Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a383030303a3a2f33332d3333203d3e20323638313334.roa
File:                     323830343a353838343a383030303a3a2f33332d3333203d3e20323638313334.roa (raw, json)
Hash identifier:          oY+UqILAJ0O28fhipILYjkq9GGMd9cTG8fZG/wxsL+M=
Subject key identifier:   E2:40:82:E8:6D:3C:F2:37:65:75:DD:FE:43:D4:B6:D5:55:8D:B8:C3
Certificate issuer:       /CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
Certificate serial:       53BF38A5613B407AEE6C839C83AD6E27A2806CC5
Authority key identifier: F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a383030303a3a2f33332d3333203d3e20323638313334.roa
Signing time:             Thu 06 Mar 2025 14:31:12 +0000
ROA not before:           Thu 06 Mar 2025 14:26:12 +0000
ROA not after:            Thu 05 Mar 2026 14:31:12 +0000
asID:                     268134
IP address blocks:        2804:5884:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl
                          rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 01:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bf:38:a5:61:3b:40:7a:ee:6c:83:9c:83:ad:6e:27:a2:80:6c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2E351E04CEB2540D88297555ED76E80B91C52F7
        Validity
            Not Before: Mar  6 14:26:12 2025 GMT
            Not After : Mar  5 14:31:12 2026 GMT
        Subject: CN=E24082E86D3CF2376575DDFE43D4B6D5558DB8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:32:24:d5:6c:ed:6a:ef:d7:97:ae:9c:46:33:
                    8c:59:5b:01:38:61:f0:49:64:e7:d9:25:a7:63:60:
                    92:74:47:a4:0e:d5:42:95:6e:ee:fc:79:20:af:22:
                    6c:03:e1:7e:c3:f2:4f:eb:4a:8e:3c:ab:a3:c2:ed:
                    b0:d6:d4:a3:ed:e4:49:1b:7c:f0:7c:b5:ed:f6:99:
                    53:c0:a6:36:f0:53:44:64:f5:04:7e:01:77:84:4b:
                    a3:96:4d:14:52:cf:03:d9:05:7a:eb:4b:0b:d7:9c:
                    37:f3:f4:b0:55:51:38:53:98:fb:14:18:50:86:d7:
                    29:9d:f8:f4:51:2e:5f:65:c2:97:ed:b8:e4:b8:a9:
                    b4:ad:6f:21:d9:67:dc:82:f6:06:a8:de:57:2a:1a:
                    67:f5:f1:7c:d7:85:f6:2f:f1:0d:fc:1f:c3:b8:67:
                    3f:4e:e2:f9:fb:9c:4b:34:b8:74:9a:05:92:01:7b:
                    58:e8:25:6f:5e:73:dd:e9:ef:30:da:61:d1:39:4b:
                    11:7b:76:37:93:3f:b8:20:a9:e5:94:39:17:c3:cb:
                    61:3a:71:d7:30:74:67:04:bd:c3:36:20:89:bb:c2:
                    b5:e5:cd:67:b9:68:02:4a:2e:e1:61:1f:d9:48:47:
                    79:05:b3:e3:d9:df:3f:d5:6d:6c:85:05:b0:ee:5e:
                    55:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:40:82:E8:6D:3C:F2:37:65:75:DD:FE:43:D4:B6:D5:55:8D:B8:C3
            X509v3 Authority Key Identifier:
                keyid:F2:E3:51:E0:4C:EB:25:40:D8:82:97:55:5E:D7:6E:80:B9:1C:52:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2E351E04CEB2540D88297555ED76E80B91C52F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/1/323830343a353838343a383030303a3a2f33332d3333203d3e20323638313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5884:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         02:fb:16:65:e9:43:21:f2:ff:15:4d:09:e5:ef:eb:77:e5:71:
         8e:a2:2f:a7:87:53:cc:04:1e:ef:b6:65:6a:e4:bc:6f:06:e9:
         21:78:aa:ba:d4:3d:b7:85:d1:62:74:cd:46:22:d4:93:53:fa:
         7a:f4:29:2b:02:5d:59:19:9b:05:85:dd:f1:61:88:78:e9:e3:
         22:70:e8:d8:58:0f:bd:7b:b8:15:8d:ba:7e:a2:92:84:7b:2c:
         7d:d3:7d:78:7b:83:6e:35:a1:c6:b8:11:df:c8:9a:de:ff:14:
         3d:71:36:13:e5:d3:f7:d9:00:7c:58:c1:43:ff:75:23:4e:d8:
         65:96:8d:91:9a:99:f8:a9:1c:b9:ca:c2:28:44:f9:fb:e7:aa:
         65:96:bb:5e:07:2a:dc:93:07:ea:8c:fd:08:ea:c1:35:e8:33:
         3a:d4:93:63:4d:81:b6:22:b0:18:18:a9:40:40:7e:f0:de:6d:
         d1:4d:20:c0:f6:e9:d7:18:d5:04:1f:8a:ed:6d:50:1a:df:1f:
         02:7f:fe:0b:9c:56:0c:53:fa:ed:a2:cc:91:04:1b:c7:6c:1c:
         1d:e6:b7:53:32:6f:49:3b:6f:fe:8d:58:a2:0d:d4:5d:61:11:
         37:27:c0:6e:85:7a:f6:03:f4:57:4a:27:35:13:4c:54:bd:95:
         2f:37:49:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:48:46 2025 by rpki-client