Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/323830343a3562343a3a2f33322d3438203d3e20323632383739.roa
File:                     323830343a3562343a3a2f33322d3438203d3e20323632383739.roa (raw, json)
Hash identifier:          tLN3e2Iadao26nhIloDanQhZVH8XSVItUUt30mvG60M=
Subject key identifier:   FF:8F:55:A2:0F:0A:25:91:8F:90:64:43:DA:8E:72:39:91:80:5D:FB
Certificate issuer:       /CN=D5185EB6AF2331AEBE136E6B92FA533A35153197
Certificate serial:       0CF063F26D03C34D3432A95DDD6F584ECA42B8C8
Authority key identifier: D5:18:5E:B6:AF:23:31:AE:BE:13:6E:6B:92:FA:53:3A:35:15:31:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/323830343a3562343a3a2f33322d3438203d3e20323632383739.roa
Signing time:             Mon 26 May 2025 20:58:51 +0000
ROA not before:           Mon 26 May 2025 20:53:51 +0000
ROA not after:            Mon 25 May 2026 20:58:51 +0000
asID:                     262879
IP address blocks:        2804:5b4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.crl
                          rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 04:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f0:63:f2:6d:03:c3:4d:34:32:a9:5d:dd:6f:58:4e:ca:42:b8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5185EB6AF2331AEBE136E6B92FA533A35153197
        Validity
            Not Before: May 26 20:53:51 2025 GMT
            Not After : May 25 20:58:51 2026 GMT
        Subject: CN=FF8F55A20F0A25918F906443DA8E723991805DFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:52:c8:9c:71:61:a5:21:c8:5b:e8:4a:61:92:
                    bf:ad:f5:3d:98:e2:28:78:fc:3a:57:ce:e0:86:b5:
                    54:a8:3d:3f:e6:1d:85:5f:b2:f9:ad:85:49:71:df:
                    3e:4f:6c:e8:66:1f:44:ad:6a:3f:84:5e:bf:26:e7:
                    e4:0f:88:44:d1:53:35:1f:80:44:3b:21:ae:42:47:
                    98:06:13:40:f1:ff:56:d7:b8:47:92:89:39:f6:bc:
                    f6:28:31:d3:9f:86:84:69:a6:4f:72:b2:a0:cc:aa:
                    d6:da:7d:37:da:50:22:07:89:6f:03:d4:19:0d:53:
                    01:05:c4:25:de:85:4a:85:d6:37:ad:8c:6f:2e:3e:
                    d9:89:c4:bb:c8:29:cf:5a:97:95:69:2b:10:db:c6:
                    44:b2:13:bc:ad:ec:2d:5f:f3:d1:a2:cb:09:b6:f1:
                    1d:8d:dc:95:e5:df:c6:9c:95:9a:7d:91:20:82:1e:
                    c1:f8:5c:f3:85:64:38:3c:25:a0:99:d9:db:aa:57:
                    54:d4:03:89:90:66:58:a3:e2:9e:65:b7:0a:ed:42:
                    e8:d6:d5:99:86:9d:9a:6a:f2:65:9b:6a:d0:42:ce:
                    c9:31:0f:e3:a5:50:51:bb:93:d3:d9:59:ad:70:90:
                    28:e7:f7:18:d8:66:36:f7:4a:18:5a:9c:40:2f:db:
                    f5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:55:A2:0F:0A:25:91:8F:90:64:43:DA:8E:72:39:91:80:5D:FB
            X509v3 Authority Key Identifier:
                keyid:D5:18:5E:B6:AF:23:31:AE:BE:13:6E:6B:92:FA:53:3A:35:15:31:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/D5185EB6AF2331AEBE136E6B92FA533A35153197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5185EB6AF2331AEBE136E6B92FA533A35153197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Gz5UbjsKV4F1knmXiyQdq9hJnR7jBEhcyeYAHby5zn3/0/323830343a3562343a3a2f33322d3438203d3e20323632383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:00:10:86:a3:20:79:bb:07:10:00:50:83:73:e8:74:38:b7:
         c1:1c:cd:d8:c4:ef:8d:49:80:4e:df:ac:98:07:8f:00:55:0e:
         5f:d2:52:8d:f3:d4:7d:9b:7f:aa:46:ed:17:1b:a4:31:38:75:
         88:73:21:5c:19:e4:2e:0f:50:80:2c:6d:43:ff:4b:91:6a:c5:
         24:9e:12:c1:3e:84:d3:f5:3b:a5:13:ed:2a:0a:f8:74:34:86:
         85:99:40:c2:92:9b:32:b8:35:24:45:d5:4d:e9:7b:bc:64:fd:
         0d:07:54:4e:c6:79:6a:ea:27:02:91:d7:03:76:22:ee:b9:18:
         10:32:cb:62:cb:23:65:2e:04:2c:4a:70:7c:27:c0:01:dd:5a:
         cc:13:a8:df:5c:55:95:3b:37:01:f3:67:f1:48:ab:73:2f:e7:
         8c:0b:08:a9:1d:91:61:ab:db:ff:77:0a:79:3e:31:84:25:87:
         24:c0:2f:95:f6:b7:3f:07:8d:45:28:cb:6a:ec:f4:77:1b:96:
         e6:8f:ba:c9:fb:ec:90:4b:2d:84:d1:ee:67:54:9d:dd:0b:2f:
         9e:4e:ce:23:cb:e0:85:b0:ed:3e:e9:70:56:43:d7:54:87:b5:
         3d:96:82:f4:b9:91:9f:0c:77:a4:a6:92:c2:40:e3:0b:41:a8:
         b3:f7:a2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:32:06 2025 by rpki-client