Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33342d3334203d3e20323638383739.roa
File:                     323830343a356266343a3a2f33342d3334203d3e20323638383739.roa (raw, json)
Hash identifier:          yS5epuu0kTOQ+hfUXY+PsX1xwFijGzkaJ1ogGYKiLUo=
Subject key identifier:   8F:C6:29:3E:BE:F4:57:24:47:98:01:0B:7E:BE:85:F3:5D:63:03:B9
Certificate issuer:       /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial:       74D1AE8678C909489F5CB07D5F21ED6F192CB1FE
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33342d3334203d3e20323638383739.roa
Signing time:             Thu 06 Mar 2025 07:00:24 +0000
ROA not before:           Thu 06 Mar 2025 06:55:24 +0000
ROA not after:            Thu 05 Mar 2026 07:00:24 +0000
asID:                     268879
IP address blocks:        2804:5bf4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
                          rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 10:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d1:ae:86:78:c9:09:48:9f:5c:b0:7d:5f:21:ed:6f:19:2c:b1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
        Validity
            Not Before: Mar  6 06:55:24 2025 GMT
            Not After : Mar  5 07:00:24 2026 GMT
        Subject: CN=8FC6293EBEF457244798010B7EBE85F35D6303B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4b:f3:a0:c5:96:76:ea:1b:54:70:28:7a:ea:
                    c0:16:5c:f7:7e:c8:95:4e:c7:27:fe:c8:a3:72:ad:
                    72:7f:ae:92:c7:ed:2b:cd:69:59:29:54:64:11:fe:
                    7f:43:e7:25:fa:86:63:1a:8f:ba:c5:79:ee:fa:a7:
                    fb:4c:c6:d2:bd:ae:35:8d:e1:46:5c:c1:ba:69:47:
                    ba:8c:aa:e7:ea:b3:2c:ee:f6:bf:b2:fc:05:81:27:
                    f1:01:f2:fd:01:ae:a0:fc:16:1b:13:81:6f:01:4b:
                    c6:b9:5e:ef:d8:fe:b6:c2:77:24:59:40:41:dc:27:
                    e8:19:37:81:40:f7:c1:f4:b4:44:bd:b8:0e:89:53:
                    27:61:f2:7c:63:90:4d:33:f0:06:7f:0f:d7:11:49:
                    11:71:a5:28:88:04:10:14:c0:ff:08:d5:0b:c7:f7:
                    6f:58:e8:8d:e8:23:82:1b:17:d6:c3:17:6a:e8:c9:
                    4f:b0:f3:de:a5:62:b4:75:b6:9c:56:4f:6a:6c:4c:
                    fe:f7:7f:ba:12:f8:4a:64:61:45:2a:96:22:37:76:
                    5c:ba:e4:ec:31:f2:44:26:dc:3f:f5:fc:65:cc:1c:
                    fb:4a:c1:e2:1a:af:df:03:18:75:9c:e6:13:1d:d4:
                    72:0f:eb:96:3a:c1:2a:f7:cf:2a:81:b1:b4:14:d1:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C6:29:3E:BE:F4:57:24:47:98:01:0B:7E:BE:85:F3:5D:63:03:B9
            X509v3 Authority Key Identifier:
                keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/323830343a356266343a3a2f33342d3334203d3e20323638383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5bf4::/34

    Signature Algorithm: sha256WithRSAEncryption
         37:e8:d0:70:94:08:45:f0:3d:58:cc:26:0d:35:08:87:e1:89:
         2b:6b:58:a0:29:f3:47:33:03:20:73:a8:ce:ef:9f:02:78:6f:
         6c:56:55:fa:58:2f:8b:86:f8:4f:10:f6:1c:60:86:5b:67:48:
         91:bd:d0:8a:85:82:9f:d8:43:ed:c5:59:dd:d9:7f:64:62:31:
         5a:ac:75:b6:7e:d1:2b:48:7c:80:7e:e1:46:8e:e5:09:1f:6f:
         fa:fa:0a:72:fe:e5:dc:52:ba:cc:d2:1f:64:85:ff:be:01:c5:
         65:45:b1:4c:e9:fc:63:19:55:94:9e:4d:62:40:98:d0:da:59:
         f2:15:1f:bb:70:cc:16:65:1e:c9:f1:22:39:b0:f1:58:ac:00:
         7a:3f:18:f0:e3:cd:b6:15:22:c9:d3:22:4e:cd:5c:4c:f2:94:
         07:22:7c:1e:37:58:38:72:5f:49:b5:90:34:a6:9f:a1:75:93:
         00:f5:25:7e:df:4a:e0:14:3c:12:a0:42:88:26:a2:2f:e3:d6:
         04:61:98:ef:f0:87:82:3f:0b:15:2e:2c:b4:59:11:0b:15:87:
         b3:b9:28:76:34:19:7a:11:6c:04:ef:18:a2:ce:0b:01:eb:73:
         a8:de:ce:7a:52:de:46:10:60:f2:10:73:4f:f5:6e:b3:86:a4:
         53:a0:7e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:39:28 2025 by rpki-client