Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a3a2f33322d3332203d3e20323732373031.roa
File:                     323830343a383735303a3a2f33322d3332203d3e20323732373031.roa (raw, json)
Hash identifier:          Ly+IZv8nnMk8hRFX4JMg/17GsUzhiI8Vi4UzQxjw2Fo=
Subject key identifier:   5A:A9:C5:02:D9:21:38:BF:5A:A1:16:9B:83:58:31:42:6F:FB:12:6F
Certificate issuer:       /CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
Certificate serial:       50DEAEBD9E46C1A62EE00570EC7EDBB83C1E8449
Authority key identifier: E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a3a2f33322d3332203d3e20323732373031.roa
Signing time:             Thu 06 Mar 2025 05:52:45 +0000
ROA not before:           Thu 06 Mar 2025 05:47:45 +0000
ROA not after:            Thu 05 Mar 2026 05:52:45 +0000
asID:                     272701
IP address blocks:        2804:8750::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl
                          rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 18:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:de:ae:bd:9e:46:c1:a6:2e:e0:05:70:ec:7e:db:b8:3c:1e:84:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E01C509DBE2A66987F85D9F7040DF42AFECFB53B
        Validity
            Not Before: Mar  6 05:47:45 2025 GMT
            Not After : Mar  5 05:52:45 2026 GMT
        Subject: CN=5AA9C502D92138BF5AA1169B835831426FFB126F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7f:06:87:41:ad:ad:46:ea:63:47:68:d0:31:
                    e0:5c:46:a1:ea:e0:06:57:89:f3:64:7d:a7:cb:5f:
                    5d:0b:7d:47:67:d3:c6:0c:b0:6d:72:b0:b1:2b:17:
                    24:31:67:1a:7e:09:40:70:50:ca:59:49:ca:01:62:
                    b7:85:5c:3c:5b:3f:cc:f3:3c:64:fe:c7:3e:26:68:
                    06:0f:fd:93:a8:be:b3:fd:08:a8:59:a9:3c:66:e3:
                    da:27:6a:be:23:03:45:0f:bf:5d:8f:2d:e7:65:af:
                    02:e3:6f:f2:01:e9:28:7d:ed:bd:84:4f:cf:7e:0b:
                    d2:72:d2:f2:f0:b0:51:57:bf:4e:55:66:00:92:40:
                    88:89:77:31:4a:dd:10:6c:59:c0:32:15:4f:15:c7:
                    06:5c:38:e1:49:9b:dc:68:49:27:8d:2c:c2:93:53:
                    47:39:16:45:78:0d:72:65:66:a4:19:26:73:a3:0d:
                    72:83:ad:78:5a:77:22:38:f7:4b:1c:e0:aa:c3:a1:
                    f5:bf:9e:13:c1:68:a2:0a:4e:2c:4c:2c:38:f7:1a:
                    a6:6d:07:ac:7d:07:af:a0:ac:36:78:8d:57:b4:dc:
                    57:b0:0f:f7:66:88:7c:31:98:e9:86:40:fb:30:5d:
                    28:0f:9b:8e:e0:8f:03:31:a9:c7:07:f5:42:2f:e5:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A9:C5:02:D9:21:38:BF:5A:A1:16:9B:83:58:31:42:6F:FB:12:6F
            X509v3 Authority Key Identifier:
                keyid:E0:1C:50:9D:BE:2A:66:98:7F:85:D9:F7:04:0D:F4:2A:FE:CF:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E01C509DBE2A66987F85D9F7040DF42AFECFB53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7X5xZx7ni4tRYCYPx6TJosipeinh5917BAEGm2D8Pg9B/1/323830343a383735303a3a2f33322d3332203d3e20323732373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8750::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:07:fc:71:fe:d2:2c:41:65:53:df:80:a1:5d:0e:7c:35:0a:
         60:5f:3d:af:1c:eb:e0:8a:2e:57:ea:a6:5a:77:cc:36:cc:9b:
         d3:f2:a2:ad:d1:18:7d:f6:e9:bb:f1:7e:18:af:54:2b:b3:09:
         f9:a8:cb:df:69:ef:7f:05:f2:7c:ac:0a:57:51:72:00:88:f5:
         b2:2d:d4:f2:4d:d2:ac:44:e1:4d:ee:76:a4:0d:17:25:9c:96:
         f4:75:a6:e5:0a:37:c4:86:ba:b5:3f:04:ad:7a:c6:51:dd:e8:
         d8:f3:79:c9:ba:38:87:e3:b9:23:e2:84:23:c9:6f:04:43:15:
         e0:5f:29:2f:2e:6c:8a:94:ac:bf:a9:1f:33:56:d6:07:49:9e:
         88:74:42:11:8c:75:2c:c5:d4:7e:07:a3:b2:da:a8:7e:83:f1:
         64:d9:bb:cf:14:39:b8:68:f3:83:65:7f:38:a5:43:7b:17:e5:
         e9:20:a1:18:7d:52:2c:cc:f3:f2:10:46:d0:f5:9d:3a:ca:32:
         ba:04:33:7b:06:ba:d1:cc:dd:86:d6:fc:e3:cc:84:35:d8:e2:
         66:e9:57:91:eb:26:14:83:a8:ea:ef:26:eb:8e:f9:0c:e1:b6:
         0f:09:c5:87:15:eb:eb:03:ef:91:65:d7:e4:4f:98:12:81:2b:
         58:93:49:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:08:06 2025 by rpki-client