Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/323830343a6463383a3a2f33322d3438203d3e203238363336.roa
File:                     323830343a6463383a3a2f33322d3438203d3e203238363336.roa (raw, json)
Hash identifier:          XDHY5qjifeAPzNpf2S42haMrJ8Z/5Kt1PQ49dUD/t08=
Subject key identifier:   2A:B9:55:CD:F4:39:F9:B5:CA:50:D1:7B:58:10:4D:9E:45:E9:D5:BC
Certificate issuer:       /CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
Certificate serial:       54D874F5F576F415B1B530BCE4C9E3048DC2E2DD
Authority key identifier: 8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/323830343a6463383a3a2f33322d3438203d3e203238363336.roa
Signing time:             Tue 08 Apr 2025 16:31:00 +0000
ROA not before:           Tue 08 Apr 2025 16:26:00 +0000
ROA not after:            Tue 07 Apr 2026 16:31:00 +0000
asID:                     28636
IP address blocks:        2804:dc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl
                          rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 19:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d8:74:f5:f5:76:f4:15:b1:b5:30:bc:e4:c9:e3:04:8d:c2:e2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F43BF9E79677F282BF953C8E1F71757E25A9063
        Validity
            Not Before: Apr  8 16:26:00 2025 GMT
            Not After : Apr  7 16:31:00 2026 GMT
        Subject: CN=2AB955CDF439F9B5CA50D17B58104D9E45E9D5BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:d5:cd:73:fe:b9:4e:28:cd:68:b0:d1:d0:
                    4d:dd:dd:0b:e3:fc:c1:61:0c:07:82:ef:fc:80:74:
                    c0:85:59:63:b4:53:0d:e9:bc:d7:c1:3c:fb:74:08:
                    4b:2b:d1:b4:b5:0f:90:7c:22:a2:2b:f0:dc:1c:97:
                    56:ec:af:2f:b7:81:bc:90:37:11:db:d2:85:27:81:
                    69:e3:85:37:25:b3:4c:d6:0c:b8:7e:75:65:69:ac:
                    e7:9c:cd:64:61:12:d8:41:fb:7e:4a:37:fc:69:99:
                    f5:68:cf:21:1f:70:c7:93:22:1f:b8:8b:9a:77:48:
                    0a:7f:22:7d:26:41:3e:28:12:d9:24:bd:52:b6:64:
                    41:9a:67:f1:a6:8c:df:4c:da:26:d0:8b:5e:7b:32:
                    0e:8b:ff:3d:29:d3:79:5c:24:43:59:9c:f9:2e:bb:
                    e6:14:ff:b3:28:df:dd:2b:5c:e2:de:e6:0d:f0:e5:
                    af:de:68:d1:1e:4b:3c:0f:c9:fc:cb:28:70:aa:09:
                    41:f5:34:4b:de:74:71:c3:de:ed:e1:14:26:d4:1b:
                    81:b1:bf:81:d7:03:29:94:7d:42:8e:1b:68:58:1e:
                    a7:bf:e5:a7:f8:fe:0e:b8:27:f7:3d:44:3e:0c:8b:
                    07:be:aa:ad:1a:7b:17:13:ae:be:f6:9f:96:79:18:
                    c3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B9:55:CD:F4:39:F9:B5:CA:50:D1:7B:58:10:4D:9E:45:E9:D5:BC
            X509v3 Authority Key Identifier:
                keyid:8F:43:BF:9E:79:67:7F:28:2B:F9:53:C8:E1:F7:17:57:E2:5A:90:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/8F43BF9E79677F282BF953C8E1F71757E25A9063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F43BF9E79677F282BF953C8E1F71757E25A9063.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5iyHo83SNkaQB1PsieTQuPTjFwoGo5hrh9JUi5w1MD5n/0/323830343a6463383a3a2f33322d3438203d3e203238363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:4b:47:89:7a:7a:d1:e0:4f:10:c6:22:bb:ed:fd:a0:14:ed:
         20:37:ad:e0:4f:79:94:b5:d8:2e:c1:1c:91:a1:e8:a9:12:2b:
         9c:45:5f:96:f4:dd:d8:e1:74:1d:ee:7e:e3:fb:66:bd:0f:9e:
         b0:27:c7:4f:22:82:e5:0b:1d:a9:e3:cf:8c:00:d9:ff:f2:6c:
         a2:d6:2a:7b:c7:90:04:8e:80:89:eb:52:00:49:86:0a:9d:9e:
         7d:2a:85:39:23:6e:13:aa:d1:f1:94:ff:73:3b:43:1f:86:db:
         21:c4:93:98:ed:44:33:27:2a:2f:56:45:86:3c:37:d4:07:9a:
         04:8b:2f:3d:21:44:ae:fc:ee:02:72:13:62:57:a8:99:9e:5c:
         48:ef:7f:54:00:a4:c7:78:64:de:77:68:7f:bd:f1:22:ed:45:
         4b:f9:0a:e5:8d:f6:ee:b1:c5:cd:c5:85:19:29:00:d4:e6:f3:
         e4:06:d5:7a:9d:dd:8c:b3:b2:a9:54:14:f7:24:3a:c2:bd:ed:
         49:9c:35:00:d3:63:f6:d8:7f:47:ae:ca:8b:fa:18:e9:16:61:
         b9:64:85:b4:78:41:b7:c6:56:54:45:ec:ad:04:b1:26:a6:60:
         35:43:65:68:9f:75:fd:58:61:49:c0:df:d9:77:74:07:6a:c0:
         70:1f:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:30:41 2025 by rpki-client