Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a3a2f33322d3332203d3e20323638393338.roa
File:                     323830343a356365383a3a2f33322d3332203d3e20323638393338.roa (raw, json)
Hash identifier:          OcX3YtYm2aEYSZjqB2wpbsHTQ1iCY6nJEp5JAwMVrEE=
Subject key identifier:   70:86:A5:EF:0D:ED:D1:04:B0:C9:0B:E0:51:98:B8:96:D4:3A:34:F2
Certificate issuer:       /CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
Certificate serial:       61CB30FD2A18F611ED850DE6CEDB97521F075495
Authority key identifier: 5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a3a2f33322d3332203d3e20323638393338.roa
Signing time:             Thu 06 Mar 2025 02:12:00 +0000
ROA not before:           Thu 06 Mar 2025 02:07:00 +0000
ROA not after:            Thu 05 Mar 2026 02:12:00 +0000
asID:                     268938
IP address blocks:        2804:5ce8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl
                          rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 00:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:cb:30:fd:2a:18:f6:11:ed:85:0d:e6:ce:db:97:52:1f:07:54:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA440224058DF1562003D8FD1746F0E05A2C6F6
        Validity
            Not Before: Mar  6 02:07:00 2025 GMT
            Not After : Mar  5 02:12:00 2026 GMT
        Subject: CN=7086A5EF0DEDD104B0C90BE05198B896D43A34F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:be:d7:72:92:37:ea:e9:7e:a3:16:68:57:
                    38:19:5f:d8:7b:1a:48:85:06:9b:59:e2:a3:7a:dd:
                    9e:be:8e:8a:71:ee:2f:b2:cd:11:95:58:af:9d:f7:
                    a4:30:24:3f:0c:2f:b2:3e:78:6d:19:51:96:65:12:
                    1d:df:73:26:d8:ae:97:aa:4b:6a:c1:e8:c0:5b:99:
                    77:96:eb:78:69:aa:e2:dc:7c:d9:66:b6:71:e0:d5:
                    0e:a1:ee:84:c1:65:22:27:0e:db:05:36:b1:9e:fd:
                    a4:fc:61:e5:ec:44:15:13:a9:5b:4c:83:a8:3d:a0:
                    18:87:35:87:8c:19:e9:d7:a5:b4:24:86:e1:ea:b8:
                    b6:42:10:44:2e:51:fb:35:ec:2a:81:6e:f6:5d:2d:
                    90:04:fd:45:88:9a:9a:63:cf:74:a5:c6:bf:c7:69:
                    02:9d:e0:62:e2:99:55:1c:41:0c:d3:07:42:3c:f5:
                    b6:34:1a:df:de:b9:24:8a:6c:1a:46:78:f6:f2:2f:
                    a8:dc:dc:f7:f3:7e:11:a1:4d:73:d1:e3:69:1b:97:
                    e7:e7:19:bd:55:19:0c:ad:cd:b3:6c:36:b6:86:6c:
                    a7:fd:ec:6c:79:b3:90:8e:12:1d:cf:2d:27:3e:f1:
                    39:14:fc:dc:09:12:f0:7d:5b:a3:ab:f8:64:f5:c7:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:86:A5:EF:0D:ED:D1:04:B0:C9:0B:E0:51:98:B8:96:D4:3A:34:F2
            X509v3 Authority Key Identifier:
                keyid:5B:A4:40:22:40:58:DF:15:62:00:3D:8F:D1:74:6F:0E:05:A2:C6:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BA440224058DF1562003D8FD1746F0E05A2C6F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/1/323830343a356365383a3a2f33322d3332203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ce8::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:15:c9:95:9f:58:d8:b5:bc:bd:53:9d:4c:74:46:83:7c:ba:
         8a:c1:f1:b1:4d:39:05:4f:1b:ac:42:f1:78:b9:36:be:03:45:
         0f:02:ca:38:b4:4b:f9:1e:ed:43:9c:c6:d1:4d:90:11:61:fd:
         50:99:7f:e6:6a:dc:39:0e:88:14:38:02:59:32:51:8d:a7:bc:
         0b:b5:43:36:a0:c2:93:4a:6d:e7:68:d7:12:0a:5e:b7:a9:a0:
         e1:f9:8c:54:33:d2:d3:ab:15:d1:22:1f:b3:76:ed:a8:80:43:
         4a:ec:52:0d:3a:d4:ec:15:c9:ec:38:43:0e:e9:fd:c2:4d:1a:
         f4:52:ee:06:29:12:8c:21:46:f0:64:d8:15:0c:0e:b1:db:2d:
         8e:a7:af:23:ae:cb:8c:d1:5f:10:91:78:53:aa:97:e8:9e:d0:
         66:be:aa:77:0c:0e:9f:08:55:7e:56:66:d5:ba:90:61:18:c3:
         ef:e3:7c:2c:a5:0d:ba:23:95:e3:80:85:df:28:25:e4:fa:03:
         7f:07:ed:9c:2b:21:53:b1:d2:fb:69:d5:cf:ca:38:f0:af:84:
         66:47:60:87:ad:46:96:2e:3f:49:aa:0e:a5:ad:fe:25:28:c2:
         00:c1:05:65:76:7d:bb:a0:7c:cc:3c:d7:86:ea:be:6e:e8:9e:
         43:ca:3e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:16:14 2025 by rpki-client