Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a333030303a3a2f33362d3336203d3e20323734373236.roa
File:                     323830343a393261383a333030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier:          II/iFlIlCilPK2Jp47ZoQxGS/7aF6aXzfkj9NvBHIbA=
Subject key identifier:   CA:23:84:0B:62:52:4E:C5:42:EF:9D:11:BE:B9:FD:F3:1D:3B:51:7C
Certificate issuer:       /CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
Certificate serial:       2D7AB7C73F094BFD174A257989F7F82BFD80BE13
Authority key identifier: BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a333030303a3a2f33362d3336203d3e20323734373236.roa
Signing time:             Fri 23 May 2025 21:55:20 +0000
ROA not before:           Fri 23 May 2025 21:50:20 +0000
ROA not after:            Fri 22 May 2026 21:55:20 +0000
asID:                     274726
IP address blocks:        2804:92a8:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7a:b7:c7:3f:09:4b:fd:17:4a:25:79:89:f7:f8:2b:fd:80:be:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
        Validity
            Not Before: May 23 21:50:20 2025 GMT
            Not After : May 22 21:55:20 2026 GMT
        Subject: CN=CA23840B62524EC542EF9D11BEB9FDF31D3B517C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1b:85:89:02:9f:74:2a:50:d5:39:c0:f9:1a:
                    21:38:80:da:d4:6c:d1:34:14:3d:0b:76:cf:a4:2e:
                    7b:01:29:70:b0:59:89:b6:fa:c7:1b:4b:b3:fb:fd:
                    3e:59:2f:c3:75:5a:7c:68:4d:89:40:df:02:07:4e:
                    f1:45:8e:5b:ce:b3:13:10:4e:ef:db:ed:6d:67:30:
                    90:01:e3:e0:bb:8c:b2:08:e5:2b:8b:d0:b6:79:15:
                    d8:f3:76:95:97:7d:81:9e:ec:70:5c:bc:e6:92:7b:
                    71:4a:52:c1:eb:13:15:82:43:3c:d6:2e:6d:86:94:
                    62:39:cf:8e:a4:81:cf:42:0a:74:b6:86:5a:0a:82:
                    5a:94:91:b4:dd:ba:d0:13:4d:69:41:99:51:5b:88:
                    b1:bd:db:86:90:ce:3f:80:33:2f:5a:fb:c4:7e:92:
                    94:7b:41:90:8a:d9:74:9b:fc:31:51:ea:cd:9a:07:
                    37:bd:67:5e:c2:7e:a5:fa:05:ae:a8:38:55:2e:8e:
                    29:29:3c:48:45:61:a3:ab:75:eb:f9:69:e0:bf:1c:
                    78:ce:cd:bf:9d:bf:1b:e4:30:ed:ad:ff:6c:48:54:
                    f0:2b:ac:c8:51:3b:9f:2b:4a:29:bc:7d:f8:dc:c7:
                    71:87:a2:e3:2c:f6:cb:ae:31:4b:e5:5f:af:2f:bb:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:23:84:0B:62:52:4E:C5:42:EF:9D:11:BE:B9:FD:F3:1D:3B:51:7C
            X509v3 Authority Key Identifier:
                keyid:BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a333030303a3a2f33362d3336203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         42:bc:16:3d:00:32:bf:f1:ce:9c:f9:bc:36:be:3f:9e:e2:e4:
         37:61:03:e1:dc:a3:1d:97:54:55:7b:dd:7a:41:63:7b:7a:84:
         9b:b4:09:4e:2d:f0:e3:64:ff:4f:be:7d:aa:44:98:24:06:44:
         2a:cb:4f:d6:3f:df:dd:b2:76:41:9b:76:8a:f0:e9:38:f8:02:
         e9:06:b2:fb:8c:71:12:31:09:27:30:75:1c:54:c2:12:64:4d:
         28:21:32:c7:22:37:75:0a:ec:2e:18:4a:cc:97:d0:d2:27:1a:
         c1:3f:da:73:fc:74:b3:00:8d:06:d0:51:42:f1:55:25:ce:48:
         d3:a6:0f:25:3f:d0:50:f2:09:5e:c4:19:92:3d:49:00:74:a6:
         71:7d:8f:b3:e4:6e:90:70:c9:ab:25:ef:48:65:13:bd:ae:25:
         58:34:88:a3:9d:8d:51:12:71:5b:a9:78:9b:83:fb:7a:89:e5:
         00:4f:a5:44:bf:d1:41:b1:60:70:cf:84:da:d1:c0:4f:86:c5:
         8e:0f:89:27:70:cb:d6:01:17:1f:db:07:cd:1e:35:89:ec:cf:
         8a:ae:19:55:ba:b7:3a:32:19:d1:f1:be:e0:21:b9:a6:04:33:
         4d:df:54:99:b4:d4:86:aa:9d:dd:6f:f4:56:ab:82:73:f0:09:
         f1:cc:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:34:33 2025 by rpki-client