Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a666666663a3a2f34382d3438203d3e20323634343835.roa
File:                     323830343a323035303a666666663a3a2f34382d3438203d3e20323634343835.roa (raw, json)
Hash identifier:          n4NQ8GnTIrajSAISgOL4B1OZUclDr7ghhtItFd1+Jx4=
Subject key identifier:   03:FF:48:24:5B:44:CF:D0:AF:93:C2:3E:B1:86:8B:AA:6B:B6:66:21
Certificate issuer:       /CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
Certificate serial:       16BA1484A2A543D224C6B99ED8105080994FDDD3
Authority key identifier: 13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a666666663a3a2f34382d3438203d3e20323634343835.roa
Signing time:             Tue 27 May 2025 19:14:21 +0000
ROA not before:           Tue 27 May 2025 19:09:21 +0000
ROA not after:            Tue 26 May 2026 19:14:21 +0000
asID:                     264485
IP address blocks:        2804:2050:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl
                          rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 19:45:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ba:14:84:a2:a5:43:d2:24:c6:b9:9e:d8:10:50:80:99:4f:dd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13049A258921BBB3AF3BBB104434ACDB0ED8DF3A
        Validity
            Not Before: May 27 19:09:21 2025 GMT
            Not After : May 26 19:14:21 2026 GMT
        Subject: CN=03FF48245B44CFD0AF93C23EB1868BAA6BB66621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:10:a9:01:22:ed:d8:54:51:4c:bc:3f:c0:
                    64:46:57:bf:59:3b:12:06:a6:ec:bc:c4:b6:d8:52:
                    4e:80:26:3b:02:8a:f1:b5:ed:fa:20:cf:43:22:48:
                    a9:7e:72:8c:3b:74:13:14:ce:a2:0a:c6:d7:e8:03:
                    db:54:81:00:55:e3:32:40:6b:97:8f:76:92:72:e6:
                    f5:e0:32:61:73:72:2d:d5:2c:d4:b9:1f:c5:51:af:
                    82:41:4d:aa:09:d0:bb:3d:6d:26:2d:ba:1d:9c:db:
                    15:64:cb:c5:c1:d5:04:ed:83:fd:da:e9:45:88:45:
                    08:76:df:0e:d4:2b:d9:72:6e:ce:b9:68:1b:2d:c6:
                    45:3a:e6:2f:b4:bb:5d:20:e2:b6:ac:f8:3a:b7:6e:
                    c7:ee:a1:d7:0a:7c:00:5b:bf:ab:a4:76:15:c2:4a:
                    35:1d:ac:d0:f5:c7:01:90:ad:a0:42:73:84:9d:35:
                    86:db:52:c3:8a:41:fc:7d:02:84:59:37:c9:6b:02:
                    a8:02:a4:0d:03:fa:04:84:1a:60:42:26:cd:cf:99:
                    25:22:4c:3f:9f:aa:63:d6:f1:fa:ae:c6:c2:d0:d2:
                    8a:ab:8a:86:19:6d:d2:5a:bb:d5:e8:5b:9f:6d:54:
                    81:cf:c1:8b:fe:90:8e:9c:5d:3d:9f:6e:e4:bf:d1:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FF:48:24:5B:44:CF:D0:AF:93:C2:3E:B1:86:8B:AA:6B:B6:66:21
            X509v3 Authority Key Identifier:
                keyid:13:04:9A:25:89:21:BB:B3:AF:3B:BB:10:44:34:AC:DB:0E:D8:DF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13049A258921BBB3AF3BBB104434ACDB0ED8DF3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DnjBgNdsuXeebHMne3ebfmXatomFt4hhr617po1xVEJ6/0/323830343a323035303a666666663a3a2f34382d3438203d3e20323634343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2050:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:66:ea:70:e0:fb:1d:05:ba:0d:63:ff:6f:30:bf:0d:58:
         d4:12:3d:e8:06:ee:36:b8:3d:32:47:d8:b8:5a:23:7b:d8:3a:
         ca:68:b6:4e:7c:dd:da:64:0b:18:fc:4e:05:c3:8a:58:d7:fd:
         a3:a1:82:cb:58:c3:37:c8:94:0a:8b:10:eb:75:28:a6:91:f6:
         f3:82:d2:f7:77:4e:2b:ec:16:59:c1:a5:c1:90:45:9f:01:4a:
         f3:86:53:b2:77:fc:a1:18:da:a9:b8:09:75:7d:80:27:a8:c2:
         ac:93:43:c8:e0:00:46:7c:6b:2a:70:bb:04:78:4a:6d:f3:f0:
         e5:67:0f:ed:cf:70:26:32:22:ed:82:26:a8:ea:85:5b:4d:e0:
         63:9e:95:22:c8:3d:3d:ff:98:8a:7f:db:a2:41:44:f3:0f:58:
         0e:85:25:ea:9f:7d:a2:d2:95:ca:ec:63:9f:1a:e8:c5:87:bd:
         0e:93:6f:03:0c:1c:15:cd:29:b4:7c:6e:1c:43:c5:c9:24:dd:
         76:1d:25:a0:ee:56:bd:9e:24:42:29:bd:4f:85:91:b2:0b:79:
         0b:46:e6:7f:d6:4c:b3:54:1a:66:88:15:89:ac:07:df:f4:29:
         9c:ab:26:05:1a:73:ef:05:5c:2d:6f:48:d0:e7:66:a6:69:f9:
         e0:5e:0f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:51:27 2025 by rpki-client