Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/323830343a353361383a3a2f33322d3334203d3e20323638353938.roa
File:                     323830343a353361383a3a2f33322d3334203d3e20323638353938.roa (raw, json)
Hash identifier:          iWR3QqKSLX4f3e7AdASevxGvWwC14Mv07eAAYGcMOXY=
Subject key identifier:   5D:1C:46:B7:E3:1E:A3:14:F4:17:DB:42:2B:07:D6:1D:70:DB:64:81
Certificate issuer:       /CN=350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B
Certificate serial:       712DFBF4B98F7075EA78EED24DC40917BF916965
Authority key identifier: 35:0F:77:D6:53:EB:2A:5A:6A:3F:2B:E0:6A:5D:7A:9F:F3:81:0A:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/323830343a353361383a3a2f33322d3334203d3e20323638353938.roa
Signing time:             Mon 19 May 2025 19:43:48 +0000
ROA not before:           Mon 19 May 2025 19:38:48 +0000
ROA not after:            Mon 18 May 2026 19:43:48 +0000
asID:                     268598
IP address blocks:        2804:53a8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.crl
                          rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 10:09:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2d:fb:f4:b9:8f:70:75:ea:78:ee:d2:4d:c4:09:17:bf:91:69:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B
        Validity
            Not Before: May 19 19:38:48 2025 GMT
            Not After : May 18 19:43:48 2026 GMT
        Subject: CN=5D1C46B7E31EA314F417DB422B07D61D70DB6481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:c1:2c:3b:b2:cb:ab:17:b0:06:c3:2b:42:
                    7b:44:0d:78:b9:c0:ff:d0:5f:3b:a6:d1:4b:3c:53:
                    f0:1e:f9:07:0b:65:2d:94:b1:43:4e:6b:9c:a3:ea:
                    19:a8:f2:5e:12:78:57:3c:f2:33:79:8b:94:03:a7:
                    38:44:ba:41:0b:8a:b9:90:c6:d2:37:5a:b6:56:f7:
                    a2:a9:38:f2:64:70:f1:bc:ed:f8:7f:a1:f2:59:3b:
                    64:2d:f3:1b:4c:64:96:15:6c:1e:90:61:62:92:6c:
                    e4:33:81:46:b0:a7:4d:ac:92:6f:ea:a1:5b:8d:c5:
                    57:f3:66:3e:f6:55:e2:b6:e2:de:4f:89:f4:b4:41:
                    b9:a1:46:61:78:fb:e5:c7:89:9d:e8:1e:d6:7f:03:
                    22:d7:83:8d:b7:86:c3:1e:9f:ef:d2:8b:8a:d4:b7:
                    06:36:86:f6:0d:72:3d:b1:ec:11:0f:b6:c5:8c:77:
                    47:95:24:99:16:c4:7e:4a:20:3e:ef:21:d7:de:7b:
                    e3:7f:6b:ec:f8:04:94:46:93:ab:4c:c8:4d:13:9e:
                    ae:05:9a:aa:53:c1:41:44:e3:b7:c1:76:c4:84:1e:
                    54:76:4a:97:5d:be:9c:26:48:87:3e:71:75:d5:9b:
                    b4:5a:f7:2c:76:00:03:f5:a8:49:59:00:25:52:e5:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1C:46:B7:E3:1E:A3:14:F4:17:DB:42:2B:07:D6:1D:70:DB:64:81
            X509v3 Authority Key Identifier:
                keyid:35:0F:77:D6:53:EB:2A:5A:6A:3F:2B:E0:6A:5D:7A:9F:F3:81:0A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/350F77D653EB2A5A6A3F2BE06A5D7A9FF3810A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4U6GM5QXtkikAZB38RcyfNH4Ho2Cesx4jbmfDdLzj258/1/323830343a353361383a3a2f33322d3334203d3e20323638353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:5e:24:a9:cb:ce:27:27:a7:04:cd:38:44:01:b2:b3:a7:c1:
         48:bc:b1:09:63:e1:3d:77:04:cd:8b:45:ba:1a:c5:dc:09:4a:
         28:1d:14:26:bf:23:a8:74:18:a9:53:2d:8b:ba:46:77:86:6f:
         ec:52:4a:19:95:3e:9b:d9:6a:a6:92:a8:60:70:76:fe:17:f7:
         ab:d4:a5:a1:55:f2:21:c4:86:98:31:dd:cd:0e:3a:fd:8c:c4:
         c2:9a:4f:c2:3e:bc:ab:7a:b9:b0:ca:13:09:6c:9b:37:13:42:
         72:df:35:3e:97:bd:2f:2b:45:51:1d:5a:00:bc:a5:a9:61:9c:
         34:e6:16:70:7a:59:76:1d:d4:21:89:5f:c1:06:1b:14:13:54:
         40:62:11:48:22:f4:b7:c7:97:a8:a0:5b:7b:b8:27:e1:7a:f3:
         c7:dc:30:a5:68:77:c4:56:5a:9d:1c:6d:d9:ff:05:9e:43:39:
         9f:31:25:ea:63:2a:22:36:ea:6c:5b:f2:ff:07:b9:b4:04:00:
         2e:b5:88:95:73:89:a6:20:6c:45:0d:03:c1:b4:1c:35:b6:94:
         6f:f8:35:a8:c0:fe:85:51:d1:d6:ae:6d:2a:fc:1a:74:be:d4:
         42:b1:cb:fc:19:70:37:07:c7:1d:ce:29:73:a6:bd:f8:68:35:
         3a:c2:65:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:49:19 2025 by rpki-client