Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/323830343a323364343a3a2f33322d313238203d3e20323634313836.roa
File:                     323830343a323364343a3a2f33322d313238203d3e20323634313836.roa (raw, json)
Hash identifier:          ixHEyxbRuzDYWWQrvW0AFXTvsiKRklUOKp21R93cmBY=
Subject key identifier:   51:4C:6B:19:D3:A3:EA:7A:02:59:6E:54:51:6F:61:0D:EA:37:D6:B4
Certificate issuer:       /CN=1FA026D75FEFA58C9CF89B20F19EF69D27DA584F
Certificate serial:       4D7A752EF84964528DBE3EC5ED06DA3B97188581
Authority key identifier: 1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/323830343a323364343a3a2f33322d313238203d3e20323634313836.roa
Signing time:             Fri 28 Mar 2025 10:14:49 +0000
ROA not before:           Fri 28 Mar 2025 10:09:49 +0000
ROA not after:            Fri 27 Mar 2026 10:14:49 +0000
asID:                     264186
IP address blocks:        2804:23d4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.crl
                          rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 01:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7a:75:2e:f8:49:64:52:8d:be:3e:c5:ed:06:da:3b:97:18:85:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FA026D75FEFA58C9CF89B20F19EF69D27DA584F
        Validity
            Not Before: Mar 28 10:09:49 2025 GMT
            Not After : Mar 27 10:14:49 2026 GMT
        Subject: CN=514C6B19D3A3EA7A02596E54516F610DEA37D6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:85:ed:11:7e:ac:89:67:be:13:84:68:b8:
                    08:41:4d:73:9f:a9:c6:01:60:e1:3e:88:0c:89:c0:
                    da:5d:31:c7:40:2b:00:da:8a:2c:60:22:cd:5d:21:
                    e2:9e:8e:36:bf:69:c5:05:3e:5a:19:ee:e3:2f:93:
                    80:96:0d:24:44:8a:1b:a7:16:8e:f3:67:12:29:3b:
                    29:80:e9:f9:ba:5c:de:b0:86:83:7c:c0:a5:57:fa:
                    e2:25:d1:9c:cf:f7:fc:57:4d:23:9d:0d:e1:fe:9d:
                    50:8a:9c:84:64:55:53:bb:59:3e:74:74:53:20:42:
                    6b:59:44:1f:d2:18:dd:81:54:88:4a:38:1c:ef:fc:
                    27:c2:58:c6:c4:8c:a3:3d:20:42:98:69:73:25:ec:
                    ee:f3:55:93:a7:a2:65:cb:ef:e8:78:5d:7d:ce:bf:
                    db:8e:22:d6:cd:8d:11:30:4e:b9:57:84:b9:84:08:
                    6e:8c:27:72:cf:fc:56:1e:55:f3:4a:31:43:50:f7:
                    81:93:45:f8:39:16:e8:b5:05:fc:44:83:5b:3a:d1:
                    3d:e4:41:9c:02:62:62:9e:65:f7:4f:ad:1a:54:a5:
                    8a:46:ef:e7:f2:d5:6d:e1:5f:47:7a:fc:f6:30:b2:
                    05:46:fb:d0:02:79:7e:a9:e9:43:eb:4e:a0:52:7e:
                    a1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4C:6B:19:D3:A3:EA:7A:02:59:6E:54:51:6F:61:0D:EA:37:D6:B4
            X509v3 Authority Key Identifier:
                keyid:1F:A0:26:D7:5F:EF:A5:8C:9C:F8:9B:20:F1:9E:F6:9D:27:DA:58:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FA026D75FEFA58C9CF89B20F19EF69D27DA584F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fysY3ivjRy5grWBLJygJSpLowTG4bTvGr4JQUovjNuu/0/323830343a323364343a3a2f33322d313238203d3e20323634313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:3e:92:69:28:cf:01:86:ad:ae:90:76:8c:ac:1e:1c:30:4a:
         00:79:56:9b:1f:7c:70:60:09:e9:79:48:48:fd:9d:49:2e:f3:
         e5:40:1f:3f:06:dd:12:db:7b:be:62:da:d8:76:ea:47:1d:cf:
         90:0f:5f:4b:2a:5a:d9:4c:4e:d5:63:20:f9:db:02:ab:18:c6:
         5f:64:7c:0d:e3:b2:a4:79:1a:f0:4f:a6:c1:cc:9d:c9:39:f9:
         f2:ee:fd:1c:88:82:20:d7:ec:e0:92:7f:c8:39:15:17:9d:7e:
         0a:45:75:42:29:ed:8e:29:29:c4:54:5a:07:dc:9b:5b:c2:7d:
         45:29:01:91:26:17:94:43:93:5a:43:89:f0:bc:d6:13:1e:d3:
         9d:ea:09:76:0b:c6:d6:9a:c8:31:62:17:d3:fb:b7:6b:d8:ff:
         bc:7b:1d:8b:a3:8d:6f:ae:3a:30:23:62:84:11:65:68:c2:e1:
         3e:6d:6e:5f:83:e8:23:43:7f:a3:54:b6:90:10:9f:44:8c:a3:
         72:b7:06:d6:7e:80:5d:38:5e:8d:b1:55:5e:70:e3:b9:4c:eb:
         51:7a:74:d1:44:81:51:9c:78:1c:df:d9:de:91:4d:28:77:1e:
         f0:ee:da:ec:d2:81:a7:6a:33:66:5f:ac:db:70:8a:e1:73:d1:
         da:e0:dd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:26:11 2025 by rpki-client