Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa
File:                     323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa (raw, json)
Hash identifier:          vxLC8qKn7Xq7LroxXY7tUXYec/LnOWpHSZXrKhdJk9s=
Subject key identifier:   56:64:EF:B5:DF:F4:3C:5F:62:3F:1A:A9:0C:90:96:E5:33:EB:86:6D
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       566287BBD7A5BF1F97A24E5ED97678D89C69F52B
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa
Signing time:             Thu 06 Mar 2025 07:00:22 +0000
ROA not before:           Thu 06 Mar 2025 06:55:22 +0000
ROA not after:            Thu 05 Mar 2026 07:00:22 +0000
asID:                     268879
IP address blocks:        2804:5bf4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:62:87:bb:d7:a5:bf:1f:97:a2:4e:5e:d9:76:78:d8:9c:69:f5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Mar  6 06:55:22 2025 GMT
            Not After : Mar  5 07:00:22 2026 GMT
        Subject: CN=5664EFB5DFF43C5F623F1AA90C9096E533EB866D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:eb:4c:a5:c6:9a:b4:92:ef:40:27:ce:72:2b:
                    6f:50:4f:af:e8:77:77:21:c6:fd:e0:23:6a:cf:fb:
                    83:f5:fc:35:25:8b:d2:92:ee:6b:df:0d:be:e7:7c:
                    87:92:9b:ff:d5:7a:d4:3f:59:57:71:28:e6:70:8c:
                    0a:28:77:82:ee:c6:fa:be:ca:ca:4c:70:3b:84:2a:
                    63:4e:9d:eb:c7:c6:81:7d:9f:d6:ae:73:eb:6f:0b:
                    88:92:74:a4:03:84:c6:94:64:8f:21:7a:00:e7:74:
                    dd:0a:ac:a9:ce:da:4e:31:38:70:01:11:ea:1d:24:
                    58:6d:ab:34:16:ee:c5:36:5d:ae:29:a3:6e:73:dc:
                    0d:87:34:3f:f6:f2:c5:9c:68:eb:2f:ac:10:c3:ba:
                    aa:d6:b4:2c:c6:89:68:91:0d:70:88:96:fa:9e:c6:
                    b0:ca:c7:c9:32:2f:51:d4:b7:d5:ec:42:dc:97:c9:
                    cd:79:5b:59:da:7d:e9:37:fb:c0:3e:2b:e7:4f:16:
                    ca:07:b7:55:b9:59:85:5a:46:b0:0e:05:7d:70:8f:
                    e6:1b:3b:d7:f5:a6:8f:c5:f7:c4:76:72:45:01:09:
                    5d:4d:7a:22:ef:73:68:3f:ce:ea:be:b4:2c:b0:6a:
                    a3:af:4b:eb:56:d5:a2:bc:84:e6:31:2f:ec:79:50:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:64:EF:B5:DF:F4:3C:5F:62:3F:1A:A9:0C:90:96:E5:33:EB:86:6D
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a383030303a3a2f33342d3334203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:1c:be:3c:f1:b6:c3:13:6d:6f:bd:5c:5b:3f:52:3c:8e:4c:
         5c:a5:8c:c1:41:b3:ee:9a:e4:1b:15:5c:48:da:dd:6d:ca:d3:
         d6:bd:e1:52:fa:e1:91:d1:57:93:c7:08:71:f4:b2:5a:07:37:
         6b:1d:6f:91:2e:2d:2b:32:b8:21:5e:fc:88:74:d5:90:3e:e1:
         aa:3c:fa:0e:72:10:47:77:2c:72:c1:b3:2d:7c:e9:4a:c5:6e:
         47:0e:58:f2:96:41:37:91:d2:6c:bf:4b:81:3f:58:45:d3:19:
         a3:58:d4:0b:23:6e:74:86:9e:95:08:61:c8:d9:67:58:c0:6c:
         11:4d:cb:ad:fb:3a:31:d5:12:59:c5:21:00:88:09:0a:94:31:
         1f:01:1d:a5:de:ba:92:2a:16:8a:33:e2:6c:f7:a3:72:d3:16:
         95:df:99:10:4a:48:2f:3f:00:37:0a:76:55:a7:e0:34:80:79:
         5f:91:c7:86:85:f3:41:1b:7e:d4:06:20:d0:dc:1e:15:bb:cd:
         85:dc:5f:00:71:55:fe:82:6e:b0:f5:a4:9c:57:a8:2d:1a:c9:
         18:58:35:00:37:5a:e2:7e:f7:33:22:d3:93:fb:1f:a0:e4:62:
         bf:ca:2a:b9:68:4d:73:8f:05:64:85:9f:fc:57:a8:0e:f2:d1:
         3d:6d:70:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:22:46 2025 by rpki-client