Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393830303a3a2f34302d3430203d3e20323632353033.roa
File:                     323830343a326265303a393830303a3a2f34302d3430203d3e20323632353033.roa (raw, json)
Hash identifier:          ir5AMq8tICiwSXLfUJc7GjE/JFsm7kanQ5hrnJ+hjuw=
Subject key identifier:   28:36:2F:23:7A:7C:20:A4:20:E9:6E:6D:01:66:ED:02:84:35:19:41
Certificate issuer:       /CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Certificate serial:       40026F1B9D6979D0CB3BB9100CB491A9E8387944
Authority key identifier: 91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393830303a3a2f34302d3430203d3e20323632353033.roa
Signing time:             Tue 01 Apr 2025 15:16:02 +0000
ROA not before:           Tue 01 Apr 2025 15:11:02 +0000
ROA not after:            Tue 31 Mar 2026 15:16:02 +0000
asID:                     262503
IP address blocks:        2804:2be0:9800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 10:18:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:02:6f:1b:9d:69:79:d0:cb:3b:b9:10:0c:b4:91:a9:e8:38:79:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
        Validity
            Not Before: Apr  1 15:11:02 2025 GMT
            Not After : Mar 31 15:16:02 2026 GMT
        Subject: CN=28362F237A7C20A420E96E6D0166ED0284351941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d8:d5:42:83:d1:e5:67:41:9c:f8:6b:1c:31:
                    d7:4e:4e:0e:72:be:21:98:bf:73:d5:29:21:50:1f:
                    c2:44:04:15:d3:85:4c:66:a3:80:19:83:53:15:7f:
                    e7:40:e6:74:ff:e8:4c:4e:11:8b:78:85:ed:b7:40:
                    e2:9d:c7:ac:5a:68:3b:e5:40:14:14:c5:17:ce:d5:
                    11:9d:43:54:25:13:db:ea:ba:03:2d:a7:8d:18:ae:
                    8c:28:24:08:5b:38:dd:1f:9c:08:31:f9:14:ed:02:
                    4c:df:76:aa:10:f2:19:66:53:fd:b1:7a:cd:f8:30:
                    61:d4:8c:28:40:da:83:97:ec:45:0c:0e:ac:a8:78:
                    21:a3:a3:bd:96:ba:33:89:5a:f3:74:ef:dd:b9:2e:
                    2f:f1:e0:fd:2c:da:60:bb:ad:ff:74:d1:29:70:2d:
                    8b:27:87:57:39:f0:81:86:62:44:21:26:13:72:9d:
                    4a:7c:c8:a2:12:89:a0:fa:a8:75:9c:ba:33:25:f7:
                    9a:b4:8e:6a:13:9e:e0:46:c7:4d:6c:e8:93:af:d7:
                    6c:ca:bf:a5:98:96:bd:ff:4e:54:11:d9:3d:ad:11:
                    0f:a0:77:f4:30:21:74:23:72:4e:af:17:53:31:8f:
                    63:2e:a4:e8:7e:23:95:b7:8b:72:15:d1:45:1c:33:
                    b9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:36:2F:23:7A:7C:20:A4:20:E9:6E:6D:01:66:ED:02:84:35:19:41
            X509v3 Authority Key Identifier:
                keyid:91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393830303a3a2f34302d3430203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2be0:9800::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:18:8b:a0:be:a2:66:87:58:e0:d4:78:1d:b8:95:59:ed:1c:
         33:16:3a:51:22:82:fc:c6:da:7e:0a:e3:d4:6a:de:03:86:72:
         ab:86:4c:90:ee:7e:ad:5d:46:a5:ff:34:a0:43:7f:ef:d0:3d:
         c2:3d:a6:e7:31:d8:f6:18:99:ad:92:40:f1:1c:63:c0:ef:88:
         a6:6e:1a:2a:95:5d:84:24:ee:6e:6e:e2:48:7b:4b:68:39:56:
         87:d3:15:aa:98:8a:a6:fc:d1:4a:c3:48:ac:e3:5d:e0:1b:5f:
         28:98:b7:04:fe:69:8a:84:48:5f:4c:04:2e:cc:4a:40:8a:19:
         c4:ba:c0:4e:3b:ab:9d:7b:0d:6b:4c:35:4a:8b:46:6b:80:98:
         82:83:62:56:f0:ca:5d:33:83:5c:72:3c:f0:af:50:d4:65:54:
         6b:ba:48:2b:01:52:a0:38:ea:93:d9:35:0e:63:8a:99:f3:9a:
         3b:8d:a2:a0:38:ac:96:a6:13:04:e4:2a:db:17:14:db:0e:b1:
         46:b3:69:90:8e:bf:a3:48:5f:58:9d:96:a8:a2:0a:8c:7b:e7:
         87:67:25:0f:da:b9:6d:12:ec:44:b3:a7:4e:cf:fc:1e:c2:38:
         9c:cc:7a:2d:12:b0:25:cc:29:fb:2b:df:95:86:19:ba:da:b0:
         d0:04:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:02:50 2025 by rpki-client