Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/323830343a383865303a3a2f33322d3438203d3e203238333236.roa
File:                     323830343a383865303a3a2f33322d3438203d3e203238333236.roa (raw, json)
Hash identifier:          0+SKyRuS8vJuXq7MWE/epWSyK2AeWtwCEDU99XSAo6E=
Subject key identifier:   9D:1F:21:00:FF:2D:EE:90:C4:BC:58:1F:EC:CF:E3:19:FD:8B:03:A7
Certificate issuer:       /CN=425279A675F326D0577BF774BBB20A14508381AD
Certificate serial:       64973419411E6D0069CF2FACB26A083597267EB5
Authority key identifier: 42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/323830343a383865303a3a2f33322d3438203d3e203238333236.roa
Signing time:             Thu 06 Mar 2025 14:52:23 +0000
ROA not before:           Thu 06 Mar 2025 14:47:23 +0000
ROA not after:            Thu 05 Mar 2026 14:52:23 +0000
asID:                     28326
IP address blocks:        2804:88e0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl
                          rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 21:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:97:34:19:41:1e:6d:00:69:cf:2f:ac:b2:6a:08:35:97:26:7e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425279A675F326D0577BF774BBB20A14508381AD
        Validity
            Not Before: Mar  6 14:47:23 2025 GMT
            Not After : Mar  5 14:52:23 2026 GMT
        Subject: CN=9D1F2100FF2DEE90C4BC581FECCFE319FD8B03A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:6b:80:3d:96:d1:f9:8e:96:4c:b4:2d:b3:
                    61:84:3d:ac:05:ce:54:0c:e6:c0:5e:a0:7c:ba:77:
                    24:51:b8:7c:3f:bb:92:0f:38:10:98:1a:59:40:93:
                    4f:f5:09:85:27:29:56:48:4a:e9:ab:7a:27:0d:41:
                    ac:09:8b:e5:ee:87:17:32:af:af:fa:70:50:f9:d5:
                    f1:44:fc:eb:1b:bf:12:be:aa:6e:1e:48:34:ce:2a:
                    75:3e:c4:bb:d5:87:76:30:de:1e:fc:30:06:42:be:
                    c3:d3:23:ae:93:32:fd:bc:e7:df:1b:77:42:23:b9:
                    b0:b7:b9:ca:29:a1:5c:e7:79:4d:c8:4e:45:39:47:
                    2b:5e:8e:84:1c:6a:55:cd:8d:04:8a:0b:7e:9a:66:
                    e8:d6:fc:64:41:e1:55:4d:eb:11:38:be:2b:b7:79:
                    be:a9:6c:4e:3c:e3:9a:a0:d6:0e:c9:a7:b1:f6:08:
                    3e:dc:16:5b:c2:85:82:aa:74:fc:bd:0e:d9:ed:7b:
                    49:40:a1:07:68:84:5c:9d:1c:d1:d7:9d:6b:ce:a0:
                    1e:6a:cb:73:38:75:24:08:ac:4a:6d:55:93:82:80:
                    e0:43:25:09:0e:3d:b0:92:c4:9d:7f:4d:49:1e:db:
                    99:ec:7c:57:52:8d:31:7e:90:d3:a9:3a:3a:fa:fc:
                    c8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1F:21:00:FF:2D:EE:90:C4:BC:58:1F:EC:CF:E3:19:FD:8B:03:A7
            X509v3 Authority Key Identifier:
                keyid:42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/323830343a383865303a3a2f33322d3438203d3e203238333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:62:bf:f9:44:49:5b:94:59:ba:37:b3:89:83:f3:33:db:b8:
         0d:df:b0:92:38:33:d4:5a:a9:db:ea:da:45:33:f4:bd:93:51:
         07:1b:1d:c1:f7:4e:0d:02:98:26:19:3b:7c:ca:59:70:60:72:
         38:a8:91:15:ef:50:73:e0:1a:20:d5:13:de:6e:30:7f:e4:31:
         83:a8:10:dc:af:cf:eb:5d:9a:bb:78:ce:7b:e9:91:08:5a:09:
         8e:39:4d:d1:e5:e4:34:ae:fd:14:5a:9b:d0:98:ff:db:0d:65:
         b4:0f:cf:f4:aa:bf:36:d6:13:c8:c0:7c:4d:49:49:70:8a:84:
         51:16:66:0d:fa:5e:2c:55:d2:e7:98:bf:31:32:34:3c:98:6e:
         a8:76:5f:62:62:63:3c:fa:ee:0b:8b:50:e0:37:83:c2:d4:97:
         2b:79:89:f4:5b:d2:19:f2:c7:0a:66:ee:9d:a9:eb:7f:42:0d:
         68:19:e0:04:c1:98:ec:71:da:f3:ba:a9:f1:42:2a:da:71:cf:
         3c:8c:84:26:da:46:fa:70:10:56:28:fd:67:2c:fd:fa:f4:65:
         f2:e5:b3:97:30:cd:ba:af:26:b0:72:36:64:5d:e9:c7:1e:c1:
         63:e1:47:1d:8a:d8:d3:2e:47:d2:32:38:a0:3e:c7:76:9a:4d:
         cd:79:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:35:26 2025 by rpki-client