Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/323830343a353265343a3a2f33322d3332203d3e20323638353438.roa
File:                     323830343a353265343a3a2f33322d3332203d3e20323638353438.roa (raw, json)
Hash identifier:          o73gCGVM7bko/lKWhm5aWFGk+vh0wHKrOZWXJjZWgSo=
Subject key identifier:   7B:47:81:5D:5E:18:57:8E:F6:C2:A8:45:AD:0A:F8:BF:87:2F:C7:B2
Certificate issuer:       /CN=127D7DD3C0CC297D00206CF235FF13CEF978A5E5
Certificate serial:       2B1058CFB0EF6B5E93BAD0E7ED3C03EA87A5A626
Authority key identifier: 12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/323830343a353265343a3a2f33322d3332203d3e20323638353438.roa
Signing time:             Thu 06 Mar 2025 19:00:01 +0000
ROA not before:           Thu 06 Mar 2025 18:55:01 +0000
ROA not after:            Fri 06 Mar 2026 19:00:01 +0000
asID:                     268548
IP address blocks:        2804:52e4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.crl
                          rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:10:58:cf:b0:ef:6b:5e:93:ba:d0:e7:ed:3c:03:ea:87:a5:a6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127D7DD3C0CC297D00206CF235FF13CEF978A5E5
        Validity
            Not Before: Mar  6 18:55:01 2025 GMT
            Not After : Mar  6 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8a:8b:42:03:1e:61:86:e7:25:d1:75:d3:0f:
                    98:6a:09:49:69:e8:70:e6:39:cf:c9:26:e9:5c:eb:
                    f2:b4:76:6f:89:89:cc:37:95:fb:31:ce:81:5d:b5:
                    4f:93:f0:e3:1c:98:a5:02:0a:e5:ed:87:2a:46:eb:
                    c4:c5:3d:65:d9:fc:7e:69:ec:82:b4:e4:44:f4:cb:
                    a2:aa:d6:49:d7:ca:06:b2:47:8e:64:d3:c0:65:36:
                    6f:9e:f0:70:79:a6:13:23:25:cb:22:5c:77:6f:86:
                    61:07:5b:4b:56:e9:91:8d:09:33:19:4c:ef:59:34:
                    72:05:42:bf:9a:06:71:78:b2:69:1e:48:1c:7f:f5:
                    59:b6:58:9f:7a:d4:66:a7:8f:fe:3b:b7:99:24:4c:
                    d7:88:68:10:69:f1:b6:8f:7a:74:b5:2e:71:09:27:
                    67:4b:06:4e:f6:76:e9:75:3a:bf:16:8a:83:f9:5b:
                    ea:3d:57:21:69:fa:89:c5:41:ab:c6:16:be:59:95:
                    71:5d:c1:54:76:95:01:64:4f:44:23:9a:e6:3e:2a:
                    17:37:3d:0d:72:67:1c:0d:d6:d2:bb:aa:25:71:1a:
                    97:12:5f:78:a2:2b:43:a7:b1:27:ce:7f:63:2b:16:
                    e1:bb:79:bb:47:2a:d7:e9:e0:cb:aa:d5:d0:a7:e6:
                    e1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:47:81:5D:5E:18:57:8E:F6:C2:A8:45:AD:0A:F8:BF:87:2F:C7:B2
            X509v3 Authority Key Identifier:
                keyid:12:7D:7D:D3:C0:CC:29:7D:00:20:6C:F2:35:FF:13:CE:F9:78:A5:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/127D7DD3C0CC297D00206CF235FF13CEF978A5E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7sc4NQpqeKmSrgcCumxYQD3DSFceXgcBnsxaGxHyuR5x/1/323830343a353265343a3a2f33322d3332203d3e20323638353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:c0:5d:92:20:42:09:c7:2a:d4:ac:26:ff:61:bd:5a:9c:cd:
         18:9c:60:51:6a:46:ab:bf:c7:4f:db:12:e4:77:fc:2a:39:57:
         80:01:ae:6c:3f:57:8b:ad:c7:d2:97:d9:ad:a3:0b:ac:c4:11:
         d9:88:ec:d1:16:5f:6f:3b:d5:67:f8:d8:b0:f4:73:86:ff:85:
         1d:49:2a:16:7b:6a:e3:da:dd:47:88:32:35:80:2c:52:63:3a:
         43:c6:eb:21:db:6c:6e:09:62:0a:76:52:8a:a3:9f:e0:cf:b2:
         1f:ca:06:81:32:e3:e6:40:7f:27:10:5e:a9:5d:93:18:37:c6:
         06:fc:38:3e:5b:14:99:80:a7:b4:bd:14:aa:34:5c:4c:24:3a:
         fb:07:a6:71:25:a6:2e:52:b4:6f:b0:3e:39:ea:3b:ce:93:fd:
         65:07:e1:e5:2e:88:ae:21:41:12:57:57:ed:cf:f3:6e:56:2c:
         9a:d0:48:10:72:f7:56:64:73:78:d6:ad:0c:16:f8:c2:45:e2:
         9f:18:3a:07:97:01:38:e5:4c:03:01:78:37:1d:0d:1a:1d:ee:
         a2:9c:6d:d3:02:af:bd:8a:f6:63:57:ee:45:1b:07:0e:74:14:
         76:f5:57:a8:fc:73:35:6e:57:14:f8:18:f4:6f:65:bf:19:4c:
         ba:f5:48:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:31:22 2025 by rpki-client