Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/323830343a383536343a3a2f33322d3430203d3e20323632333133.roa
File:                     323830343a383536343a3a2f33322d3430203d3e20323632333133.roa (raw, json)
Hash identifier:          m8Z7hQqBrGRjoTfk6e3usclOI9dpe0R6ItxwH6qyVMo=
Subject key identifier:   42:77:9D:17:5C:D3:99:21:0F:BE:3C:A0:64:6A:1F:64:75:AD:6C:36
Certificate issuer:       /CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
Certificate serial:       01320AF57C2A78C263A893FC29C1011A1E20C416
Authority key identifier: D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/323830343a383536343a3a2f33322d3430203d3e20323632333133.roa
Signing time:             Thu 29 May 2025 19:04:57 +0000
ROA not before:           Thu 29 May 2025 18:59:57 +0000
ROA not after:            Thu 28 May 2026 19:04:57 +0000
asID:                     262313
IP address blocks:        2804:8564::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl
                          rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Jun 2025 15:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:32:0a:f5:7c:2a:78:c2:63:a8:93:fc:29:c1:01:1a:1e:20:c4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04756CB00F9822A8A50C47FD94CEC5DF31DA94B
        Validity
            Not Before: May 29 18:59:57 2025 GMT
            Not After : May 28 19:04:57 2026 GMT
        Subject: CN=42779D175CD399210FBE3CA0646A1F6475AD6C36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:7b:fe:4b:63:3a:62:7d:8c:1e:54:78:c2:
                    eb:b9:25:04:42:2f:62:51:52:0b:aa:68:aa:54:17:
                    3e:9f:e6:4a:8d:48:33:67:09:5e:1c:47:92:d4:64:
                    31:85:72:0c:77:34:ec:94:58:00:26:17:9f:14:81:
                    f7:cf:fc:ee:f7:81:1d:11:33:2e:ab:d9:25:bb:dd:
                    0f:b8:f7:50:03:d9:69:5f:a3:3e:78:c1:d2:95:df:
                    a5:c4:17:5f:ed:34:b7:1a:ae:e9:5e:b8:e4:a4:d3:
                    6a:e4:34:d5:04:30:2c:98:12:f9:69:24:cd:8d:ec:
                    bd:e1:50:ab:52:04:45:1c:9b:32:90:59:f7:9d:db:
                    90:17:fe:89:5c:04:bf:3f:b0:f2:e7:98:ec:16:15:
                    be:7b:40:3f:83:9c:9c:14:8a:6c:5b:22:2b:9e:8f:
                    b1:7a:7e:67:4f:f2:ef:5a:6f:06:96:84:78:b2:4e:
                    49:e1:19:05:8d:2d:7f:e1:ad:f7:d8:78:00:d0:23:
                    7e:90:c2:c3:3b:02:06:c1:fb:f4:dc:63:80:af:0d:
                    c1:ad:b6:88:01:21:80:15:bc:ba:75:16:5d:99:21:
                    ef:ab:85:10:f2:31:60:31:0d:16:25:87:3c:3a:3b:
                    cb:65:0a:46:e7:c6:14:e1:18:df:bb:3c:52:52:ed:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:77:9D:17:5C:D3:99:21:0F:BE:3C:A0:64:6A:1F:64:75:AD:6C:36
            X509v3 Authority Key Identifier:
                keyid:D0:47:56:CB:00:F9:82:2A:8A:50:C4:7F:D9:4C:EC:5D:F3:1D:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D04756CB00F9822A8A50C47FD94CEC5DF31DA94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7J3LUsDxVKTEfgy8mcCHesqrNxLskkKzqhEpgQCV6pZs/1/323830343a383536343a3a2f33322d3430203d3e20323632333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8564::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:2b:08:9d:79:28:28:57:66:70:70:d7:f2:38:2c:48:1b:2d:
         1d:88:03:e4:08:ca:ec:1a:06:4c:42:12:a7:fe:a4:ac:99:88:
         c0:d3:81:c9:23:0a:84:33:28:62:b3:4c:8c:6f:ef:a7:f6:40:
         32:a3:c1:f8:f5:dc:33:93:4c:bb:cf:08:d0:90:71:fb:bc:31:
         87:7f:4a:69:8f:6c:bc:1c:5b:b1:8d:ef:26:54:38:9c:e3:a4:
         6b:fd:86:43:80:1d:8e:9e:cd:39:a0:41:cc:ba:24:e1:ff:06:
         0b:01:eb:55:84:74:d3:b0:8f:fa:81:6f:39:80:e6:03:cb:0c:
         97:ac:04:4a:e3:f1:7d:9f:0a:7d:21:ec:89:b5:d2:79:ce:cb:
         a7:3b:5d:3b:75:4c:1b:3d:85:40:d6:af:e3:c0:8d:3c:40:55:
         bc:21:7b:de:32:d8:82:a5:14:15:03:0f:ce:2c:40:1f:3b:35:
         26:87:cf:b9:d7:d3:74:37:5a:6f:22:38:96:f5:d7:d5:0a:0d:
         bd:65:df:91:6a:c0:d0:b0:bf:3c:c9:8b:8a:d9:64:9c:ee:cf:
         9e:d9:3e:7d:6f:5e:2d:ff:d0:b1:e2:13:36:ba:41:fc:84:7e:
         77:49:29:bd:8d:e1:1f:c0:1c:94:82:a8:9e:89:98:c3:2f:12:
         a7:e6:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:48:57 2025 by rpki-client