Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa
File:                     323830343a373935303a3a2f33332d3438203d3e20323731323938.roa (raw, json)
Hash identifier:          sp/oQT5aCyB6MekqMfVBo1L5TwK3JYbEXbp1fGvRauA=
Subject key identifier:   66:B2:BD:B4:48:3D:48:8B:8D:89:B4:D8:D7:14:18:B5:0A:9E:50:A8
Certificate issuer:       /CN=315DDEA82F4151678E22C7DE6D37282137387EEA
Certificate serial:       28EE46B2360E0F6B3DE8A3FC8078A9B5DD53AF1A
Authority key identifier: 31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa
Signing time:             Wed 28 May 2025 16:05:31 +0000
ROA not before:           Wed 28 May 2025 16:00:31 +0000
ROA not after:            Wed 27 May 2026 16:05:31 +0000
asID:                     271298
IP address blocks:        2804:7950::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl
                          rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 22:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ee:46:b2:36:0e:0f:6b:3d:e8:a3:fc:80:78:a9:b5:dd:53:af:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315DDEA82F4151678E22C7DE6D37282137387EEA
        Validity
            Not Before: May 28 16:00:31 2025 GMT
            Not After : May 27 16:05:31 2026 GMT
        Subject: CN=66B2BDB4483D488B8D89B4D8D71418B50A9E50A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:e7:b8:a0:da:8d:7b:a2:43:b2:f1:95:49:
                    c1:ed:c0:9e:3a:f9:a5:de:21:c1:7b:47:53:a0:09:
                    85:71:3f:f4:c4:21:7d:e0:17:2a:18:63:c7:1f:ff:
                    47:54:77:16:b0:4e:5a:59:04:92:f3:08:62:6e:ed:
                    4a:25:4b:a3:e2:64:3d:21:af:fd:bf:7d:7e:d0:d0:
                    8b:18:09:e5:e6:42:56:4d:f3:0a:f6:61:e1:5c:cc:
                    cc:e2:97:be:31:e8:83:35:09:b8:99:09:61:24:23:
                    5a:a0:8f:97:be:07:97:9a:13:c7:14:20:53:4c:0b:
                    87:e7:6a:b1:32:bb:ee:92:85:fb:3e:16:5a:4c:dc:
                    97:8e:50:be:99:82:78:63:cf:fe:ed:81:9f:0c:3d:
                    9d:63:ca:b1:cf:c2:8b:a9:42:7d:31:13:2d:b4:8e:
                    d0:fd:d0:a2:bd:ec:8a:bb:c7:50:7e:a4:28:f8:37:
                    b3:a0:ef:4b:c2:6a:f5:62:ad:ac:54:6c:6a:03:82:
                    52:ea:11:2d:2e:b5:42:79:37:db:4b:08:dc:7b:d9:
                    80:d3:f5:31:9c:36:aa:97:26:5f:04:c6:03:81:3e:
                    fb:0f:59:f2:09:da:e5:61:bb:77:de:15:6d:01:4a:
                    c0:42:3f:91:2f:a8:19:d9:18:05:e8:2a:9c:ee:63:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B2:BD:B4:48:3D:48:8B:8D:89:B4:D8:D7:14:18:B5:0A:9E:50:A8
            X509v3 Authority Key Identifier:
                keyid:31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/323830343a373935303a3a2f33332d3438203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950::/33

    Signature Algorithm: sha256WithRSAEncryption
         68:9b:f1:db:a8:c1:35:11:be:6f:e9:2c:94:6c:84:91:49:25:
         26:53:52:1a:cd:9d:d3:1d:56:97:d8:9d:95:0d:19:d7:3e:89:
         cf:18:c2:3e:d2:b2:91:7c:75:48:38:d5:12:35:db:ad:d7:ff:
         52:d0:5c:8e:09:1c:3f:f4:f1:f8:be:bc:a2:28:7b:72:b3:61:
         01:4c:d2:ee:54:93:15:eb:69:2b:a2:c9:70:e0:ef:18:b0:58:
         d6:e9:d9:9e:76:7e:97:50:24:d4:74:24:a4:a4:b7:47:7b:53:
         a8:c8:e9:f2:68:92:69:65:f2:f9:ee:7a:82:fe:13:5e:61:6b:
         55:d9:75:3a:46:68:79:6e:27:2d:8a:be:a3:aa:2c:e9:83:93:
         9f:88:0e:fc:52:49:67:30:ea:35:4d:f8:e4:69:9d:fd:c5:1d:
         df:8d:c6:0d:9a:64:9c:2d:3e:2d:49:2d:62:a7:8e:ca:40:fc:
         1a:f5:b6:e1:ba:d4:bf:d5:51:cd:c0:2f:a2:5a:ce:b1:f1:ec:
         75:14:a1:47:70:f2:bf:0b:3f:30:5d:02:15:d3:c6:be:2f:4f:
         85:81:a6:4d:99:21:88:9c:8b:51:3b:45:9d:1b:b3:58:fe:44:
         ac:87:bf:e7:dc:6d:2f:33:33:94:97:0c:78:8d:87:9a:88:dd:
         8f:b6:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 02:01:53 2025 by rpki-client