Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/323830343a356130633a3a2f33322d313238203d3e20323638373432.roa
File:                     323830343a356130633a3a2f33322d313238203d3e20323638373432.roa (raw, json)
Hash identifier:          2uqEIKZgWcT9oiSNMC4Sr1Frv/aTeWyPCb25vk9U1z8=
Subject key identifier:   2B:53:D1:AC:8F:F8:54:28:8D:FC:4E:06:CE:DF:6A:AA:F4:3D:81:42
Certificate issuer:       /CN=F753F4559D7D422450AFB88DE56CC42BC873A465
Certificate serial:       B70D65ADC7D35FA1958212A100B5BE069FAAB3
Authority key identifier: F7:53:F4:55:9D:7D:42:24:50:AF:B8:8D:E5:6C:C4:2B:C8:73:A4:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/323830343a356130633a3a2f33322d313238203d3e20323638373432.roa
Signing time:             Thu 06 Mar 2025 10:22:11 +0000
ROA not before:           Thu 06 Mar 2025 10:17:11 +0000
ROA not after:            Thu 05 Mar 2026 10:22:11 +0000
asID:                     268742
IP address blocks:        2804:5a0c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.crl
                          rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b7:0d:65:ad:c7:d3:5f:a1:95:82:12:a1:00:b5:be:06:9f:aa:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F753F4559D7D422450AFB88DE56CC42BC873A465
        Validity
            Not Before: Mar  6 10:17:11 2025 GMT
            Not After : Mar  5 10:22:11 2026 GMT
        Subject: CN=2B53D1AC8FF854288DFC4E06CEDF6AAAF43D8142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5d:c5:7e:30:e5:b8:73:d0:62:eb:95:c1:6a:
                    f1:89:00:eb:f3:a7:f6:e9:35:7e:a2:7e:4e:61:fb:
                    6f:3a:71:91:76:dc:65:1e:f8:5a:e6:b2:24:a6:28:
                    95:a6:09:46:bb:3c:d4:23:b3:fd:9d:b0:44:d3:b3:
                    ea:56:5f:1c:23:c4:33:2d:a6:5b:3e:30:1f:80:02:
                    8c:db:1a:3f:1b:cb:83:41:e2:f0:49:59:9c:08:e5:
                    a0:71:71:17:34:82:82:e5:d5:74:bd:a4:36:12:64:
                    36:7e:35:1c:d2:1f:9d:83:d6:c4:a6:ae:32:d0:ac:
                    20:18:fd:7a:9a:ca:b8:69:15:80:4a:b1:31:f6:95:
                    d5:40:0b:6c:8e:63:f3:83:67:f4:5c:0d:60:d3:58:
                    6d:98:7e:70:81:66:92:82:19:e8:41:e1:ea:e0:be:
                    f7:fd:24:ec:29:a5:99:06:51:86:d8:77:78:91:9e:
                    20:27:07:38:ae:43:2e:88:3b:29:15:93:94:95:b3:
                    fb:b0:d6:26:0a:50:68:dd:68:4f:ce:07:22:5a:6e:
                    a6:6e:1f:cc:47:a2:4e:4d:0c:b9:f3:83:00:49:24:
                    27:ba:a3:91:5b:92:7e:e8:b9:72:21:75:f3:53:64:
                    4d:46:6f:fa:0d:5e:26:e2:4e:44:57:c7:43:0b:45:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:53:D1:AC:8F:F8:54:28:8D:FC:4E:06:CE:DF:6A:AA:F4:3D:81:42
            X509v3 Authority Key Identifier:
                keyid:F7:53:F4:55:9D:7D:42:24:50:AF:B8:8D:E5:6C:C4:2B:C8:73:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F753F4559D7D422450AFB88DE56CC42BC873A465.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wP5NBX5fcHpHruALGH15p3zPKvvNCSyTxDFJdGd3Dmo/1/323830343a356130633a3a2f33322d313238203d3e20323638373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:78:66:ca:c9:77:a6:7b:d7:c3:c7:ac:e1:d0:43:18:f3:e3:
         8a:67:d5:fd:05:83:19:43:2e:0d:b6:d7:a2:ab:71:31:ae:2d:
         23:35:a9:4f:1b:a9:a8:5f:1a:ba:89:e9:61:5d:6a:5d:4d:7a:
         53:2d:e1:05:74:6f:05:2d:30:4a:f4:1b:35:20:eb:bd:fa:2d:
         e1:b1:a5:4c:5f:9b:3b:42:8a:c7:2c:fc:a1:f3:8f:e0:ad:31:
         42:e7:e9:a8:cc:03:81:af:ff:b5:08:7a:46:f4:2c:c4:0e:b8:
         9e:52:87:5f:ce:64:07:da:d1:b6:48:ac:47:38:f4:29:5c:28:
         05:77:66:23:de:27:87:4f:9f:42:e2:c4:3a:8c:23:e0:6e:30:
         c9:00:c5:f6:74:d2:3d:1c:0a:50:78:32:e0:05:24:02:68:9d:
         85:bf:9b:d2:7a:b9:8f:db:c0:d0:3d:b3:02:d7:22:93:c9:1a:
         ef:3a:31:b6:15:32:6f:47:4c:19:db:01:ae:35:b3:0f:52:ad:
         4d:f8:97:e8:4c:32:61:74:55:fa:b8:93:08:8d:e3:eb:12:d1:
         a7:a4:ee:c8:7e:16:4c:0c:1a:4d:63:c5:d5:06:76:0e:01:3f:
         67:99:58:6e:b6:93:f2:f6:56:36:a0:1c:53:1b:65:8f:9f:7a:
         1e:41:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:37 2025 by rpki-client