Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/323830343a373865343a3a2f33322d313238203d3e20323731323732.roa
File:                     323830343a373865343a3a2f33322d313238203d3e20323731323732.roa (raw, json)
Hash identifier:          SulpIP7iiR6gyvtC/tvIlZu2Kx5HOnJ/XIIbwKIk+7c=
Subject key identifier:   F3:A3:B8:FB:37:C3:59:48:C3:A5:73:CA:25:07:92:EE:8D:EC:02:A5
Certificate issuer:       /CN=D6592886C2264A6296BF445F0FA4EF8CF71BB049
Certificate serial:       52068915A56721F697E7FBE33E49111E3D1C485D
Authority key identifier: D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/323830343a373865343a3a2f33322d313238203d3e20323731323732.roa
Signing time:             Thu 06 Mar 2025 09:00:38 +0000
ROA not before:           Thu 06 Mar 2025 08:55:38 +0000
ROA not after:            Thu 05 Mar 2026 09:00:38 +0000
asID:                     271272
IP address blocks:        2804:78e4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.crl
                          rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 07:56:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:06:89:15:a5:67:21:f6:97:e7:fb:e3:3e:49:11:1e:3d:1c:48:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6592886C2264A6296BF445F0FA4EF8CF71BB049
        Validity
            Not Before: Mar  6 08:55:38 2025 GMT
            Not After : Mar  5 09:00:38 2026 GMT
        Subject: CN=F3A3B8FB37C35948C3A573CA250792EE8DEC02A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:4f:e1:6d:2e:f6:7a:92:da:80:2c:b0:af:
                    ad:7c:20:89:42:55:77:aa:bc:40:a2:16:a0:4f:34:
                    6a:63:11:2b:1a:7e:0f:1f:bd:e2:56:70:93:26:68:
                    dd:d1:c7:d2:6e:75:3e:0f:14:6e:c5:78:17:33:cd:
                    62:d0:21:52:66:be:72:80:b9:ad:ca:42:86:34:6f:
                    e7:9f:48:c7:94:2f:1d:74:3c:2d:69:f9:a2:2e:fe:
                    49:37:2e:cf:9c:ef:b2:67:05:08:58:62:59:38:02:
                    69:59:43:48:50:fc:f5:f8:44:46:d1:08:3b:fa:fa:
                    6d:d8:0a:3c:fe:59:d0:3a:5a:48:fe:4b:ba:00:b9:
                    10:69:ba:c4:09:1c:f8:c8:f3:da:92:d0:80:41:62:
                    e5:c3:6d:78:e6:c9:89:52:1c:46:47:45:2d:2a:64:
                    8d:5a:92:2e:3b:bd:fa:4d:a5:3e:c7:30:f1:67:b5:
                    bf:48:44:98:f7:e6:2c:2b:b6:07:59:a5:96:4b:b0:
                    55:e4:96:4e:05:f7:65:e6:25:87:97:b0:42:ff:d2:
                    b0:d2:b2:50:de:9e:44:02:29:d5:e7:56:79:40:0e:
                    f7:90:97:8d:49:a8:d6:f5:6d:65:9e:66:7f:c1:69:
                    c6:f7:e3:e0:27:1b:b1:38:72:b1:bf:86:9b:ed:68:
                    10:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A3:B8:FB:37:C3:59:48:C3:A5:73:CA:25:07:92:EE:8D:EC:02:A5
            X509v3 Authority Key Identifier:
                keyid:D6:59:28:86:C2:26:4A:62:96:BF:44:5F:0F:A4:EF:8C:F7:1B:B0:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6592886C2264A6296BF445F0FA4EF8CF71BB049.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tMbZuqVvLqzsUbt5hpkTU7R7s2j79XtEcGouBeLMGv3/1/323830343a373865343a3a2f33322d313238203d3e20323731323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:e1:e8:d3:8f:5a:bd:32:f8:70:ac:35:90:35:03:8d:d8:87:
         4a:7e:bb:ad:a7:7b:20:23:99:0f:f2:00:31:12:55:af:07:0c:
         c8:ac:3d:14:cd:b7:bd:1c:20:d8:b0:03:c1:35:a5:4c:97:bd:
         bb:44:ec:9d:36:ae:c0:cb:1b:83:a6:ce:45:b2:30:df:bb:53:
         71:70:4e:83:47:70:ff:3e:62:bc:d0:76:95:47:cf:d1:18:0e:
         1d:06:73:12:be:c8:1a:a8:bf:d4:9f:95:95:ca:4b:78:87:b0:
         56:e0:28:63:bc:69:f0:34:84:12:31:66:0c:19:65:a8:88:8f:
         3c:3f:fe:aa:ba:a6:d5:4c:d0:e0:01:82:64:fd:49:eb:97:c9:
         b4:6c:98:a9:db:85:4d:5d:6e:69:4a:b7:3e:9b:78:c7:52:85:
         3c:71:9b:15:71:97:82:2a:33:d7:31:91:e6:c5:38:23:40:fe:
         89:16:e4:a9:91:12:b0:0b:f3:45:cc:17:56:82:1c:87:da:27:
         9a:75:3f:27:a5:4d:bc:c2:22:d8:b6:68:28:d8:52:d0:63:af:
         48:41:a3:59:61:de:b3:78:2f:11:a5:e5:5c:ad:a7:a1:b6:42:
         ad:28:2c:d2:14:47:20:c4:71:de:00:00:f3:65:a7:80:dd:28:
         95:96:9d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:10:16 2025 by rpki-client