Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/323830343a3532303a3a2f33322d3332203d3e20323632343936.roa
File:                     323830343a3532303a3a2f33322d3332203d3e20323632343936.roa (raw, json)
Hash identifier:          n0NxI/T03ubvSJ9fhliGQQ7T+kbx52z4+V5w0tAr5sQ=
Subject key identifier:   7F:AC:E4:BF:C3:76:96:A0:4D:AC:5F:73:67:71:12:9B:BD:36:C9:F2
Certificate issuer:       /CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Certificate serial:       02E0C5D042837174249E3AB80702AD8B016C5C8C
Authority key identifier: 4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/323830343a3532303a3a2f33322d3332203d3e20323632343936.roa
Signing time:             Thu 06 Mar 2025 03:46:56 +0000
ROA not before:           Thu 06 Mar 2025 03:41:56 +0000
ROA not after:            Thu 05 Mar 2026 03:46:56 +0000
asID:                     262496
IP address blocks:        2804:520::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl
                          rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 13:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e0:c5:d0:42:83:71:74:24:9e:3a:b8:07:02:ad:8b:01:6c:5c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
        Validity
            Not Before: Mar  6 03:41:56 2025 GMT
            Not After : Mar  5 03:46:56 2026 GMT
        Subject: CN=7FACE4BFC37696A04DAC5F736771129BBD36C9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fe:78:6e:13:19:5d:57:03:b3:28:33:01:b6:
                    18:b9:2e:42:a3:0b:1c:2d:d8:a1:2a:f3:70:4e:73:
                    7a:95:68:90:51:e2:a0:c9:b8:c1:60:49:18:7a:13:
                    e7:56:49:e3:19:2d:8e:cf:ea:16:46:9b:a1:1f:0c:
                    19:2b:f7:0c:dd:80:7c:50:01:b3:a9:38:2a:a4:ac:
                    df:02:85:ea:ae:69:d0:0b:b6:ec:12:2a:72:1b:4f:
                    1b:e1:4f:67:4e:2b:e0:d8:5a:bb:c9:43:52:13:42:
                    2e:52:1d:e7:d6:a6:66:e3:fc:9b:97:99:c5:72:6c:
                    24:43:ce:c5:b5:21:9f:e3:a2:cc:69:a3:c4:a5:95:
                    d0:99:0c:32:92:41:70:9c:c1:74:0b:2e:b4:00:4b:
                    49:9d:51:47:df:20:2a:54:5e:14:fd:5a:c3:64:81:
                    21:fa:ec:8b:1c:e0:a1:03:17:e7:c2:1e:f8:14:84:
                    c1:02:e2:90:18:de:f8:f0:4f:6a:2b:5a:ea:46:d8:
                    bf:88:9c:0d:ea:32:e8:f9:bf:10:d8:44:75:be:98:
                    26:eb:3a:11:f2:f5:9f:08:b1:b4:67:c8:6f:cc:72:
                    83:b7:c4:90:9c:6c:96:42:2f:ec:b1:dc:47:3b:e0:
                    ce:41:5e:84:5c:48:81:d7:92:ba:ae:7b:2a:2e:b7:
                    ab:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AC:E4:BF:C3:76:96:A0:4D:AC:5F:73:67:71:12:9B:BD:36:C9:F2
            X509v3 Authority Key Identifier:
                keyid:4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/323830343a3532303a3a2f33322d3332203d3e20323632343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:520::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:a4:5f:12:4e:8f:20:f0:e5:4d:39:37:9f:b6:1c:27:3c:6d:
         88:7d:44:c8:7d:c2:1c:81:34:82:37:e1:0e:b7:b3:a3:c9:9b:
         8c:f7:3b:b3:84:9b:c9:8d:af:5f:fb:12:92:55:63:9f:28:17:
         1f:53:3b:90:58:c2:51:b7:7e:b0:14:7f:4c:14:60:e8:54:29:
         6c:9c:b4:1d:1d:dc:3c:e7:32:2e:60:5a:c8:8d:01:fa:c9:b9:
         0b:9f:12:d4:33:80:34:35:3d:7c:5e:3a:f4:30:b8:3a:f9:14:
         da:56:bc:9c:75:ff:49:a0:28:3f:4b:d7:33:51:36:4b:80:e9:
         ac:e1:d0:1c:bb:87:06:9e:e1:51:02:0e:69:15:64:27:cf:b9:
         dc:25:0f:39:a7:aa:e8:20:ee:3d:8d:90:36:65:1e:d0:ce:e9:
         c1:d3:78:ee:4b:9b:f4:f1:b8:bf:3d:02:09:8d:85:f1:3c:c5:
         48:0e:08:3a:33:b6:8b:3a:1d:b1:7b:c4:74:e1:31:59:7f:09:
         2d:ab:64:48:b6:47:5e:b2:54:33:88:31:40:5f:17:c5:bf:e5:
         52:ca:90:c5:e2:60:ce:c0:24:c5:99:5f:37:04:94:c0:c7:e8:
         a3:05:0c:e5:6a:f2:05:05:de:6c:76:b7:68:4d:ab:c6:43:14:
         ab:a7:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:42:23 2025 by rpki-client