37:46:
                    cf:a8:68:c9:92:ad:7e:9f:ef:64:3c:a1:c2:63:6a:
                    3c:34:54:04:44:66:24:7c:c5:cb:59:77:91:b0:63:
                    5f:f0:ca:27:ee:03:5e:7a:f6:c6:d3:b9:cd:c9:6f:
                    29:14:c7:99:13:ed:d7:eb:9d:12:ed:18:ed:01:d0:
                    42:b3:cf:50:a1:3f:23:70:e3:29:a4:6d:f4:53:12:
                    cc:83:74:75:f8:5e:82:bc:9d:9c:76:df:f2:23:9c:
                    99:e7:11:7c:fc:5c:50:77:9f:3d:6c:82:90:6b:d4:
                    2b:7a:e4:7d:0d:cd:01:bb:d6:7e:24:a6:52:8c:b4:
                    43:75:08:d6:cc:46:2c:02:7a:df:11:04:09:49:59:
                    51:32:9a:b6:78:52:c3:43:75:6e:fc:79:bb:71:a4:
                    26:0e:c0:2e:7e:f2:0d:12:52:27:fa:ea:52:e8:59:
                    f3:ec:78:c0:11:5d:3f:e3:31:b6:0d:7f:4e:55:8e:
                    e3:df:fe:4a:ef:5e:70:45:0a:da:69:91:5b:5f:16:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:90:FD:5C:C9:5F:66:71:A8:8C:A5:BC:1A:EB:1F:19:F4:E6:61:FA
            X509v3 Authority Key Identifier:
                keyid:54:45:B2:68:F9:5C:5A:86:AE:66:A9:F2:C2:3E:2E:41:A5:8C:3D:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5445B268F95C5A86AE66A9F2C23E2E41A58C3D78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a383030303a3a2f33332d3333203d3e20323732343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8130:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         54:56:95:78:7f:42:86:a6:51:c7:c2:e8:b7:ea:c7:e5:33:2a:
         5d:87:10:34:a7:4b:ca:4c:e6:74:fb:45:d2:dc:a4:a9:87:1c:
         95:73:11:00:f7:26:4f:39:a7:83:87:3a:5e:f9:f6:a5:c1:08:
         42:a5:38:dc:53:0d:22:1d:2f:a4:05:46:14:77:a8:26:82:f2:
         24:d4:02:43:5f:8f:40:62:ff:18:b9:7c:25:f0:f0:14:16:35:
         a6:f6:b6:b2:c4:c4:98:89:c3:ea:be:3e:e8:2e:8e:35:69:1e:
         44:a0:7d:2e:5d:ba:53:e0:8c:f9:12:dc:98:64:50:ee:f6:82:
         01:c8:f3:e1:60:c6:b6:80:e5:fe:7e:36:4a:d0:dc:d0:aa:55:
         84:ce:c9:99:b1:d9:88:bd:d9:1c:51:a5:50:3b:88:a8:4e:24:
         bf:cc:7e:6a:bb:5a:ae:fd:a5:2c:bf:c8:78:b7:8f:ad:ac:fb:
         7e:b3:a1:a7:da:0e:0f:c7:3b:7f:24:9a:f1:8f:ff:9a:d2:83:
         63:69:85:e2:71:ec:53:f7:39:83:f2:b0:ba:e6:c0:2c:dc:ae:
         ba:96:c4:e7:37:3c:08:c9:2e:b6:58:09:68:ad:f7:22:e0:81:
         77:5e:be:de:ff:dd:26:44:cd:42:47:eb:39:d3:26:ea:f1:08:
         da:9e:c7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:19:21 2025 by rpki-client