Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
File:                     323830343a346632383a3a2f33332d3333203d3e20323638333038.roa (raw, json)
Hash identifier:          m/sgVGgBC2FBXR8BIwi7gIJyXXY3FivUZkqnyg6Mshs=
Subject key identifier:   F4:4D:E2:D8:E4:A2:BF:BE:F0:80:B6:D8:DE:75:AE:D3:3D:8C:A4:9A
Certificate issuer:       /CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
Certificate serial:       439B8DF52E56DE177B7E63264A6C645DB47E2AD5
Authority key identifier: 87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
Signing time:             Mon 07 Apr 2025 20:51:48 +0000
ROA not before:           Mon 07 Apr 2025 20:46:48 +0000
ROA not after:            Mon 06 Apr 2026 20:51:48 +0000
asID:                     268308
IP address blocks:        2804:4f28::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl
                          rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 08:14:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9b:8d:f5:2e:56:de:17:7b:7e:63:26:4a:6c:64:5d:b4:7e:2a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879D057B82DAB7D3B27DF8C0E310FFAD535B18A8
        Validity
            Not Before: Apr  7 20:46:48 2025 GMT
            Not After : Apr  6 20:51:48 2026 GMT
        Subject: CN=F44DE2D8E4A2BFBEF080B6D8DE75AED33D8CA49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:be:d0:12:08:2f:63:7f:b3:5a:8e:cd:1c:
                    21:04:37:8d:6f:77:43:e4:8d:23:2c:43:49:85:c0:
                    23:b8:cc:a2:81:96:3f:28:9a:37:50:12:7a:51:87:
                    3b:73:76:0a:94:cd:bc:2a:65:40:44:e6:4f:74:1d:
                    7b:5f:68:8e:1e:e3:c0:32:68:54:b8:f1:71:1b:3c:
                    16:d4:bf:2a:2a:c6:3a:0b:fa:8b:19:84:b5:69:61:
                    26:04:dc:bc:33:95:49:8f:4a:e3:f6:59:cc:73:ea:
                    35:9d:33:ce:d8:9a:56:09:50:b1:10:b5:0d:dd:9d:
                    1e:8a:e2:5d:ff:53:3c:66:53:e6:32:67:21:b1:e3:
                    a9:1f:2b:63:26:6f:1f:ae:0a:c7:14:7c:7e:dd:1a:
                    1b:c2:4b:2e:5e:fe:7d:74:51:4e:a5:da:39:93:50:
                    fd:9e:18:d8:52:12:8a:d1:f5:e4:72:1c:3a:d2:6a:
                    fb:22:df:96:4e:3c:e5:8a:ac:ae:4a:3e:41:7b:9c:
                    6d:98:cc:30:a8:6b:cd:e4:db:bb:4e:09:5e:c7:ef:
                    ad:ab:8b:a0:d8:71:78:2b:ba:7a:d4:16:44:ff:ea:
                    82:5a:94:bc:ca:55:f1:2a:28:9e:06:ea:c6:1a:ad:
                    e4:7b:f3:45:a6:22:09:49:8d:04:b5:1a:14:2a:13:
                    00:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4D:E2:D8:E4:A2:BF:BE:F0:80:B6:D8:DE:75:AE:D3:3D:8C:A4:9A
            X509v3 Authority Key Identifier:
                keyid:87:9D:05:7B:82:DA:B7:D3:B2:7D:F8:C0:E3:10:FF:AD:53:5B:18:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/879D057B82DAB7D3B27DF8C0E310FFAD535B18A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f28::/33

    Signature Algorithm: sha256WithRSAEncryption
         9e:0b:e6:53:e6:66:71:00:46:a3:6e:6a:7b:d1:84:78:33:23:
         a4:fd:a4:f3:58:e7:61:5f:e9:e4:1b:6a:fb:d4:db:b3:71:87:
         b8:d8:5d:bd:15:ef:7f:15:85:68:c9:48:90:8d:e6:9d:26:61:
         d5:45:27:46:f6:50:18:d8:89:47:62:6a:8e:b0:7d:23:f8:75:
         cd:6e:5f:5f:3e:d4:52:3d:33:4e:ab:3d:b2:77:96:98:49:81:
         42:68:12:2d:a4:4c:6f:24:29:29:e4:82:c3:86:ff:f7:82:12:
         0e:0b:a1:a0:a3:30:d3:c4:ba:2f:c9:ab:92:fd:9f:da:60:48:
         29:e9:be:e7:be:4a:75:72:55:f7:c5:3d:82:c7:6b:84:fa:e7:
         33:6e:59:fb:fd:dd:e2:31:f8:8a:5d:91:a2:69:12:c1:92:3a:
         e9:f4:27:8e:7e:e1:bd:97:48:4a:0e:e2:5c:48:a7:5b:b1:70:
         0a:bb:98:7e:af:7b:88:1e:10:3f:c9:4c:36:d3:2d:5c:e3:72:
         c0:60:50:82:03:1a:fc:5a:1f:e5:e9:b4:3e:db:d9:42:c8:40:
         ee:e7:81:2f:b4:f8:d7:fb:1c:8e:10:97:34:60:e1:93:8a:23:
         8a:5d:ac:4f:55:94:7d:1b:c7:6d:80:07:4a:be:e9:7b:b9:81:
         43:cc:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:08:23 2025 by rpki-client