Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a383030303a3a2f33342d3334203d3e20323635313138.roa
File:                     323830343a326163383a383030303a3a2f33342d3334203d3e20323635313138.roa (raw, json)
Hash identifier:          eFAazHY/OxwIQyAAGJ6Wlf5+FtrGUu9Zjn9KIvLHVGU=
Subject key identifier:   FD:67:2F:84:22:19:1D:D8:7D:8C:F3:AB:03:CB:DD:5F:70:09:81:12
Certificate issuer:       /CN=165675A1928929FF394AAD05FDC9293D274BED5D
Certificate serial:       5AC24E57EF72C33045FC03991CCF179A47B368E0
Authority key identifier: 16:56:75:A1:92:89:29:FF:39:4A:AD:05:FD:C9:29:3D:27:4B:ED:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a383030303a3a2f33342d3334203d3e20323635313138.roa
Signing time:             Wed 09 Apr 2025 14:10:24 +0000
ROA not before:           Wed 09 Apr 2025 14:05:24 +0000
ROA not after:            Wed 08 Apr 2026 14:10:24 +0000
asID:                     265118
IP address blocks:        2804:2ac8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/165675A1928929FF394AAD05FDC9293D274BED5D.crl
                          rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/165675A1928929FF394AAD05FDC9293D274BED5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c2:4e:57:ef:72:c3:30:45:fc:03:99:1c:cf:17:9a:47:b3:68:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165675A1928929FF394AAD05FDC9293D274BED5D
        Validity
            Not Before: Apr  9 14:05:24 2025 GMT
            Not After : Apr  8 14:10:24 2026 GMT
        Subject: CN=FD672F8422191DD87D8CF3AB03CBDD5F70098112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0d:84:b5:05:2b:ad:12:02:8f:d9:1b:f8:ce:
                    08:35:dc:11:b8:06:60:89:d9:87:56:0d:6a:91:31:
                    01:6f:16:7b:90:49:b6:c0:81:03:4d:85:89:73:2f:
                    46:f3:8f:59:ef:ad:26:3d:18:da:3a:04:32:64:5d:
                    2f:99:6a:15:41:5f:7e:f8:12:bf:39:dd:33:29:1f:
                    ba:d6:43:e5:60:5b:86:50:36:66:76:0e:de:b8:fb:
                    8f:5f:3a:f2:8e:58:33:3e:75:44:e5:39:f2:0a:fc:
                    ed:8b:00:8a:27:2a:28:e9:0d:8b:a5:1a:6a:51:2e:
                    b6:5e:88:e5:be:58:30:4f:53:65:1f:bb:4e:d7:4c:
                    2f:d4:92:64:95:90:4a:ea:00:89:8f:a0:0f:b0:04:
                    a5:90:22:61:da:b5:13:01:9e:03:59:66:67:ba:49:
                    69:96:8c:1a:05:08:e8:a1:dd:26:68:3f:cc:22:b4:
                    03:b3:4a:4c:90:e1:f7:72:80:87:00:cf:4c:6c:6e:
                    35:06:69:9e:86:4c:63:10:7f:06:6c:18:73:81:1f:
                    43:c3:ab:49:bb:ca:d3:0c:6a:e1:99:ea:95:ba:86:
                    b7:17:4d:06:a0:e8:2d:37:4f:4b:eb:d1:24:f6:ff:
                    0c:2b:55:0c:fa:75:7a:a8:7b:e8:3b:fb:bc:29:b5:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:67:2F:84:22:19:1D:D8:7D:8C:F3:AB:03:CB:DD:5F:70:09:81:12
            X509v3 Authority Key Identifier:
                keyid:16:56:75:A1:92:89:29:FF:39:4A:AD:05:FD:C9:29:3D:27:4B:ED:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/165675A1928929FF394AAD05FDC9293D274BED5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165675A1928929FF394AAD05FDC9293D274BED5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6juzaoLEoo8hmocz5tJ3JCwtT6Bg92r3gahEaqn89Jc/0/323830343a326163383a383030303a3a2f33342d3334203d3e20323635313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         56:39:39:37:42:e7:80:80:12:dd:1b:c8:11:47:ee:67:10:ec:
         56:a9:9f:14:be:7b:8b:d4:9a:67:b4:de:1c:48:c0:68:70:67:
         86:69:ba:85:da:a1:9c:bc:20:42:d0:a5:e5:86:73:38:55:a0:
         01:cc:31:d6:ee:7b:11:cb:78:7e:a3:2e:ec:12:38:34:d1:f7:
         fa:88:d7:01:bc:33:14:d1:e6:04:a8:a6:40:dc:b6:c5:82:01:
         5a:d4:03:73:0e:1f:6b:cf:b0:a2:c1:31:c7:30:6d:61:26:a2:
         6f:1b:55:01:36:d7:20:66:7a:73:c9:9c:26:e3:71:53:bf:d2:
         c0:48:8d:30:37:b6:64:0e:42:81:25:ea:98:6f:8a:bf:b2:c4:
         99:a6:e6:b4:e9:c2:0b:61:56:13:5a:a5:d6:ef:0c:1c:1f:48:
         8e:0e:be:cd:aa:1a:32:df:03:31:fe:e3:09:b9:5a:23:2b:88:
         4a:4e:2c:07:dc:3e:2a:ff:48:e1:96:01:32:c7:85:b9:32:89:
         d0:67:4f:fc:0b:81:99:34:80:98:1e:6e:2c:f9:c3:32:3a:f7:
         a3:2f:74:db:fd:a5:5c:44:7b:00:9f:24:40:35:be:83:d9:cd:
         a7:43:36:33:9d:0f:1f:ae:09:a8:d8:4a:6c:c1:91:4f:13:d5:
         81:5e:1e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:37:20 2025 by rpki-client