Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/323830343a356564383a3a2f33322d3438203d3e20323639303630.roa
File:                     323830343a356564383a3a2f33322d3438203d3e20323639303630.roa (raw, json)
Hash identifier:          HFns4FaaAXYNTXt/UMi3YM6904uJyBfBr5hlMSKRdwc=
Subject key identifier:   CB:4C:1D:E4:86:99:E9:1A:A2:87:01:B3:72:3F:3D:BF:AA:20:57:66
Certificate issuer:       /CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
Certificate serial:       0217CFADA73D02CEB14A4319B97C6C8297DD35EB
Authority key identifier: 10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/323830343a356564383a3a2f33322d3438203d3e20323639303630.roa
Signing time:             Thu 06 Mar 2025 04:01:04 +0000
ROA not before:           Thu 06 Mar 2025 03:56:04 +0000
ROA not after:            Thu 05 Mar 2026 04:01:04 +0000
asID:                     269060
IP address blocks:        2804:5ed8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl
                          rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:17:cf:ad:a7:3d:02:ce:b1:4a:43:19:b9:7c:6c:82:97:dd:35:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10835D51462A1C641B9A5EDFA93F8475CCEEE4C5
        Validity
            Not Before: Mar  6 03:56:04 2025 GMT
            Not After : Mar  5 04:01:04 2026 GMT
        Subject: CN=CB4C1DE48699E91AA28701B3723F3DBFAA205766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c9:66:12:a7:fe:5d:b7:02:3c:7c:a0:44:e0:
                    2b:b6:86:8c:b0:07:ee:2f:c8:d8:4c:4e:c3:c2:45:
                    71:ae:71:ba:2f:07:27:5b:aa:1c:89:e1:97:d5:bb:
                    d9:52:c2:58:b9:fc:7e:b3:f2:ab:d5:d2:86:5f:47:
                    78:c0:85:a8:e3:f0:d0:7f:3e:17:bb:e1:ff:5f:7f:
                    1c:0b:54:0d:c3:e3:84:59:97:85:42:d6:92:53:71:
                    8e:39:30:66:01:34:7a:52:d8:cf:7f:4b:b6:e5:0c:
                    d6:96:4f:7d:f7:8d:02:ac:fb:4f:90:99:cb:75:b5:
                    59:f6:c0:f7:53:e1:d6:8e:e4:ab:9e:3a:45:17:f8:
                    af:af:fd:59:0f:58:87:70:25:c8:3d:87:f6:0c:23:
                    ce:22:1e:68:9c:4b:3c:4f:f7:bf:52:5e:b8:62:db:
                    df:19:d2:6f:22:86:e7:02:15:3d:e1:98:0f:43:d1:
                    9d:09:a0:01:3e:33:8f:f3:b2:60:03:75:5f:a7:21:
                    c4:20:31:b5:81:8a:ae:93:a1:99:cc:ad:c2:d0:15:
                    4e:08:3c:d3:af:58:8a:db:9c:79:2b:ef:2c:77:2d:
                    d6:aa:23:2b:b5:58:52:40:f9:8a:01:0e:70:e9:bc:
                    e4:3e:ca:c9:03:07:a4:45:da:74:f3:57:19:e6:95:
                    bb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4C:1D:E4:86:99:E9:1A:A2:87:01:B3:72:3F:3D:BF:AA:20:57:66
            X509v3 Authority Key Identifier:
                keyid:10:83:5D:51:46:2A:1C:64:1B:9A:5E:DF:A9:3F:84:75:CC:EE:E4:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10835D51462A1C641B9A5EDFA93F8475CCEEE4C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ad2E5zZj1kXqC55a5hVPNhWnYeAgQKQ3AkfnQCkJUg3/1/323830343a356564383a3a2f33322d3438203d3e20323639303630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:b1:a4:86:52:3d:53:ee:79:b2:dc:29:01:66:38:e3:ac:20:
         22:67:0b:75:b7:b5:dd:fa:5a:14:14:ad:ed:24:2c:e7:f6:62:
         74:76:41:0f:5c:84:ac:00:c2:c2:e2:0e:5f:42:90:25:db:74:
         9c:5e:81:f9:a2:27:0e:68:56:b6:c3:48:21:7b:5f:48:cc:52:
         a1:b1:f4:bb:c3:43:19:aa:7f:53:47:2f:9b:7d:1c:62:1b:9b:
         b1:89:ea:da:a7:72:26:e9:9c:24:08:f7:7c:d9:23:c9:66:53:
         e2:92:52:07:d3:95:b4:2e:28:8b:aa:79:19:5f:54:b5:23:c8:
         72:1b:df:f5:c1:5c:22:db:f6:99:ef:5d:bc:98:2c:42:2c:ed:
         96:63:07:60:cc:ae:9e:08:4f:f5:61:d6:a1:2b:b0:8a:6f:04:
         d7:7a:c7:fa:d5:24:8b:aa:41:d9:79:c1:25:ea:de:fb:09:53:
         a7:36:1b:30:3a:1c:3f:b7:62:ef:5e:20:1b:d1:75:f4:ee:c0:
         78:35:43:3f:b9:41:e5:03:1b:30:a1:8f:51:91:e1:02:f4:d2:
         78:2d:1e:1b:44:c8:34:f3:10:bb:65:92:0d:d0:6d:a1:c0:c9:
         b2:46:7b:13:8b:4b:37:85:12:52:dc:0f:5e:96:a4:0c:eb:b4:
         7f:ba:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:38:04 2025 by rpki-client