Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/323830343a353463303a3a2f33322d313238203d3e20323638363638.roa
File:                     323830343a353463303a3a2f33322d313238203d3e20323638363638.roa (raw, json)
Hash identifier:          FfHFO6q7SrPv5YkaZCJ5uZmzMi3udScNHZXDi2iReDA=
Subject key identifier:   58:C6:40:AC:A9:94:FB:29:96:A6:74:2C:7C:AA:D1:48:2F:60:C7:16
Certificate issuer:       /CN=2FF3BD981631E49037509A952007559286688690
Certificate serial:       6812AC56B4F8DDC1DE90E24AADE9B3C0F3548AEA
Authority key identifier: 2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/323830343a353463303a3a2f33322d313238203d3e20323638363638.roa
Signing time:             Mon 26 May 2025 13:39:23 +0000
ROA not before:           Mon 26 May 2025 13:34:23 +0000
ROA not after:            Mon 25 May 2026 13:39:23 +0000
asID:                     268668
IP address blocks:        2804:54c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl
                          rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 03:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:12:ac:56:b4:f8:dd:c1:de:90:e2:4a:ad:e9:b3:c0:f3:54:8a:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF3BD981631E49037509A952007559286688690
        Validity
            Not Before: May 26 13:34:23 2025 GMT
            Not After : May 25 13:39:23 2026 GMT
        Subject: CN=58C640ACA994FB2996A6742C7CAAD1482F60C716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:db:7a:e1:c9:46:e2:31:97:09:fe:83:a2:77:
                    2d:e8:6d:8e:cf:d9:49:f8:68:de:08:28:97:ad:43:
                    5f:f4:ce:52:b1:6e:c1:46:e3:82:75:ff:9a:07:ed:
                    7c:31:28:e9:a1:a1:e8:c8:d1:64:f4:41:63:eb:84:
                    75:61:53:f9:e6:8a:22:c5:62:83:2f:15:d8:ee:a8:
                    39:67:13:42:28:06:d6:75:cb:18:9c:d0:1f:28:8d:
                    9d:70:76:73:5c:6e:63:ad:b8:67:3f:84:d9:21:f3:
                    8e:77:ac:74:32:21:22:33:f5:9f:d0:aa:e0:1e:2f:
                    40:9c:17:89:09:c2:10:49:2c:a8:20:40:3a:86:fb:
                    a7:84:f2:b0:41:60:b4:45:5f:11:4e:59:ab:7a:d2:
                    9b:25:5c:b6:e6:eb:bd:de:11:60:39:df:a8:90:01:
                    d5:39:41:74:db:ff:39:42:4d:4c:4b:b4:64:a9:0b:
                    21:c0:70:f7:fb:dd:92:bf:5c:a3:9f:88:da:71:44:
                    dd:cf:5d:d1:8c:0d:db:4a:53:f0:31:ca:51:70:37:
                    a6:d4:70:dd:fa:1e:7d:74:83:d2:11:a8:94:0d:7d:
                    70:8c:88:16:c3:ad:bc:07:33:42:9a:a7:f5:5c:16:
                    7d:35:2a:8a:55:7d:15:4e:0b:75:20:42:ab:70:3b:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C6:40:AC:A9:94:FB:29:96:A6:74:2C:7C:AA:D1:48:2F:60:C7:16
            X509v3 Authority Key Identifier:
                keyid:2F:F3:BD:98:16:31:E4:90:37:50:9A:95:20:07:55:92:86:68:86:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/2FF3BD981631E49037509A952007559286688690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF3BD981631E49037509A952007559286688690.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErjBfccfHMr5TNsq5QCf5CwGbEVkKfsJ7pdFqmgkLmCY/0/323830343a353463303a3a2f33322d313238203d3e20323638363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:c8:3b:6a:f4:7e:68:26:6d:b0:a4:d2:ec:8f:b2:56:95:a2:
         71:92:32:e6:3b:bd:81:2e:24:c2:74:2c:de:e4:a0:6c:42:d5:
         1c:e9:a6:6c:bb:83:39:9c:d9:80:fb:57:2a:43:59:5a:1e:f4:
         36:08:e5:29:3d:7d:9a:f3:9f:c9:f6:08:67:66:db:eb:d3:aa:
         38:28:48:86:a6:ab:49:6d:8f:c3:5c:6e:67:2b:fd:7d:e3:2b:
         5b:22:34:08:1a:31:ff:ab:d0:68:c4:f9:78:f1:9a:55:e2:53:
         fb:34:0b:d8:58:a9:5a:65:7e:b7:d4:a8:70:71:c3:39:cd:7c:
         45:ec:cf:57:8a:25:04:28:4a:55:bd:c7:23:f1:48:82:14:2c:
         66:00:82:fb:6b:d2:0c:c7:9c:2c:44:d2:8d:aa:b2:ed:01:f0:
         bb:ee:24:4c:b2:43:96:4e:79:52:52:2d:21:64:37:b0:6d:38:
         27:d6:9f:f0:62:76:4e:c0:74:df:18:5e:e2:d5:a3:6f:af:a6:
         f5:99:55:aa:68:9b:3f:e5:0d:23:e3:71:b5:d0:3a:89:2e:f3:
         2b:e6:36:6a:6c:fd:9c:76:c4:cb:01:d6:39:42:8b:28:b9:23:
         8a:a0:f9:77:5f:53:2a:cc:2e:48:ae:8f:b0:af:44:91:c3:65:
         a1:3b:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:36:08 2025 by rpki-client