Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/323830343a356362303a3a2f33322d3438203d3e20323638393234.roa
File:                     323830343a356362303a3a2f33322d3438203d3e20323638393234.roa (raw, json)
Hash identifier:          Ph8DVmTUXL08rT4xG1yFriHQq4biVJt27lTf657gErQ=
Subject key identifier:   64:84:34:3F:71:83:E8:87:72:67:34:88:7E:E2:36:3A:4C:F6:05:90
Certificate issuer:       /CN=66824A767900C552472395AD8C51458F3693E9E7
Certificate serial:       316F9388A382A351A961614F4245119DB1B8593B
Authority key identifier: 66:82:4A:76:79:00:C5:52:47:23:95:AD:8C:51:45:8F:36:93:E9:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66824A767900C552472395AD8C51458F3693E9E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/323830343a356362303a3a2f33322d3438203d3e20323638393234.roa
Signing time:             Fri 28 Feb 2025 15:31:59 +0000
ROA not before:           Fri 28 Feb 2025 15:26:59 +0000
ROA not after:            Fri 27 Feb 2026 15:31:59 +0000
asID:                     268924
IP address blocks:        2804:5cb0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/66824A767900C552472395AD8C51458F3693E9E7.crl
                          rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/66824A767900C552472395AD8C51458F3693E9E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66824A767900C552472395AD8C51458F3693E9E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6f:93:88:a3:82:a3:51:a9:61:61:4f:42:45:11:9d:b1:b8:59:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66824A767900C552472395AD8C51458F3693E9E7
        Validity
            Not Before: Feb 28 15:26:59 2025 GMT
            Not After : Feb 27 15:31:59 2026 GMT
        Subject: CN=6484343F7183E887726734887EE2363A4CF60590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:0b:3a:1f:8b:5c:e6:bd:84:48:56:49:5b:
                    5b:f8:92:42:84:23:3b:02:8a:14:16:3f:42:d0:e3:
                    0e:9d:64:94:b4:4c:eb:a0:f0:b0:59:41:7d:fb:dd:
                    52:34:13:e0:b3:f5:ed:dd:76:81:91:30:2f:49:f8:
                    fe:f7:a2:14:c5:be:34:3a:f8:1c:88:2a:0d:d0:e8:
                    3a:f3:3a:3d:e2:11:6b:e6:ae:b5:11:aa:68:c4:4b:
                    71:fb:0f:47:4a:5b:ec:8a:c5:ee:99:03:0f:93:7c:
                    76:89:32:0a:06:1f:a9:60:6e:6d:60:95:0d:c4:14:
                    ad:0f:41:f1:8a:48:c7:9a:8e:67:26:be:2b:f8:b3:
                    49:7f:87:95:da:c1:87:81:e2:16:43:eb:c4:32:96:
                    91:91:19:c7:a6:04:cc:dd:76:32:79:52:28:f4:78:
                    ef:55:fb:a2:bd:3d:d8:c0:00:de:6c:8b:a0:2d:77:
                    1e:26:18:d7:5d:5a:81:81:3c:2b:8d:10:5a:cc:7b:
                    e1:26:14:2a:32:7a:92:fb:a2:72:6a:6c:97:9e:b0:
                    b7:75:2c:9f:07:84:41:88:23:e5:cd:c1:b7:0c:0f:
                    6e:65:66:91:45:74:25:6a:6e:18:51:87:30:d6:b9:
                    b6:df:2b:57:f1:18:00:36:a6:4c:f3:51:6a:65:27:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:84:34:3F:71:83:E8:87:72:67:34:88:7E:E2:36:3A:4C:F6:05:90
            X509v3 Authority Key Identifier:
                keyid:66:82:4A:76:79:00:C5:52:47:23:95:AD:8C:51:45:8F:36:93:E9:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/66824A767900C552472395AD8C51458F3693E9E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66824A767900C552472395AD8C51458F3693E9E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/323830343a356362303a3a2f33322d3438203d3e20323638393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:d5:25:94:7c:7f:f1:22:e1:1c:cd:20:84:6f:98:51:25:84:
         32:e0:cf:6b:38:98:0e:d5:78:d9:37:5d:4b:70:5b:a6:25:b5:
         93:c5:ae:d0:76:6e:39:f1:d6:c4:18:b5:7e:5f:88:bf:d9:9b:
         70:4e:19:de:de:11:6d:8c:0f:3e:1e:c2:23:89:ec:56:90:2d:
         d5:6d:b8:c3:4e:4f:e7:ce:70:c7:08:69:d0:8e:54:55:f1:a6:
         f7:e4:9a:1b:a9:77:3f:3b:6c:2b:c6:03:83:ce:fb:df:17:66:
         7e:b6:4e:60:da:25:93:94:72:35:89:f4:6e:2a:4a:52:0f:dd:
         50:a2:3c:c3:fd:9a:2a:92:35:41:81:da:45:ee:62:cb:05:23:
         46:0f:b4:20:0f:86:08:17:46:90:1f:df:2e:2a:77:7a:3e:3b:
         75:ef:b4:99:8d:b6:7a:52:fe:19:6a:f3:06:76:a8:f1:40:93:
         8d:fa:02:27:9f:02:b0:26:1f:d7:80:03:4a:4d:7e:c9:85:8a:
         26:6a:5c:1b:fa:7c:53:72:40:b8:46:09:f7:14:c9:38:ad:08:
         7c:63:47:fc:c7:8c:79:61:44:e8:61:41:9d:89:10:8c:7f:b3:
         40:56:27:7a:90:8e:f4:1d:16:d1:dc:28:b0:0d:ab:11:fb:f1:
         cc:43:85:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:51:21 2025 by rpki-client