Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/323830343a376262303a3a2f33322d3332203d3e20323731343438.roa
File:                     323830343a376262303a3a2f33322d3332203d3e20323731343438.roa (raw, json)
Hash identifier:          nAs7qjTtsCsdg40lzNWqMhQLh0amGkIXXqUh0Hb4bbo=
Subject key identifier:   94:4A:86:28:A9:3F:92:C3:FA:6D:67:D5:E6:6D:29:A1:B0:03:EC:EF
Certificate issuer:       /CN=558D17416B73E6E20D5942E510F11254EB2056A1
Certificate serial:       7F487741021730065795294941F310A5FB6F3A12
Authority key identifier: 55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/323830343a376262303a3a2f33322d3332203d3e20323731343438.roa
Signing time:             Sat 08 Mar 2025 16:03:30 +0000
ROA not before:           Sat 08 Mar 2025 15:58:30 +0000
ROA not after:            Sat 07 Mar 2026 16:03:30 +0000
asID:                     271448
IP address blocks:        2804:7bb0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl
                          rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 21:56:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:48:77:41:02:17:30:06:57:95:29:49:41:f3:10:a5:fb:6f:3a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558D17416B73E6E20D5942E510F11254EB2056A1
        Validity
            Not Before: Mar  8 15:58:30 2025 GMT
            Not After : Mar  7 16:03:30 2026 GMT
        Subject: CN=944A8628A93F92C3FA6D67D5E66D29A1B003ECEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:79:d7:17:71:31:6e:11:a3:0f:f3:cd:f9:
                    f5:f5:90:a9:9f:d0:84:93:a9:e5:e2:94:d3:dc:a8:
                    6b:4d:61:fb:c7:56:53:7f:a0:40:3a:7c:be:17:b8:
                    2c:cc:87:cf:14:d9:3b:ba:97:8c:d3:65:22:7d:28:
                    72:bf:93:7d:3f:98:ba:44:83:ae:6a:a8:b4:2b:9f:
                    21:cb:d7:eb:95:c2:53:95:e9:c4:43:24:ca:2c:4d:
                    d5:f2:59:84:a8:3a:f5:b2:94:8d:18:7b:09:a7:98:
                    aa:c0:90:85:8f:f3:72:3f:ea:1c:04:aa:4a:d7:e9:
                    d5:27:86:d0:73:4c:1e:9e:0b:16:04:e8:80:6c:b3:
                    29:55:df:b7:34:ef:5f:a2:9c:6c:07:81:1a:1d:9a:
                    fe:62:33:a2:a8:90:f6:ac:95:72:07:d8:e5:6d:ba:
                    44:64:71:82:4b:1a:07:4d:a6:4d:59:c1:b4:72:88:
                    90:10:fe:d9:51:57:5d:ce:d9:6c:83:e8:74:9b:62:
                    a8:8d:9b:c0:71:19:45:32:c0:ef:9d:f4:92:b9:84:
                    56:b6:03:93:a4:53:4d:79:93:c7:58:29:7b:23:e2:
                    38:5e:7b:e9:2b:a1:40:83:d4:e8:42:ec:e3:b5:ef:
                    4c:11:bc:93:a8:57:5b:f5:c6:77:db:8a:aa:f7:93:
                    fb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:4A:86:28:A9:3F:92:C3:FA:6D:67:D5:E6:6D:29:A1:B0:03:EC:EF
            X509v3 Authority Key Identifier:
                keyid:55:8D:17:41:6B:73:E6:E2:0D:59:42:E5:10:F1:12:54:EB:20:56:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/558D17416B73E6E20D5942E510F11254EB2056A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558D17416B73E6E20D5942E510F11254EB2056A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn5jpWgU7NfBazeZPEL3pyLgUhkAEPBWGhP6utniEhXN/1/323830343a376262303a3a2f33322d3332203d3e20323731343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:54:d4:56:20:50:26:b2:72:60:58:2d:33:d8:95:aa:b5:
         10:02:b9:a3:e4:0e:0b:8b:4c:8f:f4:b1:d0:7b:f7:7c:d2:05:
         c9:9c:8a:e0:6c:ac:e2:35:36:ed:22:b8:f4:69:51:cb:bc:32:
         a3:2e:a5:cb:a3:85:3a:bb:3b:9b:fa:65:9b:89:af:be:8f:ce:
         29:93:f6:f6:2b:e3:5e:e5:91:da:70:84:9c:66:06:57:ce:f9:
         4b:c6:a6:0c:2f:f0:02:20:35:8e:7d:59:ee:45:eb:bf:67:29:
         e8:12:13:1c:1b:8d:c3:aa:0a:91:bb:e9:2a:ef:86:17:dc:d9:
         93:2b:3f:e2:ca:b6:5f:3b:2f:d5:04:21:18:98:b2:2b:82:1e:
         87:07:9b:1b:b2:66:51:15:25:10:8c:db:94:62:bd:43:b9:52:
         48:41:6c:7c:78:91:12:a6:fa:57:0c:f1:82:06:91:fd:eb:63:
         0c:16:99:d3:af:20:fe:af:59:a6:d3:0c:f1:ed:b7:e6:61:2b:
         cf:33:de:98:3a:22:ed:10:00:1b:10:bd:37:66:2b:f1:b3:af:
         2a:11:fe:22:de:52:a8:6a:3a:a3:48:11:bf:92:68:16:18:bd:
         39:fb:b8:a2:83:0d:fb:9c:94:5f:ef:b9:90:5c:e3:7e:3b:dc:
         8b:13:27:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:04:43 2025 by rpki-client