Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/323830343a376465343a3a2f33322d3438203d3e20323731353839.roa
File:                     323830343a376465343a3a2f33322d3438203d3e20323731353839.roa (raw, json)
Hash identifier:          IGZC/ZqhSQbu5GFCYQCixQwJXOH+Gl9YndWhUHmy/Gc=
Subject key identifier:   50:10:BC:40:E8:5D:BB:EF:FC:AC:02:36:BF:65:25:EA:40:B8:CD:38
Certificate issuer:       /CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
Certificate serial:       18C93F4FC47267FDE3C3DA1888BA2B574B3FF72D
Authority key identifier: A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/323830343a376465343a3a2f33322d3438203d3e20323731353839.roa
Signing time:             Thu 06 Mar 2025 13:43:40 +0000
ROA not before:           Thu 06 Mar 2025 13:38:40 +0000
ROA not after:            Thu 05 Mar 2026 13:43:40 +0000
asID:                     271589
IP address blocks:        2804:7de4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl
                          rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 22:59:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c9:3f:4f:c4:72:67:fd:e3:c3:da:18:88:ba:2b:57:4b:3f:f7:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8
        Validity
            Not Before: Mar  6 13:38:40 2025 GMT
            Not After : Mar  5 13:43:40 2026 GMT
        Subject: CN=5010BC40E85DBBEFFCAC0236BF6525EA40B8CD38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:a5:38:8e:c8:b3:5e:03:77:3e:9f:fe:99:
                    10:66:1b:0d:af:11:d5:23:f4:5a:79:83:26:fb:79:
                    b1:50:90:28:10:a1:e4:52:b5:bc:45:c6:fb:ea:55:
                    d6:be:75:02:dc:f2:2a:4f:12:68:d5:0e:8b:14:fa:
                    63:b2:97:3c:a8:b5:28:de:4d:82:8e:e6:21:af:de:
                    2d:6a:ac:0f:53:81:5d:34:9a:12:85:8c:11:40:15:
                    e2:91:a9:9a:c7:f1:a2:7b:16:c2:25:e0:ba:74:53:
                    3f:9a:c1:c6:24:47:2e:41:36:2a:1d:4c:60:61:63:
                    3c:f9:25:99:e8:36:5e:9e:b7:a6:6a:ce:2b:08:05:
                    64:16:c8:83:a4:91:eb:d5:30:df:ef:7f:22:63:d2:
                    9d:58:08:a7:c5:01:05:09:e1:f7:07:61:37:4c:02:
                    c1:6c:78:b0:c0:f0:30:83:a5:b6:88:1b:cc:f3:88:
                    6a:11:f1:4b:0c:52:9e:ae:84:41:fd:5f:75:ac:8e:
                    0d:7f:10:ec:55:83:20:ff:05:0e:ac:a0:a2:70:ba:
                    2d:74:3c:8e:6e:a7:70:55:f3:ce:12:27:26:4f:d5:
                    2b:d6:42:60:1e:05:a1:42:47:ef:16:a5:13:26:5e:
                    80:46:5c:c7:5c:2c:8f:96:47:8c:c7:f4:ff:a6:e9:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:BC:40:E8:5D:BB:EF:FC:AC:02:36:BF:65:25:EA:40:B8:CD:38
            X509v3 Authority Key Identifier:
                keyid:A9:0D:19:9D:AA:4D:D1:D6:8A:43:0C:EE:0A:90:A6:E8:FB:AA:D7:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A90D199DAA4DD1D68A430CEE0A90A6E8FBAAD7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K22hoCYVx76uAe6gJFm1sigSDVE2QopgxE855HeYXLq/1/323830343a376465343a3a2f33322d3438203d3e20323731353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7de4::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:8a:fd:0b:a7:6c:74:c0:4c:91:d3:76:2d:f5:3e:41:ce:46:
         5e:21:6a:03:87:26:4c:0e:cd:8b:8d:c7:9b:56:82:3b:94:ce:
         fe:9f:11:97:66:57:86:de:d3:f5:59:22:9e:02:5f:c0:a8:b8:
         26:49:60:61:c0:ae:11:2e:d6:6f:a5:7f:a6:a1:bb:f9:a9:bc:
         db:84:65:0b:8b:33:b0:ba:a7:b3:a0:d0:ff:8e:4c:3b:95:5c:
         ef:b4:62:f0:60:d2:7d:f5:67:ca:05:d9:c0:0e:f6:40:57:03:
         1e:cd:6d:31:7c:ca:e0:00:f3:a3:48:b0:4a:82:71:a6:63:6a:
         cd:9d:12:78:71:01:23:57:4f:52:55:0e:62:2e:2f:24:44:34:
         28:6e:e8:8b:da:6d:92:4e:ff:42:fd:8b:83:5e:85:e1:17:7d:
         b3:53:3d:4c:f3:66:49:f0:f0:3c:a1:4c:f7:4b:53:fa:53:0c:
         82:fd:07:f5:08:04:78:64:f9:3f:d8:b3:3e:90:71:37:d9:c8:
         0f:81:7d:ae:78:07:66:ee:14:4a:71:96:d4:ad:c5:8a:3e:e1:
         92:aa:21:08:34:bc:1d:8f:5d:02:fb:dc:41:59:c8:b3:e4:b9:
         f2:6f:a6:83:5d:7f:cf:60:0b:b1:17:63:55:f2:7a:25:3f:ef:
         b9:30:28:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:31:05 2025 by rpki-client