Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/323830343a343531303a3a2f33322d3332203d3e20323637363730.roa
File:                     323830343a343531303a3a2f33322d3332203d3e20323637363730.roa (raw, json)
Hash identifier:          h88mpkh7qxBNgN9HD7X4gl7QQ9E2VicVIuavbpmWbrg=
Subject key identifier:   65:35:FD:14:50:E8:AB:6B:DE:5D:77:E0:3E:92:FA:DE:43:1F:27:01
Certificate issuer:       /CN=8013DE498C2B907A3EF2E48332493039E7A2F953
Certificate serial:       482932EEF0D4469CE7B144A65F9338A2D71E7703
Authority key identifier: 80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/323830343a343531303a3a2f33322d3332203d3e20323637363730.roa
Signing time:             Sat 15 Mar 2025 23:30:11 +0000
ROA not before:           Sat 15 Mar 2025 23:25:11 +0000
ROA not after:            Sat 14 Mar 2026 23:30:11 +0000
asID:                     267670
IP address blocks:        2804:4510::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl
                          rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 09:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:29:32:ee:f0:d4:46:9c:e7:b1:44:a6:5f:93:38:a2:d7:1e:77:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8013DE498C2B907A3EF2E48332493039E7A2F953
        Validity
            Not Before: Mar 15 23:25:11 2025 GMT
            Not After : Mar 14 23:30:11 2026 GMT
        Subject: CN=6535FD1450E8AB6BDE5D77E03E92FADE431F2701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:89:4a:5e:51:66:08:03:11:d4:64:16:ea:
                    e7:30:da:6e:97:e2:77:3b:0c:c7:94:9a:98:79:87:
                    47:6c:7b:6c:74:fe:6f:77:e2:39:1b:ea:44:97:d5:
                    7f:19:65:dd:78:2e:49:f6:c8:79:d8:d3:70:0a:79:
                    39:57:89:c8:22:b3:dd:59:7d:00:a9:95:1a:c2:cc:
                    8f:d7:06:3f:8e:a0:1d:c3:73:d7:9f:7b:0e:3c:c7:
                    ba:10:6e:3c:d7:37:0b:91:b1:5a:36:94:0d:f1:a2:
                    cf:aa:83:44:00:ba:76:43:91:c5:7c:0c:4d:7a:c2:
                    0e:22:8c:db:08:08:40:e8:ba:90:10:92:1b:24:78:
                    e2:fc:30:81:55:11:1b:36:8a:4d:e2:08:9a:09:56:
                    ad:c0:77:20:ba:4b:b8:ed:98:7c:9f:fe:52:30:a3:
                    45:ae:19:7c:c1:fd:f3:d2:4d:e4:b8:b7:2a:a9:06:
                    f8:65:85:9a:57:c2:77:81:60:3c:5c:cb:0e:88:bc:
                    3d:95:c5:d0:46:23:ef:7b:71:14:25:17:59:fb:de:
                    ff:c2:15:ed:54:2b:6e:8c:37:cc:70:35:57:a8:78:
                    c5:f9:6d:38:05:95:c6:c8:05:bb:d0:52:65:48:2f:
                    5f:c4:f0:87:fa:44:74:b6:19:fc:33:55:31:1c:54:
                    d8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:35:FD:14:50:E8:AB:6B:DE:5D:77:E0:3E:92:FA:DE:43:1F:27:01
            X509v3 Authority Key Identifier:
                keyid:80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/323830343a343531303a3a2f33322d3332203d3e20323637363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4510::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:00:ce:69:da:16:58:30:ea:b1:d1:23:47:55:89:01:90:fb:
         d7:9a:d3:b7:61:84:bd:6c:85:72:f6:48:ef:c7:39:10:41:16:
         e0:7a:0d:88:24:77:09:29:14:b0:e2:ff:c0:b7:aa:7b:b5:d4:
         47:2c:c9:88:8b:63:95:93:ce:5e:ad:f3:cb:2e:af:36:aa:b9:
         e6:36:03:b6:1d:a1:7d:9f:09:ad:64:f2:da:bb:da:9e:90:12:
         70:8b:59:47:11:87:56:e7:52:f2:36:58:c6:e7:c6:fb:6b:c2:
         02:88:e6:67:c3:12:61:bf:23:ec:65:5b:ba:c7:af:14:a1:8d:
         01:95:0f:5b:f9:e2:87:73:8f:5c:a3:0a:2e:b6:c0:70:34:b1:
         6c:18:f1:72:35:4f:c8:df:fd:72:05:9f:68:11:91:b8:cc:f9:
         c3:c1:3b:8a:d6:c9:ee:22:90:1a:46:82:50:10:f9:31:e7:cd:
         08:a8:8e:00:96:8e:cb:17:bc:3d:f8:24:91:b1:5a:01:bd:7e:
         7f:74:97:64:dc:07:71:26:ed:58:e3:8c:c4:c6:9a:82:2e:8b:
         92:5e:d0:20:31:71:28:d9:8c:9a:b6:fc:9e:a3:96:65:86:1b:
         f0:d7:be:7f:b9:34:ae:63:2d:4f:8a:82:be:b1:75:4b:c3:e9:
         38:56:4a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:50:12 2025 by rpki-client