Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/323830343a343835633a3a2f33322d3438203d3e20323637313136.roa
File:                     323830343a343835633a3a2f33322d3438203d3e20323637313136.roa (raw, json)
Hash identifier:          2fKD12kPMuexQ+0kW5dUoaFfCHEmKHz8CDo+yMPKjhg=
Subject key identifier:   AF:C0:AB:E8:A1:A1:78:BE:C8:54:5D:A2:91:85:8F:4A:E6:41:E1:A0
Certificate issuer:       /CN=AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF
Certificate serial:       6454CCDC2E2A706E0F8BCCCEDFC3513D7E833D30
Authority key identifier: AA:3E:D7:A7:EA:EF:9B:8C:98:95:3A:B6:D5:6D:72:78:BB:8A:BA:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/323830343a343835633a3a2f33322d3438203d3e20323637313136.roa
Signing time:             Thu 29 May 2025 12:43:19 +0000
ROA not before:           Thu 29 May 2025 12:38:19 +0000
ROA not after:            Thu 28 May 2026 12:43:19 +0000
asID:                     267116
IP address blocks:        2804:485c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.crl
                          rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 16:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:54:cc:dc:2e:2a:70:6e:0f:8b:cc:ce:df:c3:51:3d:7e:83:3d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF
        Validity
            Not Before: May 29 12:38:19 2025 GMT
            Not After : May 28 12:43:19 2026 GMT
        Subject: CN=AFC0ABE8A1A178BEC8545DA291858F4AE641E1A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:40:6c:54:50:6e:98:10:ef:a4:62:bf:3a:
                    f8:64:55:cf:2d:fb:fe:c1:9f:0d:06:42:2e:0f:b1:
                    17:f2:a3:e1:f6:21:9a:03:6d:ec:58:e7:b5:e8:4b:
                    ca:db:e3:f4:a0:ba:81:92:3e:2a:1a:7d:e2:67:0c:
                    31:83:4e:e2:a6:ba:7f:cb:53:48:4b:bf:e0:a9:4f:
                    14:4e:6f:11:d1:68:65:52:f5:db:a0:7e:df:13:6d:
                    43:d9:cd:9d:b7:98:29:1e:a3:47:50:24:6f:ec:7d:
                    dd:cd:83:3c:45:c0:37:f6:92:ef:b6:fc:51:5f:de:
                    53:02:c3:4e:07:6b:7a:0c:08:47:eb:6a:f9:57:99:
                    b5:04:ba:b7:34:ad:97:20:93:d2:fc:a0:1f:c2:13:
                    3f:de:ae:be:53:3d:5c:fc:d9:57:bd:5f:5e:1b:be:
                    2f:78:91:7d:6c:92:cf:84:7f:50:6a:4a:af:11:14:
                    8a:01:20:57:99:58:3f:81:e9:b0:fc:ce:e4:3c:13:
                    b5:21:04:a2:be:ce:d6:a1:bd:19:66:40:7e:9a:28:
                    2d:0f:ad:0c:4a:06:4f:c1:ba:c5:51:0c:da:dc:92:
                    ab:36:5e:88:77:23:7c:89:90:65:e2:0c:39:32:8d:
                    14:62:81:17:8b:dc:00:1c:88:c7:6b:55:51:5d:36:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C0:AB:E8:A1:A1:78:BE:C8:54:5D:A2:91:85:8F:4A:E6:41:E1:A0
            X509v3 Authority Key Identifier:
                keyid:AA:3E:D7:A7:EA:EF:9B:8C:98:95:3A:B6:D5:6D:72:78:BB:8A:BA:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AA3ED7A7EAEF9B8C98953AB6D56D7278BB8ABAEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85EjDetZJ7fX3MrtHytFsfojZoSVX9bvc5CgZ2kd8jQ7/0/323830343a343835633a3a2f33322d3438203d3e20323637313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:485c::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:e5:c5:d9:f9:25:60:e8:84:ac:93:42:8b:eb:90:48:bf:58:
         5e:16:56:50:f2:8b:e6:e7:6a:cc:b8:ae:54:ba:f8:f5:0e:7b:
         cc:33:f3:04:0b:df:90:cc:cf:49:91:51:b7:8d:b2:56:f3:9b:
         c2:a6:cb:82:ee:00:68:61:0d:65:b3:ca:dd:dd:31:91:7c:5b:
         2e:3d:e8:76:70:f8:29:9e:d1:f5:e1:6e:e0:04:bb:cb:44:cb:
         d0:ed:e8:ee:a1:e7:33:6c:3c:8e:2d:13:f0:60:df:be:3d:99:
         f2:db:12:e3:68:de:90:12:a6:a0:6a:05:97:c8:1c:d3:ce:e2:
         92:bc:d0:e3:29:84:15:f6:71:ab:7e:84:8e:fe:32:d4:3d:4a:
         da:5f:0e:17:a0:63:b5:f6:89:fe:27:3b:f1:30:c5:52:67:10:
         7c:cf:02:2d:43:f3:2c:23:58:1a:0d:09:4e:5d:e0:a7:0c:e3:
         5a:43:a7:11:a9:cb:12:0f:1f:51:79:63:ca:10:57:db:ab:03:
         8f:d6:3f:1f:61:8b:d9:89:aa:1e:ac:9e:45:a1:42:33:39:26:
         1b:f0:85:e8:42:81:d5:20:f8:56:a6:54:fa:c4:9d:99:de:6b:
         24:a0:f1:4b:98:57:ec:d8:1c:1a:bd:ae:2a:e3:7b:22:5a:c6:
         58:36:da:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:25:42 2025 by rpki-client