Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/323830343a373931303a3a2f33322d3438203d3e20323731323832.roa
File:                     323830343a373931303a3a2f33322d3438203d3e20323731323832.roa (raw, json)
Hash identifier:          UmmdU9ADJQQGmzxJciAzdGXzSd/khI2bByBljC6hFss=
Subject key identifier:   B5:29:1E:0B:C9:DE:E3:87:8F:F0:18:AD:DB:68:D0:EB:53:96:AB:50
Certificate issuer:       /CN=7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1
Certificate serial:       1EB721F2BBB659C626DE655CAD3657D658978148
Authority key identifier: 76:06:BC:A6:1F:F8:15:F7:18:C8:3D:CE:1C:3F:8E:FA:EC:1D:F2:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/323830343a373931303a3a2f33322d3438203d3e20323731323832.roa
Signing time:             Tue 28 May 2024 18:40:47 +0000
ROA not before:           Tue 28 May 2024 18:35:47 +0000
ROA not after:            Tue 27 May 2025 18:40:47 +0000
asID:                     271282
IP address blocks:        2804:7910::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.crl
                          rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 03:13:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b7:21:f2:bb:b6:59:c6:26:de:65:5c:ad:36:57:d6:58:97:81:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1
        Validity
            Not Before: May 28 18:35:47 2024 GMT
            Not After : May 27 18:40:47 2025 GMT
        Subject: CN=B5291E0BC9DEE3878FF018ADDB68D0EB5396AB50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:e8:a5:e9:15:dc:ce:ad:86:96:3b:c0:b2:
                    53:ef:6c:5d:b4:32:2d:94:2b:58:24:04:e7:22:9c:
                    d4:a7:4f:b2:b2:c3:86:e1:15:c1:a3:56:f0:96:18:
                    90:a5:d8:4d:98:00:72:24:81:38:3c:1e:35:a5:9c:
                    ec:da:2f:96:bf:25:f7:30:bf:6b:9e:96:28:38:48:
                    2c:1f:47:cc:14:29:fc:63:96:d7:81:04:2f:c9:1c:
                    a8:5c:e0:33:bd:bd:8c:93:54:8e:0e:d1:d0:3e:27:
                    86:b2:4c:d5:e5:ee:b1:0c:62:b0:ff:94:72:b4:b5:
                    eb:a2:08:c4:50:79:c0:04:8d:b5:64:84:b6:79:39:
                    5f:71:b6:d1:c4:77:2e:a0:ac:45:b5:de:47:bb:62:
                    c4:2b:2c:ec:23:d8:0f:24:8e:48:21:07:9f:df:39:
                    a3:75:0b:47:40:2c:32:9c:b2:c1:81:56:bf:19:3f:
                    1e:79:9a:dc:d4:7c:e4:62:fe:ca:e6:65:51:53:58:
                    3a:3d:2c:5f:37:d8:18:1c:89:a3:79:a0:3f:79:9e:
                    03:12:94:9f:29:1c:6d:b7:d8:e1:dd:0b:77:f2:4c:
                    92:17:eb:1a:87:95:75:19:4c:71:14:2a:92:cc:d5:
                    d8:f3:12:10:ec:b0:03:18:4e:90:4c:84:83:2e:ac:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:29:1E:0B:C9:DE:E3:87:8F:F0:18:AD:DB:68:D0:EB:53:96:AB:50
            X509v3 Authority Key Identifier:
                keyid:76:06:BC:A6:1F:F8:15:F7:18:C8:3D:CE:1C:3F:8E:FA:EC:1D:F2:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7606BCA61FF815F718C83DCE1C3F8EFAEC1DF2F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQTdXc6DjzcoUErri8ooNiZSkDNJeY997Ce4viBWLQ7/0/323830343a373931303a3a2f33322d3438203d3e20323731323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7910::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:b8:16:fd:f0:a4:42:80:13:ca:08:4b:c9:e5:64:fd:be:a8:
         35:f1:db:98:81:85:47:ef:a2:9a:52:38:b0:47:3a:7c:04:f7:
         19:9c:fc:55:a1:84:ba:7c:60:0b:b9:39:05:0e:21:38:01:06:
         1e:2a:f8:b7:f8:5d:2b:2d:05:2d:99:3a:0a:53:85:1d:eb:f8:
         53:c8:48:47:30:d4:8d:5d:2c:8c:7d:2a:7d:05:c1:31:60:9c:
         8f:61:ef:73:bf:f4:6d:ff:b9:9d:32:3b:30:be:da:be:11:ce:
         59:fb:e7:8c:85:76:fb:75:a9:61:bd:c7:e5:35:a0:f4:6d:92:
         d8:ac:8b:a9:cb:0d:0a:67:0a:71:d0:51:e1:4c:5e:89:9f:b3:
         8e:77:b5:38:c8:e4:7f:dd:14:32:6c:77:9a:e4:f4:3c:15:97:
         e0:3e:6b:3e:75:43:11:94:58:f9:17:a4:a4:96:4f:c7:3a:ba:
         74:45:df:aa:93:77:1a:54:5b:b0:36:34:c0:72:bd:0e:e7:a9:
         bf:b3:ed:e6:37:83:29:d8:5b:5f:c0:88:b9:06:13:2f:ec:88:
         8d:aa:bf:9e:be:ee:08:d8:1b:55:46:0a:af:d9:76:cf:e9:30:
         e4:87:95:2e:1a:e9:81:94:a8:8e:ce:14:2e:2b:cb:93:e5:06:
         03:9c:b2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:57 2025 by rpki-client