Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/323830343a356430383a3a2f33322d3430203d3e20323633313031.roa
File:                     323830343a356430383a3a2f33322d3430203d3e20323633313031.roa (raw, json)
Hash identifier:          zpBHgjy64Ec/hwDA+uWykdkc3+gsFZJB3XZe4G8SOnk=
Subject key identifier:   CF:70:75:D5:4F:59:B1:A0:4D:22:84:E9:43:6E:3C:91:76:FC:CC:94
Certificate issuer:       /CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
Certificate serial:       66927BB17343BAC1E86AD6655D099F9861BCAF3A
Authority key identifier: 0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/323830343a356430383a3a2f33322d3430203d3e20323633313031.roa
Signing time:             Thu 06 Mar 2025 02:00:09 +0000
ROA not before:           Thu 06 Mar 2025 01:55:09 +0000
ROA not after:            Thu 05 Mar 2026 02:00:09 +0000
asID:                     263101
IP address blocks:        2804:5d08::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl
                          rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:92:7b:b1:73:43:ba:c1:e8:6a:d6:65:5d:09:9f:98:61:bc:af:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43
        Validity
            Not Before: Mar  6 01:55:09 2025 GMT
            Not After : Mar  5 02:00:09 2026 GMT
        Subject: CN=CF7075D54F59B1A04D2284E9436E3C9176FCCC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ad:be:ef:f7:1c:01:aa:34:fd:2f:bf:97:44:
                    8d:14:51:46:92:97:97:f2:4a:86:64:2e:9e:5f:57:
                    08:ce:eb:1b:d8:4e:b6:6e:37:54:7d:d1:ab:17:0d:
                    51:81:32:5a:66:95:a8:71:cb:cc:70:7b:d2:2d:0b:
                    85:ee:68:04:06:ec:ad:7c:2e:b1:10:f2:3a:5d:63:
                    c5:b7:53:03:f3:a9:d2:c1:e4:cb:14:70:d7:be:63:
                    b8:dc:84:f3:6b:20:37:de:fa:0a:3b:ea:9f:71:bb:
                    e6:65:d9:c8:aa:0e:3d:23:b6:1a:56:97:d4:1d:1d:
                    f1:61:42:c1:93:4d:d8:31:d5:e2:99:0a:58:7e:0c:
                    92:e5:92:30:de:f2:54:aa:b8:23:fa:8e:ff:2d:a4:
                    dc:0d:87:83:46:ab:f9:38:de:73:7a:59:06:88:ad:
                    4d:1b:b8:d1:69:30:61:30:95:70:e5:89:a4:80:9f:
                    99:ed:b3:e7:25:60:92:21:28:3a:38:07:2d:4a:0e:
                    d4:7d:18:21:8b:cf:1e:46:bc:2f:f1:30:c8:f9:e0:
                    6e:e0:ac:b0:58:13:ae:c8:33:bc:54:d5:8d:06:ad:
                    0b:d2:e7:5c:96:b2:65:a8:81:c9:2b:63:eb:b5:8d:
                    0c:15:07:31:ca:89:b2:94:f4:ba:98:33:72:be:8d:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:70:75:D5:4F:59:B1:A0:4D:22:84:E9:43:6E:3C:91:76:FC:CC:94
            X509v3 Authority Key Identifier:
                keyid:0F:29:5E:9A:03:BD:F7:FF:2D:0A:B2:3B:8D:77:ED:EC:F9:B5:9C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F295E9A03BDF7FF2D0AB23B8D77EDECF9B59C43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/1/323830343a356430383a3a2f33322d3430203d3e20323633313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d08::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:62:b9:3a:2b:7e:7f:62:7a:c4:00:b9:a9:42:b4:e2:41:dd:
         68:c1:da:ce:d1:43:ee:d3:be:3e:7e:0a:75:54:8e:21:94:03:
         84:d1:89:ba:43:0a:04:41:38:73:ad:6f:8b:30:d6:e7:e9:37:
         64:22:63:d6:b9:6c:3a:da:f5:a9:3c:f3:f8:2c:6c:7a:66:2b:
         e0:56:d6:be:12:53:1e:64:f5:98:d8:3c:66:b4:4b:78:c9:66:
         74:e8:70:90:61:95:18:9c:22:83:26:b1:01:b0:e3:9b:48:a0:
         b3:9e:b6:a0:6b:ce:45:57:c5:98:07:60:d2:8f:4c:2f:1a:15:
         da:3e:21:82:f4:ae:8a:c2:4d:34:b6:c8:12:43:6a:c8:31:2e:
         ec:f4:5c:7c:35:59:8c:b3:7c:21:c5:97:0b:2e:3f:d0:8e:71:
         cc:03:8a:ef:36:80:d5:73:d3:ac:fe:10:e0:0a:e5:c6:1e:b2:
         15:dc:5c:ae:b9:be:a0:a8:19:cd:1c:7d:43:9b:23:d9:73:da:
         88:cb:3e:ac:2b:47:8e:c7:53:77:d1:78:a4:fb:aa:f1:a7:b8:
         5d:ec:6c:61:ae:ff:48:05:36:71:46:8d:f9:76:eb:f7:fc:74:
         a3:a0:55:c6:c9:66:17:93:33:34:ae:22:09:d6:e0:77:7f:13:
         e9:26:bf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:19:14 2025 by rpki-client