Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33342d3334203d3e20323734373236.roa
File:                     323830343a393261383a383030303a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier:          UMN0h8tdivAZTrfEpZdgDjJcE2vfF3ASUqVEdcNPRxA=
Subject key identifier:   0A:C1:47:3A:4D:C7:7D:95:C7:BE:DE:5F:47:1A:65:6F:89:18:89:29
Certificate issuer:       /CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
Certificate serial:       25989DE4314B69185EB3E84746EED39E4A79DB5E
Authority key identifier: BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33342d3334203d3e20323734373236.roa
Signing time:             Fri 23 May 2025 21:55:41 +0000
ROA not before:           Fri 23 May 2025 21:50:41 +0000
ROA not after:            Fri 22 May 2026 21:55:41 +0000
asID:                     274726
IP address blocks:        2804:92a8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 18:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:98:9d:e4:31:4b:69:18:5e:b3:e8:47:46:ee:d3:9e:4a:79:db:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
        Validity
            Not Before: May 23 21:50:41 2025 GMT
            Not After : May 22 21:55:41 2026 GMT
        Subject: CN=0AC1473A4DC77D95C7BEDE5F471A656F89188929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f4:9c:7a:64:b7:8f:d1:31:fd:2b:4d:cc:98:
                    2b:1d:a5:b9:56:6b:45:fa:e6:9f:a1:b1:9e:af:d4:
                    41:6e:89:a0:b9:3f:4d:23:4e:99:8d:73:e9:ee:cf:
                    f0:81:27:b9:63:36:9e:a2:94:6e:be:a1:08:07:7f:
                    c2:f7:5d:16:c9:ab:bd:d4:ae:b0:e6:af:5c:d9:18:
                    e8:0d:31:3a:95:94:0f:fd:98:97:85:fb:b0:48:fb:
                    79:df:6e:c9:4e:98:02:98:5c:c0:86:ba:82:6b:9d:
                    a4:61:6e:1e:52:55:5e:6f:01:44:24:8c:ea:34:aa:
                    af:6f:86:9f:81:73:20:50:cf:0d:79:b1:a7:b3:59:
                    33:38:e0:7f:26:f1:4c:dc:fa:48:ff:8a:b0:3f:de:
                    6c:6b:66:13:c2:d0:75:bf:2a:22:12:a0:40:be:22:
                    dc:ce:ec:c3:60:bb:81:d8:28:aa:59:77:fa:dd:4c:
                    71:23:e7:76:41:21:f9:70:bd:03:c6:b8:f0:96:79:
                    73:18:90:d3:d7:6f:36:f6:9c:9f:48:9f:ea:8f:95:
                    4f:d0:3c:43:4c:b8:6c:f0:4e:5d:3e:6e:2e:2c:4c:
                    f8:e6:96:94:77:c6:b9:4a:1e:c8:34:dd:f0:fa:59:
                    20:7f:82:9e:27:15:37:94:ce:a8:2e:df:60:a4:d3:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C1:47:3A:4D:C7:7D:95:C7:BE:DE:5F:47:1A:65:6F:89:18:89:29
            X509v3 Authority Key Identifier:
                keyid:BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a383030303a3a2f33342d3334203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:28:48:a5:b9:21:1f:d1:0e:bf:a8:b2:04:65:9e:0f:45:62:
         33:d3:15:07:2b:00:3b:21:8e:8c:a8:e5:49:25:1b:a8:05:1e:
         17:96:c9:d2:09:0a:c9:fb:06:3f:5d:73:a2:b3:95:93:28:8a:
         26:72:ec:89:74:0b:03:72:3b:72:c3:86:a2:9b:3a:a2:91:29:
         2e:e5:e4:a0:50:c9:44:61:cc:cf:db:0f:25:88:18:77:23:8a:
         30:8e:fa:22:36:cf:56:65:cb:d4:4a:20:52:65:ea:d6:3f:f5:
         2f:2c:53:b8:58:05:50:af:1e:ca:9b:72:af:e1:cc:1c:74:47:
         cd:b8:6d:12:a3:21:84:0d:e0:cd:ef:b5:a5:d6:0e:98:37:25:
         98:03:0c:5b:a4:eb:88:00:74:76:48:65:53:cd:c9:a0:4e:ea:
         ac:6d:95:4d:2e:37:6e:48:8c:a1:eb:c9:95:08:94:41:83:6c:
         ad:84:96:08:0f:e3:e7:90:46:45:49:62:2e:be:98:56:3a:b9:
         c1:f0:b8:4e:fa:bd:e5:ba:b0:9a:92:78:14:e3:65:5b:04:43:
         01:d8:c3:d0:9d:c9:65:87:f1:7b:a1:1c:35:87:ec:c1:d1:c7:
         49:0f:a1:a6:68:58:78:f3:9e:fd:0b:45:b1:ef:6b:4c:24:09:
         6e:f4:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:34:59 2025 by rpki-client