Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356137653a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a356137653a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          kMsmOk5H+cfw2VwUpdV1l8fTXKeVzfWPzzNwyNi5Py8=
Subject key identifier:   67:0E:3F:96:E0:F0:60:05:D7:51:D3:F4:D5:6B:3B:59:C0:08:18:B0
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       69D37C84C0361B51C41A4F2872BDCB59CFD06A64
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356137653a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:22 +0000
ROA not before:           Tue 27 May 2025 19:09:22 +0000
ROA not after:            Tue 26 May 2026 19:14:22 +0000
asID:                     264485
IP address blocks:        2804:2050:5a7e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 09:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d3:7c:84:c0:36:1b:51:c4:1a:4f:28:72:bd:cb:59:cf:d0:6a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:22 2025 GMT
            Not After : May 26 19:14:22 2026 GMT
        Subject: CN=670E3F96E0F06005D751D3F4D56B3B59C00818B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7b:58:03:73:92:7b:99:1d:c6:7c:14:8f:54:
                    bd:b6:ce:24:89:da:e2:74:a5:c9:10:86:1d:d5:c1:
                    05:d8:4f:5a:22:2e:3d:15:88:77:6c:c6:9b:2c:48:
                    bb:b0:02:36:a9:86:e0:12:0e:bf:8d:5c:2e:d2:d5:
                    2f:e5:11:72:b3:d3:aa:26:a3:6d:a6:29:96:e4:92:
                    03:ae:08:11:c0:2c:a2:66:1b:2c:f3:e7:79:f0:81:
                    e2:4b:a6:56:01:fe:dc:d6:2a:94:9d:99:1b:11:ca:
                    68:fa:db:79:19:4e:01:82:06:11:43:b3:2a:04:87:
                    06:c8:92:e0:d7:ff:0f:f5:80:cc:9c:bd:f2:63:37:
                    25:1e:8e:29:08:98:a2:cb:7d:50:78:45:37:30:dc:
                    1a:9a:1f:03:10:5d:ef:29:13:8b:5f:b2:77:e2:96:
                    a0:71:c1:7b:a4:38:f8:90:3b:a2:c9:dd:47:30:64:
                    4c:cb:7d:a1:d6:52:e7:a4:71:42:5a:ef:49:9e:85:
                    25:60:84:0e:6b:6b:40:fb:c0:30:33:ac:93:95:10:
                    d5:08:97:31:03:af:fc:6d:09:46:cb:e3:6b:be:b9:
                    1f:f8:d1:8a:17:0c:93:fe:8f:66:89:50:33:c9:4d:
                    c1:e7:46:20:43:16:45:43:b5:54:95:72:81:95:43:
                    57:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0E:3F:96:E0:F0:60:05:D7:51:D3:F4:D5:6B:3B:59:C0:08:18:B0
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356137653a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:5a7e::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:9e:cd:79:06:e7:c7:23:9e:ac:62:ae:ff:23:5f:48:3a:8c:
         e9:42:eb:94:67:b4:a4:3e:25:53:fc:da:58:e6:a1:74:8b:aa:
         77:8b:b4:54:4a:39:41:f8:dc:43:91:17:33:ec:06:7e:23:e7:
         61:0b:93:4e:52:43:ae:e3:24:42:89:8d:70:8c:26:bf:31:3a:
         3f:02:58:35:b1:81:b3:03:b5:a6:b0:e1:f0:5e:d3:ec:d7:42:
         37:dc:b9:09:a7:9f:4f:bd:50:11:70:fd:7c:bf:a1:01:dc:2a:
         eb:86:af:b9:ea:0b:5e:62:d1:2e:c3:f0:84:9d:80:b4:74:f8:
         34:3c:37:eb:e9:77:15:91:a4:fe:c8:96:07:f9:08:a7:26:3c:
         b7:00:2f:93:36:cc:1c:8e:8a:e3:45:95:85:a5:6b:dc:8a:62:
         0a:fe:19:ad:01:cd:17:ca:da:a2:75:34:fa:42:e2:7e:86:60:
         c2:53:34:87:ce:90:df:7a:e2:31:fc:b3:71:d8:7b:14:fd:a9:
         d6:5c:8e:0d:13:98:19:64:0b:0e:99:64:fe:e0:32:01:9c:c8:
         5f:f4:0e:c2:15:c2:ad:2c:d9:8a:70:af:98:e6:d6:58:95:14:
         02:6a:29:4d:b9:f2:30:52:6d:e6:c5:ad:9c:a0:7d:0e:25:7a:
         c1:e6:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:02:24 2025 by rpki-client