Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/323830343a376333383a3a2f33322d313238203d3e20323731343832.roa
File:                     323830343a376333383a3a2f33322d313238203d3e20323731343832.roa (raw, json)
Hash identifier:          Ds2siTJJUWqn7vsYVFyU1cYUoCwJcDiNJjP8RVSYx/Q=
Subject key identifier:   D5:E2:CF:66:7E:05:6B:AD:02:6C:32:09:F0:9A:67:F9:40:E6:90:C9
Certificate issuer:       /CN=D206D2808B17CDECE745E043859E7B638B427132
Certificate serial:       54F847F19E9EC4C26100E803F3EFF07F96C08FE7
Authority key identifier: D2:06:D2:80:8B:17:CD:EC:E7:45:E0:43:85:9E:7B:63:8B:42:71:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D206D2808B17CDECE745E043859E7B638B427132.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/323830343a376333383a3a2f33322d313238203d3e20323731343832.roa
Signing time:             Fri 14 Mar 2025 18:53:31 +0000
ROA not before:           Fri 14 Mar 2025 18:48:31 +0000
ROA not after:            Fri 13 Mar 2026 18:53:31 +0000
asID:                     271482
IP address blocks:        2804:7c38::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/D206D2808B17CDECE745E043859E7B638B427132.crl
                          rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/D206D2808B17CDECE745E043859E7B638B427132.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D206D2808B17CDECE745E043859E7B638B427132.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 21:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f8:47:f1:9e:9e:c4:c2:61:00:e8:03:f3:ef:f0:7f:96:c0:8f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D206D2808B17CDECE745E043859E7B638B427132
        Validity
            Not Before: Mar 14 18:48:31 2025 GMT
            Not After : Mar 13 18:53:31 2026 GMT
        Subject: CN=D5E2CF667E056BAD026C3209F09A67F940E690C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:86:e3:04:61:c9:f7:4d:1b:16:d6:39:82:
                    de:6f:6b:44:28:9c:3c:d7:b1:56:02:7b:fb:e2:c3:
                    ce:19:07:56:76:68:cb:53:c3:12:ad:1b:e4:ff:0d:
                    03:67:6c:b1:13:54:26:b9:e5:c3:db:c5:1b:55:0b:
                    fc:ca:1a:c6:62:94:9c:0f:e7:69:22:bb:c3:c9:81:
                    5e:63:6d:ec:2d:9b:c7:7d:53:ca:d8:ef:bc:10:dd:
                    02:b0:26:00:9d:28:c0:96:1d:e2:0a:d8:70:d5:07:
                    b5:97:17:53:e0:56:94:62:21:84:e2:d5:60:a9:a2:
                    3f:06:c3:6e:75:7f:fa:b1:d3:60:23:af:82:7a:1d:
                    4b:4b:7d:53:87:04:3e:7a:d7:8d:12:cf:fa:09:4b:
                    7e:b8:04:2b:00:32:6f:01:3b:ff:70:6d:1a:13:86:
                    8b:57:1a:d7:07:26:29:ef:e5:fc:e4:46:ed:63:de:
                    05:25:1d:3d:b8:47:06:0c:50:52:6f:78:44:0d:13:
                    86:9d:75:2a:fe:3a:a8:60:3c:8b:20:23:5f:94:72:
                    ec:08:ee:c9:d6:23:b4:fd:c0:57:e4:57:c5:79:74:
                    7d:52:f5:65:8b:3c:1a:54:f4:fa:c4:d0:92:c2:07:
                    59:8f:e1:1f:e9:5f:6e:d3:69:50:c5:65:10:51:52:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E2:CF:66:7E:05:6B:AD:02:6C:32:09:F0:9A:67:F9:40:E6:90:C9
            X509v3 Authority Key Identifier:
                keyid:D2:06:D2:80:8B:17:CD:EC:E7:45:E0:43:85:9E:7B:63:8B:42:71:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/D206D2808B17CDECE745E043859E7B638B427132.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D206D2808B17CDECE745E043859E7B638B427132.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/323830343a376333383a3a2f33322d313238203d3e20323731343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:d8:35:49:61:5c:c0:be:b0:8c:ff:25:b5:af:c0:91:08:2d:
         42:ea:22:a5:0d:6b:ba:62:d3:ec:e0:7b:07:d7:61:d3:47:a7:
         2c:34:e3:63:d6:5e:1d:f7:87:09:aa:46:ef:55:16:74:49:fd:
         f5:e5:a7:5e:d5:b5:44:d9:c2:e1:15:79:02:12:33:29:a6:dd:
         75:85:ae:83:15:1f:12:bb:7f:f9:45:2b:cd:6f:0e:2e:b4:c9:
         73:a3:31:5d:69:5e:26:4e:5e:24:2f:18:39:cb:e7:8f:43:7f:
         67:db:ab:f1:73:66:f6:0f:89:21:b6:b9:51:07:7f:9f:c8:10:
         78:a2:5d:5b:b2:3f:ed:ff:b3:5c:81:d2:4c:0c:d3:83:78:0a:
         e5:68:c6:ab:a2:6c:8e:2d:4e:33:cc:60:45:e3:e8:22:49:33:
         c1:d4:b6:e4:5a:cd:12:50:cc:79:1f:47:b6:54:34:dd:d4:16:
         c6:b0:9c:21:0c:6e:d5:98:24:85:14:0f:df:34:ec:b5:38:91:
         e0:74:63:02:ff:c0:b2:26:42:56:88:d6:98:77:8e:25:5a:fc:
         59:fa:a1:d9:fb:30:05:89:c5:5a:06:73:85:2e:f3:45:49:3c:
         2a:7a:85:69:df:68:18:0b:0b:67:f4:45:17:d0:a4:1e:38:c3:
         07:b3:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:35:27 2025 by rpki-client