Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3334203d3e20323634313330.roa
File:                     323830343a323265383a3a2f33322d3334203d3e20323634313330.roa (raw, json)
Hash identifier:          NLnQzBtfTkvHrB36H+1ninCvRg8LeH5/g3I9G7MKrR8=
Subject key identifier:   5F:EF:22:D1:36:AF:6B:95:41:1A:4C:77:F5:66:18:0D:31:2C:6A:91
Certificate issuer:       /CN=E47C0193099D783BC9228A8B85CB28868735A4E2
Certificate serial:       596246994F71E0E10DD556933F71645E241C47BD
Authority key identifier: E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3334203d3e20323634313330.roa
Signing time:             Tue 20 May 2025 16:39:58 +0000
ROA not before:           Tue 20 May 2025 16:34:58 +0000
ROA not after:            Tue 19 May 2026 16:39:58 +0000
asID:                     264130
IP address blocks:        2804:22e8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl
                          rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 04:06:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:62:46:99:4f:71:e0:e1:0d:d5:56:93:3f:71:64:5e:24:1c:47:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47C0193099D783BC9228A8B85CB28868735A4E2
        Validity
            Not Before: May 20 16:34:58 2025 GMT
            Not After : May 19 16:39:58 2026 GMT
        Subject: CN=5FEF22D136AF6B95411A4C77F566180D312C6A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6c:b7:26:7d:6a:41:6f:0f:b7:37:06:89:fc:
                    e1:be:bb:f8:ee:b9:7c:fd:db:66:42:a7:a8:6c:9c:
                    c1:87:ba:88:67:b7:0e:b1:c6:8c:a8:9d:88:f9:09:
                    af:6e:6b:59:71:c4:6b:72:7a:d2:64:07:cb:ac:6d:
                    99:96:a8:9f:85:db:38:d7:dc:bb:ad:d5:31:dd:a2:
                    a5:74:d2:2d:ab:02:3d:f5:dc:ce:15:ca:7f:7e:8b:
                    61:8d:bc:02:be:3e:82:66:58:44:74:d8:aa:c4:13:
                    0b:be:2c:56:2a:6b:c9:de:de:eb:48:09:13:8a:d6:
                    be:bc:cd:24:07:3b:89:86:21:33:60:ea:76:95:37:
                    f2:c9:95:45:02:03:f7:0e:4e:fa:b2:d2:7e:95:21:
                    78:73:87:f1:e7:4f:3b:49:4d:9f:45:ba:93:cc:82:
                    6b:39:a0:19:92:2a:05:69:e3:20:be:ea:cd:f2:97:
                    c7:07:d9:48:f7:41:54:87:b6:45:3f:ca:b6:03:60:
                    f0:da:73:ec:8b:5f:c8:67:66:ba:0e:35:b5:2d:47:
                    97:89:09:8a:c8:c8:e2:f2:56:38:c5:87:03:d2:9e:
                    e1:28:5b:ab:e2:ed:30:5a:0e:65:69:af:a0:cd:07:
                    22:14:a0:80:e4:a3:01:b5:2a:ae:d6:93:20:47:24:
                    88:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EF:22:D1:36:AF:6B:95:41:1A:4C:77:F5:66:18:0D:31:2C:6A:91
            X509v3 Authority Key Identifier:
                keyid:E4:7C:01:93:09:9D:78:3B:C9:22:8A:8B:85:CB:28:86:87:35:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/E47C0193099D783BC9228A8B85CB28868735A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47C0193099D783BC9228A8B85CB28868735A4E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/323830343a323265383a3a2f33322d3334203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:2a:fc:35:86:72:e2:cd:98:ad:e1:39:4a:d1:f2:d8:63:cf:
         a2:c3:71:bc:f8:0b:7a:ab:04:e3:13:85:88:40:4d:a3:5f:7d:
         c4:e9:f7:57:2f:46:c1:3b:5c:a1:1a:da:6c:c2:f8:2f:87:c3:
         3d:c1:c8:66:ae:d9:fd:92:d5:ac:9f:f9:6f:6a:44:e8:80:32:
         d7:13:e5:df:ab:5f:c9:ae:22:f9:82:24:29:72:a8:f9:5f:e9:
         e9:59:32:37:35:43:06:91:11:6c:a5:67:57:ca:65:a4:ba:da:
         18:d7:62:b1:2b:28:db:c0:9f:a1:7c:bb:3f:08:00:d6:65:c0:
         f4:10:92:05:85:c3:96:70:23:5b:e1:2a:a6:cc:7c:69:b8:10:
         d0:43:4e:40:04:30:39:b1:d7:12:a8:57:11:71:0c:14:17:b2:
         8f:f9:f9:61:9e:9d:b3:2b:f1:07:04:df:1b:62:6c:99:c2:fe:
         9b:e4:a4:76:e9:29:87:69:b1:f9:ee:c4:9c:a6:87:10:78:74:
         a0:5d:66:51:c6:a9:7e:8d:59:fc:b9:80:a2:a5:6c:43:58:a1:
         38:d7:82:b9:12:61:ae:ca:1e:fb:74:90:51:42:4d:f9:8b:79:
         5a:57:8e:84:7f:5d:25:7f:9f:d3:2d:58:96:5b:51:6e:de:d3:
         28:4a:70:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:24:29 2025 by rpki-client