Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33322d3332203d3e20323731353632.roa
File:                     323830343a376437343a3a2f33322d3332203d3e20323731353632.roa (raw, json)
Hash identifier:          ujHCchh4HkVvX3qw8a/nPtLOfcPW0GsSKDirmNhvkk4=
Subject key identifier:   9B:66:58:E0:82:A2:67:C8:81:41:39:E9:C7:03:68:79:DE:89:47:EC
Certificate issuer:       /CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
Certificate serial:       12D481619F59AABA79F88B904D03205B74ED67FF
Authority key identifier: 28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33322d3332203d3e20323731353632.roa
Signing time:             Wed 05 Mar 2025 20:03:41 +0000
ROA not before:           Wed 05 Mar 2025 19:58:41 +0000
ROA not after:            Wed 04 Mar 2026 20:03:41 +0000
asID:                     271562
IP address blocks:        2804:7d74::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl
                          rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:41:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d4:81:61:9f:59:aa:ba:79:f8:8b:90:4d:03:20:5b:74:ed:67:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28FD1B2EA86D54440B540540BCE5870F080BB4A8
        Validity
            Not Before: Mar  5 19:58:41 2025 GMT
            Not After : Mar  4 20:03:41 2026 GMT
        Subject: CN=9B6658E082A267C8814139E9C7036879DE8947EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:b6:a8:ed:df:cf:41:74:ea:32:7b:c1:11:
                    49:8a:e6:b2:d3:9c:59:99:47:c6:c9:4d:57:34:b8:
                    82:86:bc:a5:fa:34:7d:2b:28:f7:30:0a:fe:23:99:
                    b2:d6:f0:2c:56:07:82:0e:9f:60:f2:4a:a0:b1:57:
                    6a:e1:49:70:c9:35:32:9e:26:b5:dc:32:72:07:79:
                    03:84:6c:e7:f2:b3:fc:20:e4:a7:67:56:fd:5b:c5:
                    52:bd:af:43:56:f1:2a:db:3b:8b:f2:ca:d2:fa:c7:
                    52:e7:e5:25:1f:07:a4:2a:8d:2c:8c:58:f6:c6:b4:
                    8d:15:e8:76:aa:72:7c:5d:a3:a3:0d:bc:09:c9:5d:
                    2b:f3:a9:b4:70:64:d4:9b:94:24:8b:4e:7a:9f:27:
                    ac:ee:06:21:8f:f6:b1:e8:03:4d:76:e5:3b:5f:42:
                    1f:f5:d9:23:20:7f:84:e5:33:e2:3e:83:92:0f:0b:
                    bf:f0:1e:b0:b7:82:43:18:5d:ea:b7:b5:18:97:bb:
                    ee:72:9c:f8:9b:63:42:ea:1c:78:0d:fe:d1:e8:0a:
                    8b:4d:a6:5f:6c:2d:c2:2c:92:17:07:c5:6e:27:3d:
                    7c:6f:b6:2a:96:4d:fb:4d:27:ef:b5:e6:6b:7d:ad:
                    45:1d:2c:b5:b4:50:2c:9b:21:dc:04:70:17:b8:47:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:58:E0:82:A2:67:C8:81:41:39:E9:C7:03:68:79:DE:89:47:EC
            X509v3 Authority Key Identifier:
                keyid:28:FD:1B:2E:A8:6D:54:44:0B:54:05:40:BC:E5:87:0F:08:0B:B4:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28FD1B2EA86D54440B540540BCE5870F080BB4A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/1/323830343a376437343a3a2f33322d3332203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d74::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:4c:1a:16:6c:cd:b2:06:47:f5:97:bd:47:08:4f:99:c0:73:
         34:c8:1c:9e:4e:3c:4d:15:af:26:d0:5e:d2:5a:83:88:0d:72:
         73:c1:8c:8f:a6:5d:2e:5c:9d:7b:0d:ec:ad:e9:95:2d:b7:7f:
         29:1e:69:52:13:f6:26:91:15:1c:9b:07:1c:b7:f8:85:0d:d3:
         71:80:0f:5b:cb:19:ca:e7:c6:50:aa:0b:49:88:5f:35:ce:ed:
         cb:c3:21:e4:fe:cc:bd:5c:a3:9b:31:a0:5a:77:10:03:fe:66:
         a6:85:f1:0f:84:b4:a2:ed:f1:55:fb:01:0a:72:9b:04:80:06:
         bf:dd:cc:a0:29:8f:af:af:2d:89:c7:d5:74:30:70:ef:86:b7:
         62:1f:f2:a8:fa:71:4c:fb:28:63:bd:e1:26:24:9a:a1:fd:c7:
         da:10:be:49:0e:a7:c0:00:9b:c9:85:b6:3c:b5:4a:24:f0:6c:
         e5:0d:da:09:f0:89:ae:8d:e4:ed:04:9c:35:60:a9:5c:7a:29:
         5b:14:98:8a:dc:5d:97:c2:1e:1e:f2:7b:ec:ca:3b:aa:48:3e:
         45:5d:38:ad:cf:02:75:71:50:fe:16:d5:b8:65:a5:25:55:3d:
         f2:33:6d:f7:47:5a:62:34:bc:a5:62:19:9e:9b:e7:b0:40:5a:
         72:66:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:11:25 2025 by rpki-client