Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa
File:                     323830343a323939343a3a2f33322d313238203d3e20323634303233.roa (raw, json)
Hash identifier:          wkKeQg75M54rY2DbYq8xjRJdAT3SV34dOU2eO4KFPDs=
Subject key identifier:   86:55:39:EE:30:D2:3E:70:2E:7D:80:E4:3E:09:15:DB:90:2C:04:8F
Certificate issuer:       /CN=28542F5ACD485BC6F699A30F45B064F48B14B25D
Certificate serial:       4F879D36DB0B4210F33464CAB8A8CF0C1DC94ED1
Authority key identifier: 28:54:2F:5A:CD:48:5B:C6:F6:99:A3:0F:45:B0:64:F4:8B:14:B2:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28542F5ACD485BC6F699A30F45B064F48B14B25D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa
Signing time:             Mon 12 May 2025 15:04:43 +0000
ROA not before:           Mon 12 May 2025 14:59:43 +0000
ROA not after:            Mon 11 May 2026 15:04:43 +0000
asID:                     264023
IP address blocks:        2804:2994::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.crl
                          rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28542F5ACD485BC6F699A30F45B064F48B14B25D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 07:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:87:9d:36:db:0b:42:10:f3:34:64:ca:b8:a8:cf:0c:1d:c9:4e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28542F5ACD485BC6F699A30F45B064F48B14B25D
        Validity
            Not Before: May 12 14:59:43 2025 GMT
            Not After : May 11 15:04:43 2026 GMT
        Subject: CN=865539EE30D23E702E7D80E43E0915DB902C048F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:38:d3:13:aa:b8:e3:bd:cc:76:6d:a1:57:
                    4f:7b:56:36:7a:0a:5c:f5:cc:75:e7:86:3a:e7:df:
                    b0:23:12:ae:d9:46:98:0f:fa:46:70:6f:ef:6e:1e:
                    86:fd:e9:95:25:b8:08:64:74:ca:11:bc:7b:3a:f8:
                    73:b3:42:59:59:0c:90:45:1c:2b:70:9e:0a:f3:d8:
                    90:96:32:04:2f:b2:30:7b:c9:58:85:ed:fa:e5:33:
                    a2:7f:03:1a:d4:d8:61:81:65:2c:ac:f3:88:3a:40:
                    e9:48:df:25:b7:af:a2:84:b3:32:54:8b:a7:15:f9:
                    cf:63:e7:3e:86:7f:53:48:88:d4:d2:ba:f4:62:45:
                    65:ec:44:44:96:75:20:c3:3a:41:e9:37:9a:59:49:
                    c4:ea:a8:6c:03:7a:66:b3:b6:a2:a4:ea:23:dc:d5:
                    39:ca:76:22:70:ae:cb:6f:78:6e:76:a9:7f:cf:64:
                    dd:60:8a:47:97:22:08:86:61:a6:c0:bb:d0:14:6f:
                    14:c0:1f:2b:b1:08:9c:b5:7f:0f:6a:db:d2:99:39:
                    86:c6:22:fa:2b:9d:3f:b7:a5:a8:a8:1c:9c:37:49:
                    ed:db:63:65:d2:4e:8c:7b:40:4d:5b:84:41:b9:41:
                    a3:a4:b0:3f:79:18:5f:9c:d0:91:00:ae:73:2f:75:
                    70:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:55:39:EE:30:D2:3E:70:2E:7D:80:E4:3E:09:15:DB:90:2C:04:8F
            X509v3 Authority Key Identifier:
                keyid:28:54:2F:5A:CD:48:5B:C6:F6:99:A3:0F:45:B0:64:F4:8B:14:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/28542F5ACD485BC6F699A30F45B064F48B14B25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28542F5ACD485BC6F699A30F45B064F48B14B25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2fvRbuAYkWfUV8F4cTd4VBfb4HfxXKzWNXhiAAAK7h7/0/323830343a323939343a3a2f33322d313238203d3e20323634303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2994::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:f0:2d:19:24:88:b9:50:e9:1a:d8:90:5b:28:c7:5c:19:ce:
         f8:6c:25:f3:46:89:df:cf:da:2a:9f:91:e3:92:9a:34:2b:4a:
         58:69:ad:69:4e:f7:f4:70:52:9f:fc:b5:59:74:05:ab:7d:85:
         19:fa:50:a3:28:19:0f:96:53:cc:1b:a2:fa:19:10:f9:2b:bb:
         54:9f:8c:d2:44:5f:47:d7:15:0f:60:d0:da:e2:ff:ff:68:3d:
         83:b3:c1:d6:ea:a0:1f:3b:dd:fb:65:9e:4f:dd:3e:03:f9:1a:
         55:38:ad:26:7f:8a:0b:e8:5d:25:da:78:34:2b:04:45:0a:a1:
         b0:91:1a:62:c2:ae:a3:e4:ff:31:7d:0c:56:f7:27:c8:d3:c2:
         69:4b:85:75:2b:74:ef:f6:4b:c4:8e:16:fb:d5:26:15:f1:e9:
         a9:9f:b9:af:1c:ac:7b:ed:92:e7:5b:bf:a2:15:ef:06:99:b2:
         c0:8b:68:57:0f:50:af:f7:80:87:2a:d7:f3:28:65:f0:4c:c9:
         e3:85:05:86:87:da:39:b7:a8:72:f5:a0:7a:da:9e:f0:bf:cc:
         1a:80:30:c9:bf:b6:dc:bc:4f:38:29:a5:8f:c4:c7:f5:42:da:
         31:f5:ce:39:e0:c0:71:85:57:aa:d7:07:ad:38:2e:41:d8:3f:
         4d:f6:72:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:24:03 2025 by rpki-client