Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a3a2f33322d3332203d3e20323731373233.roa
File:                     323830343a383030303a3a2f33322d3332203d3e20323731373233.roa (raw, json)
Hash identifier:          LSu3GftnomNKTBnhOtUHqc0EyfeYBG14n6JK7jzTHtA=
Subject key identifier:   5F:E2:9A:B9:DD:AC:00:2D:EA:8D:E3:36:C1:07:7B:B1:D9:6B:4E:72
Certificate issuer:       /CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
Certificate serial:       0570807AAE741A93F0254BDCAAB9658FE6654A50
Authority key identifier: C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a3a2f33322d3332203d3e20323731373233.roa
Signing time:             Fri 16 May 2025 13:37:52 +0000
ROA not before:           Fri 16 May 2025 13:32:52 +0000
ROA not after:            Fri 15 May 2026 13:37:52 +0000
asID:                     271723
IP address blocks:        2804:8000::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl
                          rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 21:18:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:70:80:7a:ae:74:1a:93:f0:25:4b:dc:aa:b9:65:8f:e6:65:4a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5FAC883F52999ACF758B4E2B97F23641E0B1141
        Validity
            Not Before: May 16 13:32:52 2025 GMT
            Not After : May 15 13:37:52 2026 GMT
        Subject: CN=5FE29AB9DDAC002DEA8DE336C1077BB1D96B4E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:37:44:cc:b2:89:fc:ad:e5:37:15:d7:c7:71:
                    93:b5:f9:6d:d0:7b:b9:da:c3:3f:87:df:e3:c4:55:
                    90:f4:4b:e4:eb:31:d3:60:42:0e:79:dc:0a:22:94:
                    99:e1:04:7a:de:8a:4f:66:fa:cc:a9:60:75:0b:ad:
                    37:78:5b:22:c9:67:33:85:37:5e:d1:dc:41:10:f1:
                    3c:f8:b9:e0:2a:52:ae:83:16:c9:7d:73:54:68:f5:
                    2d:ba:86:5e:b9:d2:c5:9f:70:e4:b2:ec:c4:9e:a1:
                    9e:04:e1:3c:b7:bb:e2:97:2d:a3:12:83:a5:15:74:
                    5e:b6:07:2e:0f:4d:c2:dc:42:79:67:95:37:f6:5f:
                    57:21:e3:29:47:95:71:d9:98:9b:58:39:50:45:b5:
                    35:38:eb:d4:f9:83:23:5a:e5:19:9a:ff:c7:53:68:
                    dc:28:12:96:6b:ea:78:4b:33:ae:7f:2e:76:d8:18:
                    01:fb:44:8a:a3:71:11:93:39:a2:80:5c:76:1b:e1:
                    29:53:44:c2:14:1f:c8:22:b2:d1:b1:b0:2a:82:05:
                    28:04:42:b9:95:4c:ed:29:23:bf:00:0a:b3:8b:73:
                    a7:c7:d1:19:db:64:bc:6f:d7:a5:f4:56:16:d4:9b:
                    04:57:ef:9d:a4:96:b7:8e:46:04:b0:93:be:5f:10:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E2:9A:B9:DD:AC:00:2D:EA:8D:E3:36:C1:07:7B:B1:D9:6B:4E:72
            X509v3 Authority Key Identifier:
                keyid:C5:FA:C8:83:F5:29:99:AC:F7:58:B4:E2:B9:7F:23:64:1E:0B:11:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/C5FAC883F52999ACF758B4E2B97F23641E0B1141.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C5FAC883F52999ACF758B4E2B97F23641E0B1141.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HsRNe9ghTFCgLbczyhLtDCmq1y76PjLsA5hL5F3E7Sk/0/323830343a383030303a3a2f33322d3332203d3e20323731373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8000::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:a5:c6:66:62:88:c2:a2:5a:9c:66:71:c8:04:3d:7f:3f:a9:
         96:a1:cc:13:fa:b3:41:da:12:a6:de:17:9d:65:76:3a:f4:16:
         b7:d2:f0:19:5d:43:eb:c1:62:f4:b4:cd:97:62:10:33:8f:0b:
         d5:85:07:9e:cb:42:f3:64:0c:f9:3e:19:a1:6b:ce:17:42:fc:
         d5:55:1b:22:99:18:4a:1b:5e:31:ef:46:9a:1b:44:02:9a:1a:
         2d:fc:d8:fd:49:41:b8:5c:79:d1:a0:66:53:cd:a0:05:79:78:
         7c:37:9b:36:49:3b:6a:22:4b:a6:26:3c:4a:af:69:97:bf:08:
         94:ac:e4:bb:8a:a6:1c:48:5e:2c:3c:c5:4a:47:b9:1a:6f:6f:
         0e:93:9a:fd:7e:02:b2:03:12:eb:30:f9:65:63:8f:fe:b3:61:
         72:58:1f:ba:52:5f:a1:35:cf:b8:18:ab:fb:6f:07:3b:83:bd:
         ea:5f:8d:37:e6:e9:6a:85:04:6d:06:7b:57:b0:99:29:f9:57:
         9d:72:e0:bd:7b:a5:18:d3:e1:f6:3b:45:97:55:ff:26:dd:b3:
         36:f6:11:0b:49:6b:0b:54:e1:91:86:9c:d4:8e:48:04:65:a4:
         30:7a:1d:3b:8c:2b:50:1b:36:5f:4d:23:7c:20:1e:28:3d:db:
         03:6d:e0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:57:19 2025 by rpki-client