Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a396161633a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a396161633a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          xlj/2Cj3J1MZGeGtba3kg4Qus709OEbitzqFn46+eGM=
Subject key identifier:   5F:3B:BE:F1:57:00:43:24:F1:F5:37:D5:97:F1:6E:9F:C4:58:F7:05
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       4CF95FD9E66F46AD6640AF0DC3697CD2B31070D1
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a396161633a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:41 +0000
ROA not before:           Tue 27 May 2025 19:09:41 +0000
ROA not after:            Tue 26 May 2026 19:14:41 +0000
asID:                     264485
IP address blocks:        2804:2050:9aac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 14:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f9:5f:d9:e6:6f:46:ad:66:40:af:0d:c3:69:7c:d2:b3:10:70:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:41 2025 GMT
            Not After : May 26 19:14:41 2026 GMT
        Subject: CN=5F3BBEF157004324F1F537D597F16E9FC458F705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f1:6e:24:67:40:f0:6c:ec:b4:8c:d0:21:22:
                    83:b6:6e:34:de:e5:c1:fa:18:45:51:a2:c2:04:f5:
                    5b:47:a2:ce:81:06:2a:4f:91:99:75:99:84:2d:f8:
                    4a:9a:fb:f1:e8:da:da:3e:56:b3:18:6d:88:e2:33:
                    b5:51:a4:e9:07:b1:1e:9e:e9:98:49:b6:be:e3:31:
                    5c:e1:47:30:f6:0a:14:36:4c:f7:b9:3a:bf:3b:eb:
                    62:d7:9c:1d:19:cc:f1:e8:4d:b2:a8:f6:f5:be:fa:
                    14:45:4f:72:d4:dd:49:12:16:dc:2c:ae:52:a1:5e:
                    b7:13:60:96:a0:e5:12:3f:10:8e:d3:76:23:be:10:
                    cd:a7:f9:cf:07:7a:e6:e9:93:cc:0e:ef:df:92:60:
                    a2:3f:32:d7:93:73:0b:10:f9:03:f5:35:3b:cb:40:
                    06:ce:24:bf:d2:9b:15:bb:55:73:1e:da:c7:a1:01:
                    58:2f:13:23:8a:e3:4e:97:09:f8:26:9b:6f:58:15:
                    86:dc:65:93:88:19:2e:8e:c0:d0:ed:fb:2c:94:02:
                    95:c0:7e:d7:48:dc:e4:16:b9:5a:d2:7d:e7:61:47:
                    f1:4c:5f:3a:78:31:1b:fa:69:02:98:f0:a0:00:fa:
                    34:2b:40:33:95:51:36:57:b4:7f:a7:26:f8:07:78:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3B:BE:F1:57:00:43:24:F1:F5:37:D5:97:F1:6E:9F:C4:58:F7:05
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a396161633a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:9aac::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:28:18:a8:76:e6:d9:88:1b:35:0b:46:f2:10:7d:c9:2f:dd:
         a9:67:1a:07:91:aa:a6:0b:a2:9b:b2:ec:3d:e8:18:00:db:ee:
         2d:c7:bf:09:a5:ae:e2:b4:78:19:9e:9d:d6:c2:9f:40:8e:ff:
         ca:41:84:d1:cd:33:ac:f5:aa:bc:c1:31:ed:b9:9b:ca:0a:aa:
         9d:09:0d:aa:a3:fd:9f:a4:66:b2:38:c0:99:e2:f0:b9:30:eb:
         71:1d:59:89:e6:0f:7d:07:9b:24:8d:92:0f:9c:9e:92:07:27:
         78:54:a0:c4:7e:69:00:35:17:dc:0e:1a:c1:b3:1d:56:64:70:
         27:59:14:cb:1f:03:55:46:5d:f8:9b:ff:1e:79:f0:31:70:a2:
         db:d9:43:25:4c:ea:dc:3e:2b:4e:f9:7e:93:d1:64:c0:72:0f:
         85:bb:9e:86:a8:fe:74:51:25:92:eb:de:62:21:01:b9:2c:d4:
         c8:83:e5:f3:02:18:e0:7b:f4:a9:29:c3:bc:54:1d:34:52:33:
         2a:4a:23:26:d2:d9:61:1c:6a:c8:8f:7e:a5:bf:6e:69:4f:be:
         3a:a3:c6:b0:8f:0b:1c:8a:40:a3:cf:af:e5:1c:26:ba:5f:ff:
         ff:ba:f5:25:bf:32:45:73:9a:4c:17:8a:fc:14:39:db:b3:5b:
         d7:55:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:19:17 2025 by rpki-client