Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
File:                     323830343a393261383a3a2f33342d3334203d3e20323734373236.roa (raw, json)
Hash identifier:          sfZBvRnD3brcz4EdPF6GMh+yPqodQjApXmrmzsLpdiU=
Subject key identifier:   25:07:4F:05:6F:CA:3D:00:F7:85:5B:CE:F6:46:5B:DB:50:C5:7B:D1
Certificate issuer:       /CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
Certificate serial:       43F13A3C5C4615E0754F3338FC5259264F742161
Authority key identifier: BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa
Signing time:             Fri 23 May 2025 21:55:09 +0000
ROA not before:           Fri 23 May 2025 21:50:09 +0000
ROA not after:            Fri 22 May 2026 21:55:09 +0000
asID:                     274726
IP address blocks:        2804:92a8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl
                          rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 00:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f1:3a:3c:5c:46:15:e0:75:4f:33:38:fc:52:59:26:4f:74:21:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC5ABBC6842B5E24B06C80E85E94A43710EB4E92
        Validity
            Not Before: May 23 21:50:09 2025 GMT
            Not After : May 22 21:55:09 2026 GMT
        Subject: CN=25074F056FCA3D00F7855BCEF6465BDB50C57BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:79:e9:3e:62:7c:4f:85:49:95:96:e3:d3:b3:
                    8f:c1:fe:80:e4:94:b3:d1:d0:f0:01:9f:d5:1a:30:
                    1f:20:7d:d9:07:9f:1a:3b:f7:70:03:3b:08:d9:c0:
                    97:a0:3d:94:d9:d0:3d:a5:bb:16:a2:0d:b9:0e:fe:
                    92:b4:cd:ae:d8:9e:e5:f1:ef:91:d2:b2:de:5f:6c:
                    78:a4:20:25:89:87:ba:af:33:95:86:8a:43:ef:17:
                    de:d5:e4:0a:a7:02:91:5f:bc:a6:44:c5:ef:a1:93:
                    c4:e5:48:b4:8f:26:cf:07:b4:d0:cf:f9:46:bb:b3:
                    86:fc:58:6c:71:2a:83:b9:f1:ff:17:16:42:77:3d:
                    45:88:e5:e0:7d:33:70:16:37:b3:98:60:7b:fd:47:
                    54:37:50:78:fd:c3:70:5b:6e:fe:89:7b:73:4f:81:
                    4e:7b:6c:a9:1d:d2:24:99:9c:33:59:4b:92:62:54:
                    01:f2:f3:fd:63:ef:71:bd:8a:7e:85:75:38:de:9a:
                    9b:2b:3e:01:92:78:02:09:5f:c8:b1:b1:1a:ca:0b:
                    1f:f6:89:48:3f:42:dd:30:97:d7:c2:88:9f:b7:5d:
                    3f:1d:58:02:d8:6c:cf:83:0e:4c:54:96:ea:55:8f:
                    6c:e1:bb:1e:76:f8:5b:3c:80:3a:84:f7:7f:d7:70:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:07:4F:05:6F:CA:3D:00:F7:85:5B:CE:F6:46:5B:DB:50:C5:7B:D1
            X509v3 Authority Key Identifier:
                keyid:BC:5A:BB:C6:84:2B:5E:24:B0:6C:80:E8:5E:94:A4:37:10:EB:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC5ABBC6842B5E24B06C80E85E94A43710EB4E92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a3a2f33342d3334203d3e20323734373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:92a8::/34

    Signature Algorithm: sha256WithRSAEncryption
         30:34:bf:9a:f8:8f:70:bf:a8:e9:25:d5:b6:14:0a:db:9f:e8:
         c0:d4:a0:90:5b:d1:c9:f0:27:b2:38:71:ff:d1:d3:d0:21:fd:
         22:be:64:36:8f:53:a8:55:27:7b:aa:8e:f8:7f:4c:9c:db:51:
         03:40:6a:e8:f6:31:5f:8f:30:8a:d4:d0:ae:13:c6:a9:49:d0:
         4b:73:b7:7f:e8:fc:75:2d:e4:2b:57:9a:18:d1:37:f0:98:67:
         ce:8e:5b:dc:29:3a:69:ed:bb:28:7d:cc:55:69:b4:5c:50:db:
         e7:4c:51:6f:57:6b:49:c1:ac:d4:09:ad:25:e0:d0:e0:26:fd:
         35:13:ef:82:6e:0e:61:79:42:e9:af:54:cf:07:28:b0:e9:59:
         fe:f3:2e:2e:ed:6e:46:ec:74:7b:09:7e:9c:fe:c5:5e:9c:30:
         a1:f3:8d:d9:73:2b:3c:3d:48:0a:bd:ac:a8:8b:9b:f1:1c:28:
         c7:9e:58:be:e7:de:f0:49:4c:65:c7:bc:b6:21:1b:53:3c:c8:
         f2:df:65:ef:53:69:4e:3d:bf:1a:07:a4:23:21:66:b3:d7:70:
         5d:a6:a0:f0:df:c3:88:fa:78:64:7b:10:ca:53:88:1e:a9:96:
         a3:39:4a:5a:79:e9:f9:1b:05:3d:81:47:9f:05:39:f6:9f:66:
         dd:a8:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:07:40 2025 by rpki-client