Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa
File:                     323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa (raw, json)
Hash identifier:          Xg2woCna2SGrx5QS7Lwwsra4QYu18cUpbskz/pKI3yo=
Subject key identifier:   92:A5:BA:16:93:66:50:D9:4A:5F:27:8E:57:58:D3:22:A2:6A:DC:71
Certificate issuer:       /CN=315DDEA82F4151678E22C7DE6D37282137387EEA
Certificate serial:       19085A3014F96B2A07108F59D6A9976423EF2455
Authority key identifier: 31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa
Signing time:             Wed 28 May 2025 16:05:31 +0000
ROA not before:           Wed 28 May 2025 16:00:31 +0000
ROA not after:            Wed 27 May 2026 16:05:31 +0000
asID:                     271298
IP address blocks:        2804:7950:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl
                          rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 12:56:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:08:5a:30:14:f9:6b:2a:07:10:8f:59:d6:a9:97:64:23:ef:24:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315DDEA82F4151678E22C7DE6D37282137387EEA
        Validity
            Not Before: May 28 16:00:31 2025 GMT
            Not After : May 27 16:05:31 2026 GMT
        Subject: CN=92A5BA16936650D94A5F278E5758D322A26ADC71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:96:7b:71:d4:c2:c1:55:0e:cd:a7:03:d0:
                    01:17:20:a6:53:d6:4f:b8:41:b3:8f:d7:43:61:e3:
                    e9:3c:aa:64:07:a9:90:5b:c2:07:29:9e:d4:2b:76:
                    a7:e6:63:24:ff:19:06:5c:70:34:77:34:46:7f:47:
                    f1:0d:bb:df:9d:1b:72:f0:38:ff:8b:32:a9:24:cf:
                    7c:b1:4e:56:d0:f8:8b:be:a9:e9:ad:d9:cf:11:27:
                    c9:84:82:af:57:0c:06:86:b7:29:44:7d:46:52:c1:
                    2a:0f:81:5b:94:a6:f7:fd:fa:02:1c:bf:ae:3a:78:
                    f2:08:55:03:19:24:14:5d:9b:31:c1:be:e0:81:29:
                    f3:8f:eb:72:0c:24:83:1c:cf:d5:6a:fb:12:0b:b2:
                    30:37:29:f6:03:08:5e:45:58:0d:10:a5:02:a2:d6:
                    41:6f:18:74:ff:00:63:b9:24:1a:53:51:9d:ef:f9:
                    ef:99:79:97:23:43:73:38:a8:0d:75:e3:1e:78:7e:
                    6d:90:a1:1d:78:3b:6b:34:05:0e:35:1d:b2:8b:62:
                    20:64:45:27:6f:c8:18:7f:6e:17:6b:c3:aa:c5:51:
                    1a:d4:45:d9:38:81:ef:a5:70:d6:db:87:1f:4a:f3:
                    b5:56:fa:cc:56:2c:f5:38:8f:19:77:d7:9f:78:d5:
                    bc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A5:BA:16:93:66:50:D9:4A:5F:27:8E:57:58:D3:22:A2:6A:DC:71
            X509v3 Authority Key Identifier:
                keyid:31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a383030303a3a2f34302d3430203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         e1:60:08:26:4e:c6:1a:0c:bc:a8:33:18:de:89:b3:fa:af:20:
         7e:25:5f:d4:bf:d0:e0:b4:2c:a2:9e:57:76:6a:07:47:e0:fb:
         78:33:bf:07:b0:0b:75:ed:10:91:8e:65:67:a7:b0:d3:e5:a4:
         e0:3b:d8:1d:63:cd:1e:3f:13:27:ba:d2:fe:b3:15:39:ef:d4:
         33:f4:a6:ea:77:fc:44:d0:54:9e:8e:04:a7:39:00:e9:06:97:
         b1:27:56:08:b9:c5:d9:29:1a:e6:16:4a:33:10:de:dc:7b:e5:
         4e:9f:c9:af:7c:23:c4:c7:81:25:63:3f:aa:50:0e:c6:3f:fc:
         fd:46:80:d8:f2:d0:84:42:1d:ca:28:bd:18:98:8a:94:f0:a9:
         4d:bf:e1:72:af:33:0e:ab:f2:ba:8f:4a:64:fe:8e:0e:32:b6:
         79:cb:b0:2b:b2:24:33:7a:5f:a6:97:28:8a:f2:fb:b1:74:53:
         25:dc:d1:ed:b1:ed:2c:bd:ad:e3:70:15:b9:dc:93:4a:ef:d1:
         bf:85:35:5a:e5:3a:52:22:a1:13:d9:26:72:88:97:26:8c:15:
         ef:52:37:87:4c:8d:80:30:20:69:94:24:70:da:74:5b:b9:84:
         ca:6f:29:70:e1:7d:8a:4c:d3:9c:08:6f:e1:6a:97:25:84:92:
         e4:0e:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:20:08 2025 by rpki-client