Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/323830343a386538633a3a2f33322d3332203d3e20323733343333.roa
File:                     323830343a386538633a3a2f33322d3332203d3e20323733343333.roa (raw, json)
Hash identifier:          GKQiZSRTggPaFx/yFhowb4IhNVU02HJ7y8OaPzs+f/0=
Subject key identifier:   7D:E3:80:3E:65:69:A0:26:D7:FE:93:E7:73:70:D5:FD:1B:21:7B:90
Certificate issuer:       /CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E
Certificate serial:       5E4BB5B71746167F7ECBC6284D0CB8F03749D5BF
Authority key identifier: 52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/323830343a386538633a3a2f33322d3332203d3e20323733343333.roa
Signing time:             Mon 02 Jun 2025 14:39:37 +0000
ROA not before:           Mon 02 Jun 2025 14:34:37 +0000
ROA not after:            Mon 01 Jun 2026 14:39:37 +0000
asID:                     273433
IP address blocks:        2804:8e8c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl
                          rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 15:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4b:b5:b7:17:46:16:7f:7e:cb:c6:28:4d:0c:b8:f0:37:49:d5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E
        Validity
            Not Before: Jun  2 14:34:37 2025 GMT
            Not After : Jun  1 14:39:37 2026 GMT
        Subject: CN=7DE3803E6569A026D7FE93E77370D5FD1B217B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:c5:51:94:43:6a:06:35:2d:ed:10:f7:e8:
                    c6:d3:7a:17:ac:24:dd:fc:54:8c:a2:7f:18:4e:c7:
                    9c:45:d6:ef:50:e2:ce:52:b4:37:14:e9:a0:97:f0:
                    5e:33:96:7b:f1:7e:44:f4:d4:e7:dc:fc:78:d3:cc:
                    b2:8b:17:36:dc:37:98:70:95:c1:9c:c0:32:9e:7b:
                    27:bb:de:32:d9:c8:50:ab:f7:4e:ad:85:4d:01:84:
                    19:78:22:f5:6c:c8:1f:4d:f2:4c:51:86:79:eb:69:
                    70:61:8f:42:3c:1e:de:ab:4c:4d:ad:4f:97:28:04:
                    9d:01:a8:a8:ef:9a:1b:75:84:0e:3f:c1:a7:5d:62:
                    be:42:30:9d:1c:24:58:58:2b:6f:8e:fc:22:97:e5:
                    b9:41:c0:1c:dd:7b:0c:bd:76:29:a4:f0:da:ba:10:
                    b5:49:3a:88:60:e0:f4:76:4d:26:9a:09:58:c9:52:
                    22:2f:9e:6f:c7:85:7d:58:a3:39:df:5d:32:13:03:
                    4a:23:83:5c:52:f4:d8:b9:ed:6d:29:d9:d6:52:51:
                    11:f3:b7:7d:d8:50:d1:67:d3:af:a3:57:ad:16:b7:
                    4e:c3:2c:d8:97:07:02:85:4d:24:8a:29:00:a0:d5:
                    d0:8d:a2:45:ff:73:13:84:78:0b:3d:25:92:70:75:
                    aa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E3:80:3E:65:69:A0:26:D7:FE:93:E7:73:70:D5:FD:1B:21:7B:90
            X509v3 Authority Key Identifier:
                keyid:52:FD:38:C5:D0:DF:36:5C:D8:DE:3B:D1:DD:0E:92:C1:A6:B6:9F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52FD38C5D0DF365CD8DE3BD1DD0E92C1A6B69F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YNxeFV56zSNvKad4zZvHyKbjYXwPK3CFLSdXq1ULgMJ/0/323830343a386538633a3a2f33322d3332203d3e20323733343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:e6:13:3a:9e:bd:e6:0b:a4:ec:14:f4:b7:11:84:80:c8:f6:
         38:c7:7a:9d:d1:1a:80:62:04:ff:27:35:c6:f6:4a:66:63:4f:
         a8:78:9e:d9:c8:a1:1e:cc:e9:b5:34:c6:47:81:64:51:ff:e2:
         ff:49:33:04:91:3d:f9:6b:00:b3:5a:ef:5d:37:99:4b:0a:85:
         40:b5:83:b9:89:53:28:52:2c:a3:d7:66:7d:f6:3e:28:94:b3:
         cd:fb:42:f9:fb:87:6a:24:f3:7f:5a:f0:a5:76:1c:d0:91:32:
         cf:f6:65:63:5c:b3:50:e5:4b:32:df:69:69:a5:8e:91:9d:85:
         3b:0a:c8:81:64:24:e8:22:57:ea:f8:49:f8:2f:d5:ff:a8:31:
         1c:2f:f8:9e:73:30:d7:4b:ea:d9:f5:19:a7:d3:d2:53:1d:16:
         9c:8b:3e:8c:53:60:a4:95:49:ec:d8:ee:06:61:07:df:0f:dc:
         84:ec:93:74:34:1b:0b:cc:95:af:ad:fb:1e:c7:1d:4b:5b:f8:
         b5:e7:da:ef:3a:d5:68:77:ed:14:f6:ac:3c:04:0a:8a:1d:7b:
         59:c2:5c:0e:94:ac:b1:e2:08:b2:af:07:82:d9:1d:d2:7f:44:
         9f:70:86:1a:da:36:79:4a:d1:93:78:30:cc:91:05:4a:65:61:
         1f:92:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:30:35 2025 by rpki-client