Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33332d3333203d3e20323734373236.roa
File:                     323830343a393261383a3a2f33332d3333203d3e20323734373236.roa (raw, json)
Hash identifier:          HZ/+RHLlDQlp7ssgL5Q9kZDtl4enNHVDYc4KKFdRwTo=
Subject key identifier:   E0:CA:CD:94:AC:08:F3:25:45:B1:10:15:63:79:44:FF:17:A4:DA:50
Certificate issuer:       /CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
Certificate serial:       2BEF68403B4CB3726893CB1C1D3CCB8B95A2B024
Authority key identifier: BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33332d3333203d3e20323734373236.roa
Signing time:             Fri 23 May 2025 21:55:06 +0000
ROA not before:           Fri 23 May 2025 21:50:06 +0000
ROA not after:            Fri 22 May 2026 21:55:06 +0000
asID:                     274726
IP address blocks:        2804:92a8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 07:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ef:68:40:3b:4c:b3:72:68:93:cb:1c:1d:3c:cb:8b:95:a2:b0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
        Validity
            Not Before: May 23 21:50:06 2025 GMT
            Not After : May 22 21:55:06 2026 GMT
        Subject: CN=E0CACD94AC08F32545B11015637944FF17A4DA50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9b:62:c5:7a:a8:d5:91:87:ee:44:ac:90:b6:
                    0b:b5:8a:d8:9f:2a:d0:02:a8:a7:52:ec:59:86:d2:
                    7b:5e:8e:c4:9e:88:b4:8f:17:12:7e:af:41:7e:dd:
                    53:62:be:32:c6:1c:d4:f3:d7:47:9d:24:bc:18:dd:
                    c4:70:e7:37:1b:62:00:d1:96:5c:1a:a6:b9:f2:eb:
                    d7:ed:fc:2d:8a:c8:74:ef:e9:bf:92:f4:5c:93:fd:
                    e5:48:3a:92:e9:c3:50:9d:3c:bb:2f:5c:6c:ae:72:
                    30:b4:91:45:83:21:36:bf:7a:8b:89:9d:8f:f3:8e:
                    c2:70:82:4f:ad:9c:f7:52:c4:92:e8:9d:fd:0f:e3:
                    82:a3:c3:01:7d:5d:82:43:e6:a5:be:cb:9e:ae:0c:
                    b1:0e:f7:fe:ba:06:5f:ef:1e:36:02:0b:d1:d1:45:
                    1c:eb:c5:48:04:55:e8:13:a0:e8:4e:db:5d:6a:08:
                    94:3d:9d:95:f2:b1:20:c5:37:18:aa:73:41:bc:ac:
                    7b:12:79:17:dd:16:28:6e:05:77:c2:5f:0c:17:80:
                    d1:24:03:76:cb:46:b0:0b:ed:a2:9b:f0:43:30:93:
                    cd:af:a7:ed:5c:10:ff:0e:4e:f2:09:25:87:fe:99:
                    d1:f2:8e:8e:6e:10:11:52:33:73:bc:c8:2c:4e:b7:
                    56:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CA:CD:94:AC:08:F3:25:45:B1:10:15:63:79:44:FF:17:A4:DA:50
            X509v3 Authority Key Identifier:
                keyid:BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33332d3333203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/33

    Signature Algorithm: sha256WithRSAEncryption
         80:01:13:23:23:9d:7f:4a:b2:56:0b:94:3a:43:14:4b:90:30:
         01:5a:8f:80:55:9d:aa:ab:26:c3:b1:6d:cf:fb:f0:03:9a:3d:
         36:e8:66:f7:dd:bc:e0:fc:2a:6c:13:32:c0:99:07:db:7a:29:
         75:da:d3:8a:e7:56:12:51:a0:0b:86:43:38:ee:33:c4:e5:a7:
         b4:f4:ee:50:e8:e5:a1:0c:c7:1f:14:a5:91:74:56:d1:a3:ab:
         77:6c:9a:93:68:fd:80:b8:3f:90:f4:fc:bb:f5:de:2b:de:49:
         5b:fa:14:72:10:9f:14:65:18:c8:4b:7a:6b:62:89:95:f3:80:
         f4:a9:38:91:c3:0c:6d:2a:63:26:c2:43:10:99:55:52:d3:69:
         99:87:64:b4:08:41:b3:76:ff:2d:af:88:06:1c:16:0b:6c:c1:
         c6:03:27:ff:2a:06:fa:1e:27:60:87:52:84:33:71:a5:4d:21:
         74:bb:fa:de:e9:9a:fd:55:3b:7f:64:e4:78:d2:f0:06:b6:76:
         c6:c2:7a:99:0a:f8:ef:79:c6:09:02:1b:b5:02:11:9b:fd:44:
         0f:f4:7c:33:97:0b:ba:0b:8c:48:a1:15:9c:53:f3:d2:9d:e0:
         4d:66:a6:70:ba:70:b6:ab:78:e1:3d:3e:91:fc:c3:d9:cb:04:
         16:b7:50:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:03:38 2025 by rpki-client