Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a316264383a3a2f33322d3438203d3e203238323234.roa
File:                     323830343a316264383a3a2f33322d3438203d3e203238323234.roa (raw, json)
Hash identifier:          zww51PnuOVqUlSlicRT9UzgT0BiWzsaq5fSktM3ng8M=
Subject key identifier:   B0:63:2D:70:8C:2D:CF:C2:F1:FC:8D:1D:84:B2:05:5E:EB:19:1C:8A
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       2C81E942D0B6DEC26ACA35FC6F655B97F39A5AD8
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a316264383a3a2f33322d3438203d3e203238323234.roa
Signing time:             Mon 12 May 2025 13:00:51 +0000
ROA not before:           Mon 12 May 2025 12:55:51 +0000
ROA not after:            Mon 11 May 2026 13:00:51 +0000
asID:                     28224
IP address blocks:        2804:1bd8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 03:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:81:e9:42:d0:b6:de:c2:6a:ca:35:fc:6f:65:5b:97:f3:9a:5a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:55:51 2025 GMT
            Not After : May 11 13:00:51 2026 GMT
        Subject: CN=B0632D708C2DCFC2F1FC8D1D84B2055EEB191C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:4a:e1:0a:2a:e7:52:59:be:6f:f4:b2:8a:
                    2c:d5:be:2a:ad:bf:cf:13:17:84:b0:2f:32:e9:59:
                    cd:ef:4a:c2:2d:61:41:a3:ed:67:88:ec:2e:ad:fd:
                    03:ef:b2:c2:91:4f:c5:6d:c7:3e:4b:f8:7a:63:c4:
                    81:ff:39:cd:04:9f:65:e8:4b:5d:3f:4f:3b:c7:7d:
                    a3:5a:f5:9a:21:47:36:92:4b:ed:c9:09:fa:9e:21:
                    35:7c:39:e9:87:9c:c3:cf:3a:7a:cb:e4:97:f4:7d:
                    f7:09:bb:b2:2d:a7:1f:bc:4b:97:64:5d:d4:4e:5a:
                    f4:02:7d:4f:36:e7:7f:fb:d3:b5:cb:2a:6d:95:09:
                    99:94:6a:f8:aa:54:05:97:5d:81:fc:e6:f5:70:07:
                    c2:1c:a7:df:ac:6b:0f:39:13:d4:48:95:32:44:41:
                    4c:ea:65:c3:9d:a4:92:75:9c:99:b5:e4:e1:98:ba:
                    c6:9e:5a:33:a7:7e:3f:15:c8:2c:fe:41:46:6c:1b:
                    bd:0e:19:20:12:43:c3:c4:ad:84:a1:dc:ac:ba:1e:
                    56:58:1a:23:b6:82:67:00:94:a8:60:18:4e:95:ff:
                    b5:af:49:8b:7d:e8:20:2e:b4:b2:a2:40:0c:52:5b:
                    56:33:4a:d7:e8:8b:30:7f:95:a2:70:65:8d:1f:f4:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:63:2D:70:8C:2D:CF:C2:F1:FC:8D:1D:84:B2:05:5E:EB:19:1C:8A
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a316264383a3a2f33322d3438203d3e203238323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1bd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:4f:2e:3c:bf:7a:90:ce:48:e4:43:45:ff:00:db:85:ae:78:
         b8:33:ed:db:d4:dd:19:e9:fc:04:86:4f:1f:2c:02:a9:d2:b9:
         26:83:01:54:64:80:72:06:9a:d8:51:96:4b:49:61:3b:6d:07:
         25:f6:9b:39:df:f7:9a:73:77:af:48:3b:20:f9:34:14:dd:4b:
         e6:b1:eb:38:9d:d4:77:59:af:55:86:10:28:a3:05:c9:82:a0:
         74:2f:c0:50:f9:fa:21:65:f9:20:bb:2a:01:21:d8:22:d9:fb:
         ba:b3:3e:26:fd:f0:af:d9:dc:42:aa:e8:b2:ce:ba:32:b6:45:
         65:6b:e4:b9:39:f1:19:d5:84:7a:19:fe:8d:69:f4:3f:51:ae:
         96:98:e1:4f:e4:fc:05:2d:06:a6:70:85:dd:6d:a6:bf:e2:2d:
         12:cf:a0:7c:e3:1b:ae:ac:40:9e:13:6f:79:5b:96:72:93:3f:
         42:df:3b:85:a5:49:bc:18:a8:a9:fa:d2:63:4c:a6:a7:26:db:
         0b:2c:0b:47:cc:cc:ee:e2:fb:02:9f:49:73:0e:3b:e0:20:ab:
         f4:91:7c:de:58:c8:b6:3c:8d:36:96:5b:69:83:28:43:26:62:
         4c:aa:35:79:7e:45:8f:a2:ee:9e:e5:1f:01:60:d3:1f:68:4c:
         00:65:8c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:56 2025 by rpki-client