Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/323830343a323965343a3a2f33322d313238203d3e20323634303432.roa
File:                     323830343a323965343a3a2f33322d313238203d3e20323634303432.roa (raw, json)
Hash identifier:          6a4hW4PLh2F8bHNJZDD/PfOVLrWZfxA4WKw3HFkFXTk=
Subject key identifier:   63:54:D2:37:2A:EF:51:71:EF:E7:D8:CF:AF:86:58:05:5C:47:9B:84
Certificate issuer:       /CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
Certificate serial:       5F0A8FFF9C95EA8D3993D5BA948D0DA4EF54197A
Authority key identifier: 59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/323830343a323965343a3a2f33322d313238203d3e20323634303432.roa
Signing time:             Thu 06 Mar 2025 15:09:28 +0000
ROA not before:           Thu 06 Mar 2025 15:04:28 +0000
ROA not after:            Thu 05 Mar 2026 15:09:28 +0000
asID:                     264042
IP address blocks:        2804:29e4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl
                          rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0a:8f:ff:9c:95:ea:8d:39:93:d5:ba:94:8d:0d:a4:ef:54:19:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598DA71AEBD137B402470BB062F68BE6315A8ABF
        Validity
            Not Before: Mar  6 15:04:28 2025 GMT
            Not After : Mar  5 15:09:28 2026 GMT
        Subject: CN=6354D2372AEF5171EFE7D8CFAF8658055C479B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:ca:dd:cc:0b:2e:f3:c6:ae:f0:b1:1f:c9:
                    ed:aa:dd:38:98:b1:66:7b:1b:43:d7:5d:bc:de:60:
                    cf:cc:af:35:46:10:db:92:5e:f8:ea:32:86:f0:b9:
                    87:73:72:d0:ce:a9:f0:49:c3:4d:c1:77:6e:49:2b:
                    9c:ee:0f:b8:18:c2:12:5d:a3:53:9f:ee:1c:dc:7e:
                    83:b9:1e:fa:06:77:0d:3c:b6:36:e9:3e:2f:f6:79:
                    51:69:75:68:b2:04:ad:c6:6b:15:7f:f8:a5:67:2e:
                    17:e1:c2:3b:be:ad:cb:87:86:8d:b1:a9:86:97:8e:
                    1d:3a:ce:36:dd:aa:8d:65:d0:99:67:42:61:c1:3e:
                    86:1d:93:35:8d:5e:34:82:7d:51:5e:94:10:2d:7c:
                    54:20:fb:97:f3:32:67:78:7d:fb:93:67:8b:f8:c4:
                    77:f8:ff:53:e5:2c:bf:11:50:e3:a0:2d:b4:0b:f0:
                    bc:9b:37:e6:da:34:77:95:a1:de:9b:e6:59:b5:1c:
                    fa:04:53:2a:46:16:33:06:e6:a1:03:ac:18:d5:0c:
                    a6:6a:db:cd:ed:c2:4d:00:73:ec:27:1e:ae:97:f0:
                    49:a6:a8:0b:49:85:fd:a9:5c:16:e6:50:e1:67:4b:
                    2b:45:4f:82:ca:1d:19:a0:3a:62:b3:49:af:6d:12:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:54:D2:37:2A:EF:51:71:EF:E7:D8:CF:AF:86:58:05:5C:47:9B:84
            X509v3 Authority Key Identifier:
                keyid:59:8D:A7:1A:EB:D1:37:B4:02:47:0B:B0:62:F6:8B:E6:31:5A:8A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/598DA71AEBD137B402470BB062F68BE6315A8ABF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EqZG7LgMfjERjfb43c318jH5vPiyj2K4S1JgdYSDkQZb/1/323830343a323965343a3a2f33322d313238203d3e20323634303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:51:60:13:f7:84:d0:76:c8:02:71:6b:04:cb:6e:b2:2a:
         0e:e1:9d:ba:14:a2:b3:b8:56:2a:fe:cc:94:eb:76:aa:02:b6:
         53:eb:7d:7b:4a:04:62:b9:fb:ee:5b:b2:6a:7a:52:61:46:e0:
         28:38:2b:89:00:a1:83:4c:6f:d7:1e:65:44:c4:23:a4:49:66:
         71:55:f7:9f:50:a8:ad:1a:da:71:43:52:7d:15:6c:44:ce:b7:
         96:0f:bb:41:11:1f:6d:2f:01:fe:6a:26:cd:9b:96:5e:80:23:
         99:00:68:09:cc:98:2c:2b:99:82:d4:4a:bb:7e:4f:ae:d5:ab:
         2e:3e:b8:35:70:a6:a9:aa:46:03:90:0a:46:74:de:5a:d5:ba:
         5a:b3:bf:f6:a9:a1:94:d3:9e:91:f9:84:91:df:d5:a3:5e:bf:
         56:b3:9e:c2:bc:a8:76:34:f3:93:d3:39:53:ca:30:aa:d2:f9:
         fb:d4:21:3c:37:12:c4:e1:34:2e:d9:38:22:b2:be:b2:8f:75:
         6b:cc:ce:12:9a:e1:13:32:4d:c9:e2:e5:3c:cd:84:cd:95:4a:
         91:00:f6:24:ab:da:c6:99:37:7f:3d:a5:ff:16:77:3b:f3:3b:
         5a:89:47:3c:69:02:61:42:18:ba:8a:7e:a1:03:05:63:ec:80:
         61:83:67:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:23:27 2025 by rpki-client