Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/323830343a353735383a3a2f33322d313238203d3e20323638363035.roa
File:                     323830343a353735383a3a2f33322d313238203d3e20323638363035.roa (raw, json)
Hash identifier:          TLTv+7HH3PmgKN7sNjuwDmiqqS2PDuHMpna5jgvgmzI=
Subject key identifier:   1B:B0:C0:FF:7C:5D:EE:77:3E:B9:20:0C:79:46:0F:B6:82:83:80:20
Certificate issuer:       /CN=96FCF9B0D62C9BDBC742130C738D203D85019EB7
Certificate serial:       3390E2AE8A74E1ED62904293AAAF7230FA7E3A6A
Authority key identifier: 96:FC:F9:B0:D6:2C:9B:DB:C7:42:13:0C:73:8D:20:3D:85:01:9E:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FCF9B0D62C9BDBC742130C738D203D85019EB7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/323830343a353735383a3a2f33322d313238203d3e20323638363035.roa
Signing time:             Wed 30 Apr 2025 19:31:54 +0000
ROA not before:           Wed 30 Apr 2025 19:26:54 +0000
ROA not after:            Wed 29 Apr 2026 19:31:54 +0000
asID:                     268605
IP address blocks:        2804:5758::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/96FCF9B0D62C9BDBC742130C738D203D85019EB7.crl
                          rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/96FCF9B0D62C9BDBC742130C738D203D85019EB7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FCF9B0D62C9BDBC742130C738D203D85019EB7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 08:13:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:90:e2:ae:8a:74:e1:ed:62:90:42:93:aa:af:72:30:fa:7e:3a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96FCF9B0D62C9BDBC742130C738D203D85019EB7
        Validity
            Not Before: Apr 30 19:26:54 2025 GMT
            Not After : Apr 29 19:31:54 2026 GMT
        Subject: CN=1BB0C0FF7C5DEE773EB9200C79460FB682838020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:78:22:a7:9b:6d:f0:f6:ec:a7:af:56:ff:a7:
                    00:49:5a:5c:45:06:b5:c5:cc:9f:11:0d:a4:78:ff:
                    5f:6c:e0:de:83:3e:44:73:76:ad:20:76:4e:67:ea:
                    bc:1f:fe:79:c6:0e:82:e7:3a:69:b0:b9:e5:ca:d4:
                    5a:91:29:1b:df:98:cc:63:09:5e:e2:bf:1f:4c:1a:
                    bf:57:04:3a:39:d3:97:6f:a5:99:83:18:c5:e7:ff:
                    0b:a2:01:fc:5f:aa:9a:b3:8f:fd:a7:98:f5:d9:68:
                    b6:e1:a2:0e:06:b1:c2:b1:72:28:ea:1e:b2:97:5a:
                    98:c7:e0:6a:b1:7c:8d:8d:7a:7a:8b:65:d1:e9:8a:
                    91:01:0e:f8:e2:47:67:de:12:9d:fc:28:ba:43:b1:
                    47:71:b1:18:25:71:d0:e5:bb:6b:54:40:ca:6a:b2:
                    f1:8f:7d:15:d6:1f:f1:dd:2c:31:2e:fb:18:6b:55:
                    02:eb:e8:47:ed:45:f4:07:fa:7b:ec:cc:42:c6:fb:
                    c9:ec:0a:1e:96:0d:21:dd:4c:b9:1e:3d:85:b1:3f:
                    fc:df:11:07:dd:2e:a3:9a:10:1d:3f:c8:fa:57:d0:
                    fa:4f:12:96:b0:49:e9:6a:5f:94:0f:66:f7:4f:cc:
                    88:78:1b:79:f7:ea:dd:fe:56:9a:94:d6:c0:f3:36:
                    f7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B0:C0:FF:7C:5D:EE:77:3E:B9:20:0C:79:46:0F:B6:82:83:80:20
            X509v3 Authority Key Identifier:
                keyid:96:FC:F9:B0:D6:2C:9B:DB:C7:42:13:0C:73:8D:20:3D:85:01:9E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/96FCF9B0D62C9BDBC742130C738D203D85019EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96FCF9B0D62C9BDBC742130C738D203D85019EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGGDj79aqpMSe1Q3urJYJfuRxSMZhKouXiMBQPZBkMQN/0/323830343a353735383a3a2f33322d313238203d3e20323638363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5758::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:82:cb:d4:5f:2d:f3:d8:83:28:e2:bc:88:1c:38:d2:23:52:
         00:90:04:0d:80:3b:fa:4d:b4:3f:3a:30:79:21:10:f5:31:ea:
         a4:0c:47:ca:0e:6b:25:e1:29:c3:bc:83:2d:06:49:4c:e9:ba:
         a0:dc:70:22:d8:fd:a7:01:71:3d:cf:d1:e5:8b:7d:72:31:d7:
         20:cf:57:f1:ae:d4:f1:db:57:42:1e:b7:78:e3:16:4c:25:e1:
         90:2c:ab:fc:86:7c:0b:46:51:16:4a:b4:26:47:44:5d:79:1c:
         ff:e3:81:ac:67:00:cc:5c:88:3f:3b:e2:5c:e4:17:aa:30:09:
         41:6d:80:7d:c1:c5:89:81:0a:d0:d9:ab:a7:7e:67:64:e2:5b:
         80:f4:47:ae:33:3c:c7:09:c2:26:97:38:e1:a6:54:1a:b7:50:
         fd:98:6a:f3:71:41:20:f2:9a:e7:00:b4:86:76:37:81:a7:7c:
         a2:40:96:86:fe:35:43:8e:7a:dd:e1:d5:2d:5c:32:4c:71:60:
         ab:b1:52:0a:d7:29:81:7c:dc:c2:1e:a9:59:c6:ab:34:f9:0f:
         95:05:95:fe:16:6f:fe:59:8d:29:b9:f1:14:ab:0a:47:0c:61:
         e1:84:d7:e2:c4:18:7e:f3:45:fc:f0:4d:db:eb:98:0f:fc:6d:
         9d:ac:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:34:56 2025 by rpki-client