Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a313931383a3a2f33322d3438203d3e203532383632.roa
File:                     323830343a313931383a3a2f33322d3438203d3e203532383632.roa (raw, json)
Hash identifier:          BV1LhQnwruG8YBdUlADWAlciBPxw/mAbGXT0hdpcoCQ=
Subject key identifier:   5A:6F:95:0F:72:12:61:78:B9:16:EC:27:AD:E8:1A:2C:69:22:CD:82
Certificate issuer:       /CN=5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5
Certificate serial:       564203C41050E964BEF8059623EEC0065697E9DE
Authority key identifier: 5A:5F:04:F3:CD:1D:E3:A8:53:C1:30:5E:F3:E9:18:5A:AB:1E:51:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a313931383a3a2f33322d3438203d3e203532383632.roa
Signing time:             Fri 16 May 2025 18:52:19 +0000
ROA not before:           Fri 16 May 2025 18:47:19 +0000
ROA not after:            Fri 15 May 2026 18:52:19 +0000
asID:                     52862
IP address blocks:        2804:1918::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.crl
                          rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 05:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:42:03:c4:10:50:e9:64:be:f8:05:96:23:ee:c0:06:56:97:e9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5
        Validity
            Not Before: May 16 18:47:19 2025 GMT
            Not After : May 15 18:52:19 2026 GMT
        Subject: CN=5A6F950F72126178B916EC27ADE81A2C6922CD82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:5f:56:72:fd:1f:90:0e:2a:27:9b:cf:67:
                    9a:97:6f:5f:f0:2f:d4:4b:bf:ca:bc:8a:c8:c5:ca:
                    e3:ba:12:1c:2d:30:ac:de:77:2f:48:70:49:d4:33:
                    ab:fe:eb:58:fb:d9:69:ec:00:d1:a0:86:ad:f6:ec:
                    f6:69:17:1c:e4:f2:2b:87:5f:b2:fa:c6:fb:6f:f0:
                    00:e5:ea:e4:39:97:bb:96:82:0a:07:e0:13:80:e3:
                    3f:54:50:37:32:b7:c0:48:5a:a6:15:4f:6e:43:ad:
                    6c:59:1b:35:ea:d4:8b:0c:9c:d5:94:d9:78:d4:3c:
                    d6:d1:1e:9b:21:2d:5d:b5:e8:d8:88:29:a0:2f:94:
                    ad:e4:fc:d5:83:80:6e:6b:0b:5d:46:ee:9f:87:9f:
                    d3:d6:d2:33:a5:f7:29:b9:28:24:41:32:f8:d6:b6:
                    3c:c4:45:55:35:b8:d2:5b:0a:59:a4:b7:7c:59:6c:
                    70:43:55:35:bb:39:8b:75:e1:52:bc:ef:7e:ec:ef:
                    21:31:4b:f2:af:d8:40:09:2b:c3:9f:da:d0:c6:40:
                    ed:ab:4a:04:ce:a4:35:aa:9d:cd:a6:f3:48:30:af:
                    a1:8c:2d:4e:2a:4a:20:4f:79:7a:6b:0c:34:1e:0b:
                    e1:69:f4:40:e4:36:f3:5c:b9:49:7f:8c:bb:98:22:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6F:95:0F:72:12:61:78:B9:16:EC:27:AD:E8:1A:2C:69:22:CD:82
            X509v3 Authority Key Identifier:
                keyid:5A:5F:04:F3:CD:1D:E3:A8:53:C1:30:5E:F3:E9:18:5A:AB:1E:51:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A5F04F3CD1DE3A853C1305EF3E9185AAB1E51D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81gmUVDET8fuK66of4RZQHSaKb9iVHv3BW4ywuW9AP4b/0/323830343a313931383a3a2f33322d3438203d3e203532383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1918::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:79:5f:4d:00:00:28:43:73:8c:3d:ba:3b:10:12:f5:4c:ea:
         bc:e0:4f:68:f3:a8:ac:fd:06:77:37:46:e9:be:fb:3f:5b:b8:
         ea:6e:e1:0d:50:5d:c7:3a:90:c8:24:74:4e:ae:24:62:9f:6d:
         f7:f1:d7:6e:9b:84:a7:a5:fb:09:02:fc:10:b2:5f:ec:df:8a:
         5f:4d:37:d2:50:3a:5a:c5:26:48:bd:85:e4:97:43:98:17:21:
         72:bc:4f:fb:c4:83:6c:fa:9c:3c:9b:d0:20:ab:3b:f9:19:b8:
         d9:ec:4e:e7:8a:99:1e:d6:65:56:7f:8a:ab:4d:a8:33:45:37:
         0f:82:1f:7c:38:82:b1:8b:da:5d:28:2e:b8:30:25:28:67:a6:
         14:f5:7e:f2:04:0e:68:e1:45:8c:a8:e7:c2:d3:87:80:91:cc:
         34:1e:20:fb:52:e3:e7:65:5e:d1:75:cb:a2:ec:4d:bc:f2:79:
         25:88:53:b6:a2:a7:51:65:63:07:30:6f:4b:03:c5:cd:26:33:
         9c:1c:81:79:f8:47:8d:21:72:c2:4f:6d:0d:2a:a9:0a:c1:07:
         2f:16:80:01:53:22:78:ed:6b:cb:79:3e:e4:d5:e0:f3:d2:d1:
         8d:56:3a:67:78:f7:19:60:ff:6a:35:d5:97:fc:0f:df:54:6b:
         d1:e3:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:00:37 2025 by rpki-client