Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a3a2f33322d313238203d3e20323638343837.roa
File:                     323830343a353166383a3a2f33322d313238203d3e20323638343837.roa (raw, json)
Hash identifier:          VlzslgWbmb+lD/9OpggbCtQJv1ht5GwoujHE1k/6BEw=
Subject key identifier:   F7:0C:85:28:18:52:A3:69:7F:76:82:3C:4A:FD:D2:69:EA:4F:26:49
Certificate issuer:       /CN=77DBFD92C080F067C9DDA54BB379228998308EDB
Certificate serial:       3D210551ED6213196A4DBCB4EB27315698A695A6
Authority key identifier: 77:DB:FD:92:C0:80:F0:67:C9:DD:A5:4B:B3:79:22:89:98:30:8E:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77DBFD92C080F067C9DDA54BB379228998308EDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a3a2f33322d313238203d3e20323638343837.roa
Signing time:             Tue 27 May 2025 18:58:29 +0000
ROA not before:           Tue 27 May 2025 18:53:29 +0000
ROA not after:            Tue 26 May 2026 18:58:29 +0000
asID:                     268487
IP address blocks:        2804:51f8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/77DBFD92C080F067C9DDA54BB379228998308EDB.crl
                          rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/77DBFD92C080F067C9DDA54BB379228998308EDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77DBFD92C080F067C9DDA54BB379228998308EDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 16:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:21:05:51:ed:62:13:19:6a:4d:bc:b4:eb:27:31:56:98:a6:95:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77DBFD92C080F067C9DDA54BB379228998308EDB
        Validity
            Not Before: May 27 18:53:29 2025 GMT
            Not After : May 26 18:58:29 2026 GMT
        Subject: CN=F70C85281852A3697F76823C4AFDD269EA4F2649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cc:1f:1d:73:96:46:09:44:00:91:a2:49:ca:
                    1f:41:47:c0:bf:7c:80:24:f3:56:bb:78:46:67:9d:
                    b5:18:1a:5f:ce:be:78:9f:85:9e:e6:ba:4a:37:57:
                    23:8d:34:2d:1e:a5:4c:6e:fb:11:17:a8:62:89:53:
                    96:83:c9:55:b1:b2:f9:2e:c0:4b:cf:f4:2c:39:6d:
                    56:ae:20:d0:3d:b6:3c:8a:c7:17:da:3a:b2:a3:d2:
                    92:b9:24:45:e2:d4:ea:a0:07:4d:fb:f0:a6:ef:dd:
                    f4:14:2a:2f:02:fb:bc:1b:fa:8e:f4:74:f7:8b:41:
                    72:e6:71:ab:99:4c:0a:2c:28:af:99:c5:61:c2:68:
                    22:b6:aa:04:ca:bd:f3:0e:37:64:ea:1b:84:e0:01:
                    47:d2:a9:00:2c:93:4c:3e:6c:02:77:63:c3:82:cc:
                    bf:68:a8:b4:5e:00:b9:98:1e:b7:10:86:cd:9d:23:
                    a4:37:64:71:bc:b8:df:3c:f3:01:b9:6f:4d:3f:19:
                    d4:8c:cd:3e:e1:35:b8:3e:50:9e:1e:53:b8:5a:db:
                    32:02:6c:96:dd:22:79:0f:92:a9:4d:bc:16:61:8f:
                    dd:0e:ad:65:c5:10:bf:c6:fc:8f:d2:88:2e:1a:6f:
                    f2:82:a0:b5:48:4c:f1:41:d9:2e:34:31:bb:2a:d3:
                    e0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0C:85:28:18:52:A3:69:7F:76:82:3C:4A:FD:D2:69:EA:4F:26:49
            X509v3 Authority Key Identifier:
                keyid:77:DB:FD:92:C0:80:F0:67:C9:DD:A5:4B:B3:79:22:89:98:30:8E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/77DBFD92C080F067C9DDA54BB379228998308EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77DBFD92C080F067C9DDA54BB379228998308EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7n7cg5TuU8H5dnTQi57RT5HACfRgA7JdnYEbGaPYYBWi/0/323830343a353166383a3a2f33322d313238203d3e20323638343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:01:12:4d:3b:79:f8:d7:37:0a:2e:0e:ff:08:c8:a7:de:
         e8:5d:f5:d9:7e:93:38:fd:c9:c2:ec:bc:cb:64:56:2f:ca:1b:
         aa:74:04:3c:3e:35:58:02:e2:cc:af:23:d4:a3:85:50:2c:f9:
         67:b8:82:cb:5a:d4:68:12:52:34:1f:91:c3:e8:f6:6e:0e:78:
         f2:55:69:21:6b:d5:f4:bc:23:c7:69:2f:71:99:c5:fa:74:b1:
         c7:33:1a:9d:fd:95:2f:e5:0c:2a:4d:ed:a5:f5:01:72:8c:2b:
         78:7c:91:59:0a:21:e9:f8:5b:10:f8:30:17:65:97:c4:f7:34:
         87:0f:2e:7a:b1:ff:df:cc:6f:47:dd:61:01:62:1a:d1:4c:71:
         ca:47:76:8e:30:fb:32:e9:67:ee:5a:ad:73:c2:8e:5d:54:e4:
         45:68:4e:8c:f2:00:7f:1a:7b:56:b5:24:1d:c3:f7:41:bc:c0:
         7e:e6:b0:81:2a:06:0d:38:0a:bd:a0:20:bd:9d:29:e2:77:c9:
         5c:3e:0a:e8:ad:78:a7:aa:06:ef:6f:10:14:e6:bc:52:87:7a:
         19:d7:03:71:0d:ca:7e:7d:77:89:d8:bf:a0:8c:66:31:55:fe:
         7c:ee:9b:f3:22:ec:16:2b:7f:35:82:75:f7:9b:9d:39:80:9f:
         9a:62:e3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:38:38 2025 by rpki-client