Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/323830343a323432383a3a2f33322d3332203d3e20323634323035.roa
File:                     323830343a323432383a3a2f33322d3332203d3e20323634323035.roa (raw, json)
Hash identifier:          UG64001zSItOmh9KunWAhPWRyjBojYXyZbEspusOMHw=
Subject key identifier:   85:A5:20:22:45:09:64:26:5F:DF:FD:46:DF:2B:05:70:9F:53:10:75
Certificate issuer:       /CN=C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0
Certificate serial:       5F41AEE8D6DA89823CAF983123FA617EAA4883E7
Authority key identifier: C5:36:F8:C5:CC:F1:0D:FD:8F:FD:C5:30:4A:B2:9C:6F:44:DE:13:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/323830343a323432383a3a2f33322d3332203d3e20323634323035.roa
Signing time:             Sat 17 May 2025 02:42:57 +0000
ROA not before:           Sat 17 May 2025 02:37:57 +0000
ROA not after:            Sat 16 May 2026 02:42:57 +0000
asID:                     264205
IP address blocks:        2804:2428::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.crl
                          rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 00:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:41:ae:e8:d6:da:89:82:3c:af:98:31:23:fa:61:7e:aa:48:83:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0
        Validity
            Not Before: May 17 02:37:57 2025 GMT
            Not After : May 16 02:42:57 2026 GMT
        Subject: CN=85A52022450964265FDFFD46DF2B05709F531075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a7:b8:4b:16:30:1d:96:d0:9f:37:06:77:50:
                    ca:9c:24:7d:16:83:9b:ee:ae:e4:6e:28:cc:c9:c9:
                    4b:ab:24:c6:0e:9d:9a:db:05:11:d3:64:b3:be:cb:
                    ac:ed:6b:2e:31:74:82:34:d0:c8:07:46:1f:a1:cb:
                    e8:07:73:09:7c:22:42:57:8b:fe:84:77:b0:4e:61:
                    d0:fa:ad:99:9a:79:69:5a:cb:31:6a:5e:81:8a:60:
                    c6:fd:6a:43:f9:d4:0f:55:14:b7:21:a3:63:7c:94:
                    f0:85:50:41:61:46:10:1e:30:9e:cd:d8:02:88:5e:
                    25:62:80:a7:1b:98:2b:43:84:8f:72:16:66:15:57:
                    36:43:b5:5b:14:e4:67:df:fb:b2:29:9c:f5:cb:25:
                    16:b6:68:80:15:d1:09:21:4b:eb:06:34:4e:4e:34:
                    1e:4c:25:90:fd:36:ee:17:49:67:23:bc:e0:c2:ed:
                    97:a5:16:78:5d:3b:78:1e:66:8d:8f:37:90:52:97:
                    75:b3:99:16:39:5b:45:e6:6e:94:e5:d3:3c:b9:e7:
                    a5:52:40:91:32:b1:84:4a:05:97:39:f8:9b:66:15:
                    45:62:f8:22:01:6a:be:b9:ea:d4:ac:de:f9:e6:20:
                    6c:d7:d1:53:e5:8d:d4:9f:80:18:93:9b:5e:d3:ee:
                    6e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A5:20:22:45:09:64:26:5F:DF:FD:46:DF:2B:05:70:9F:53:10:75
            X509v3 Authority Key Identifier:
                keyid:C5:36:F8:C5:CC:F1:0D:FD:8F:FD:C5:30:4A:B2:9C:6F:44:DE:13:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C536F8C5CCF10DFD8FFDC5304AB29C6F44DE13C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/1/323830343a323432383a3a2f33322d3332203d3e20323634323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2428::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:39:b4:f7:63:df:00:99:ea:e1:31:02:6f:24:6d:42:de:aa:
         7b:6f:19:31:06:4e:4e:93:3b:96:84:e1:08:52:43:4f:14:90:
         93:0e:bf:b5:fa:a2:57:56:64:50:d9:29:6a:38:51:2b:73:92:
         fa:e3:59:82:c3:65:d2:f3:67:6d:11:7b:37:b0:b7:cd:ed:e0:
         67:25:ac:ac:f9:ad:6b:7a:47:c4:7d:b3:a6:da:6b:66:50:5b:
         e2:96:8d:c3:f8:e8:6d:44:f6:fe:13:97:a8:74:d7:d8:dd:4a:
         4c:1c:ae:43:a1:3f:c8:c5:85:51:27:ea:ed:02:cc:18:c8:aa:
         11:98:43:47:c9:0d:78:27:14:b3:b8:9d:69:26:0e:3a:de:11:
         99:79:0d:e0:45:0f:bd:a8:f5:1b:01:dd:71:3e:37:64:e7:80:
         81:ed:14:15:99:1c:02:e1:bd:c2:cb:6a:e1:d8:5c:c4:76:74:
         f3:db:e1:aa:2b:55:e4:0f:97:b9:fa:3b:98:c7:f1:47:37:de:
         36:d0:ad:81:05:24:7b:cd:e1:45:43:9c:87:58:32:e7:8e:67:
         4c:35:36:b2:aa:60:89:87:aa:bd:2a:6d:a9:d9:46:0d:8d:d5:
         c6:f9:74:29:19:2d:42:1a:03:e6:e1:23:15:5a:c6:f6:52:c4:
         b2:71:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:57:09 2025 by rpki-client