Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a323665303a3a2f33322d3438203d3e203238313436.roa
File:                     323830343a323665303a3a2f33322d3438203d3e203238313436.roa (raw, json)
Hash identifier:          I4OM5w9DYgODrHQuXXYq5+RSZHbMHr+q0nif96ql+iQ=
Subject key identifier:   59:83:2E:4D:FC:FA:81:48:99:9C:2F:E0:EF:4D:0A:DB:88:64:8A:74
Certificate issuer:       /CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
Certificate serial:       7F1E390131D5E38C37ED62A789E1518D9E1D6A23
Authority key identifier: 7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a323665303a3a2f33322d3438203d3e203238313436.roa
Signing time:             Mon 12 May 2025 12:54:57 +0000
ROA not before:           Mon 12 May 2025 12:49:57 +0000
ROA not after:            Mon 11 May 2026 12:54:57 +0000
asID:                     28146
IP address blocks:        2804:26e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl
                          rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 10:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1e:39:01:31:d5:e3:8c:37:ed:62:a7:89:e1:51:8d:9e:1d:6a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0
        Validity
            Not Before: May 12 12:49:57 2025 GMT
            Not After : May 11 12:54:57 2026 GMT
        Subject: CN=59832E4DFCFA8148999C2FE0EF4D0ADB88648A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bf:84:c5:a9:74:ef:3b:4a:0a:3e:be:a0:65:
                    0e:94:9d:c7:89:21:2f:82:4d:6d:4a:e4:82:eb:63:
                    77:a8:e3:93:0a:49:e9:b6:3d:d2:44:e1:ce:a6:22:
                    a1:82:bf:a5:b8:81:ff:6e:33:6c:07:80:46:12:c9:
                    8f:a7:ae:d2:46:cf:61:2e:e0:19:eb:a3:b8:e0:42:
                    e3:c6:5a:3d:fe:ee:23:2e:30:01:d8:7c:57:7b:cf:
                    a5:75:f1:1a:01:89:67:dc:80:48:ac:06:08:9a:11:
                    04:08:60:c0:9c:58:40:d5:04:80:46:63:6b:4e:ce:
                    76:0f:65:d5:c6:db:0e:99:56:82:88:c9:9d:d2:65:
                    03:07:2b:a7:40:3c:74:57:4f:99:2d:ab:63:b5:69:
                    f9:db:75:c9:fc:49:4a:50:d9:e2:7b:d8:74:78:a4:
                    47:1a:bb:44:64:74:35:30:30:bb:a4:65:b6:09:af:
                    1b:ac:a7:4e:29:6a:f9:5e:d4:66:22:4a:9d:37:c7:
                    a8:6f:9d:06:d5:58:35:48:ab:4e:fb:a4:46:53:ac:
                    11:c8:d5:84:ce:da:0a:ca:bb:9f:45:ec:57:c7:34:
                    16:ef:20:bb:94:9b:23:be:32:c1:d5:7a:de:6d:6c:
                    88:35:1c:07:ce:e7:96:1a:81:02:c5:d7:f8:15:83:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:83:2E:4D:FC:FA:81:48:99:9C:2F:E0:EF:4D:0A:DB:88:64:8A:74
            X509v3 Authority Key Identifier:
                keyid:7A:B7:C9:AA:EA:1D:29:20:10:2D:05:2E:1A:C4:5E:CA:34:39:B2:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AB7C9AAEA1D2920102D052E1AC45ECA3439B2F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/0/323830343a323665303a3a2f33322d3438203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:0a:45:43:78:62:ea:96:94:fb:8b:d2:5c:2f:3c:58:6f:6a:
         18:4a:a0:2c:0a:20:de:1a:b8:33:3d:c0:7c:9d:3a:d3:e9:b0:
         07:f9:be:a4:29:a6:63:b5:6d:25:4d:78:11:b2:05:3b:d7:ee:
         e2:0c:27:eb:a4:ff:34:8d:d9:62:65:d8:8e:52:ec:fb:e2:8d:
         af:ed:8a:ac:56:71:e9:53:d0:4f:72:4c:21:34:ef:33:9e:51:
         29:04:11:bd:62:44:5e:e7:b6:ff:a1:ca:a7:fb:4d:35:0a:5f:
         5a:7f:b4:6e:26:82:d5:45:9a:6f:e6:70:5d:d7:50:2d:c7:04:
         6c:0f:b6:be:fc:90:e0:23:91:3c:e3:5a:14:e3:ed:5b:ed:f1:
         d5:68:74:f6:03:9e:c2:60:f0:e4:41:5d:67:cc:1f:b2:c0:16:
         ff:21:c2:fd:d3:62:e8:3f:a9:c6:56:29:cf:bc:7e:da:63:0b:
         31:d5:1c:6c:34:4b:5b:9a:24:65:ac:a1:25:e9:02:2b:ab:7b:
         a4:b2:60:9e:8a:23:fa:49:4b:c3:89:3a:63:19:5c:ab:9c:c2:
         7d:0b:af:16:49:33:ac:d8:46:e6:cb:ba:3d:19:5c:8d:cb:3c:
         e1:af:11:fa:fe:9b:61:eb:cc:15:fd:d3:73:4d:2b:a1:d9:e6:
         63:61:26:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:53:09 2025 by rpki-client