Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356138653a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a356138653a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          j3SrRm51gKQPn0/MkTdk7g5hffTrIw/MgRbsLdy9qxk=
Subject key identifier:   09:08:24:77:92:B5:16:79:9B:1F:DD:5B:ED:52:09:0B:FA:3C:FE:36
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       387B90DA494592F08A37880BBAC448CFC2EF9079
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356138653a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:44 +0000
ROA not before:           Tue 27 May 2025 19:09:44 +0000
ROA not after:            Tue 26 May 2026 19:14:44 +0000
asID:                     264485
IP address blocks:        2804:2050:5a8e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 09:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7b:90:da:49:45:92:f0:8a:37:88:0b:ba:c4:48:cf:c2:ef:90:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:44 2025 GMT
            Not After : May 26 19:14:44 2026 GMT
        Subject: CN=0908247792B516799B1FDD5BED52090BFA3CFE36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:7c:5c:54:77:bd:32:e5:7a:db:b2:32:1e:
                    8f:41:85:b1:d1:ae:b3:5b:b1:b7:9c:6e:bc:e6:67:
                    8a:13:98:b1:c3:d1:20:48:4d:f3:b5:12:24:f1:18:
                    07:03:16:d5:04:df:bc:c9:e4:df:b8:96:7e:7d:f0:
                    bc:40:8d:c7:b5:98:a1:d3:6b:5c:c0:f8:f0:0c:cb:
                    49:e8:71:ed:fd:a1:af:57:9d:0c:0e:1f:22:d3:39:
                    0b:6d:5d:6d:45:29:a7:42:7e:40:c9:f2:17:98:12:
                    73:47:53:46:1f:54:6f:9c:1b:c3:bb:97:af:85:fd:
                    8c:8b:b9:49:e6:cd:7e:bf:7e:31:57:0d:f3:e5:50:
                    23:52:8e:a3:c3:d5:7a:46:53:5f:37:b5:eb:aa:b5:
                    69:13:4f:6d:ba:95:d9:b6:84:50:a5:46:fa:86:3d:
                    3c:1e:1e:51:1d:c4:6b:a4:0c:17:ee:f7:80:ab:98:
                    ef:d4:49:14:58:95:2d:79:49:77:65:d6:3e:03:3c:
                    74:36:95:68:25:d7:7c:1e:1d:7a:da:18:19:e4:3e:
                    16:eb:96:24:e6:a5:0e:35:fc:41:18:fe:a1:1b:aa:
                    c4:e0:03:9b:87:b3:9c:72:71:d6:b1:7f:59:0b:e2:
                    77:4e:6b:79:b0:30:d6:fc:8a:85:f4:80:43:fe:6c:
                    51:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:08:24:77:92:B5:16:79:9B:1F:DD:5B:ED:52:09:0B:FA:3C:FE:36
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a356138653a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:5a8e::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:e0:c4:9a:e7:67:cf:d9:18:8a:2a:32:20:90:c8:6d:c4:34:
         20:ce:c6:03:2a:db:4d:4b:12:b7:87:77:c8:93:08:4e:af:be:
         38:f6:7d:dd:4c:b6:8d:55:8e:b6:5b:99:5c:bc:32:0c:df:b4:
         85:ac:8a:14:8e:57:9b:4e:9b:ea:a2:2e:c3:dd:32:d1:f8:77:
         f1:43:fe:2f:60:c2:30:45:da:6d:80:b1:a4:26:53:ee:73:de:
         4f:84:78:ae:a1:e3:37:a1:7b:bb:36:e9:78:f3:6d:d5:3b:57:
         46:86:25:ab:fb:0a:0d:3e:ae:2d:fe:e3:e5:cc:21:71:98:cc:
         71:95:80:9b:ad:9c:5a:b8:4a:ab:0d:fc:33:15:f7:bd:21:41:
         16:22:1f:8f:ed:39:38:5c:fd:2e:42:83:95:50:66:6b:1c:2e:
         5c:37:6f:55:78:4d:79:51:b8:e1:e6:c7:6b:34:e8:ac:f1:44:
         4f:16:4b:91:bd:ec:30:8d:5b:8b:0e:a6:7f:49:15:3f:93:ea:
         d1:8e:60:21:d8:49:9e:cd:93:a6:5d:b9:7e:20:d3:06:5e:6e:
         64:8c:0f:75:f4:c6:91:3f:e7:b4:45:e6:92:3a:e7:f5:a6:61:
         d1:04:38:55:93:6d:e8:0c:dd:63:8e:bd:ef:71:8c:02:f4:5d:
         9c:58:ea:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:14:03 2025 by rpki-client