Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/323830343a386534343a3a2f33322d3438203d3e20323733343134.roa
File:                     323830343a386534343a3a2f33322d3438203d3e20323733343134.roa (raw, json)
Hash identifier:          NpcxWvXzal1YKXgip4gJbMKKp8E5cO//NlFEyag8Gr0=
Subject key identifier:   03:C4:F1:93:A5:F6:B9:2F:DC:A6:66:76:62:95:E3:54:47:D3:2F:65
Certificate issuer:       /CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F
Certificate serial:       21D175B9D61DAC093A02DAF63FA6B1C0A70B216B
Authority key identifier: 1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/323830343a386534343a3a2f33322d3438203d3e20323733343134.roa
Signing time:             Mon 12 May 2025 17:42:52 +0000
ROA not before:           Mon 12 May 2025 17:37:52 +0000
ROA not after:            Mon 11 May 2026 17:42:52 +0000
asID:                     273414
IP address blocks:        2804:8e44::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl
                          rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 20:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d1:75:b9:d6:1d:ac:09:3a:02:da:f6:3f:a6:b1:c0:a7:0b:21:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F
        Validity
            Not Before: May 12 17:37:52 2025 GMT
            Not After : May 11 17:42:52 2026 GMT
        Subject: CN=03C4F193A5F6B92FDCA666766295E35447D32F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7e:0e:54:2e:8b:10:81:54:8c:fb:ec:57:0c:
                    32:ad:f0:6a:7e:4b:09:25:0e:6b:42:a4:e9:b8:e9:
                    b6:1e:1e:a2:45:f6:58:ac:2c:57:50:6c:f1:d7:9b:
                    37:13:91:d8:67:43:9f:1e:ae:d5:71:36:5a:10:21:
                    6a:c0:43:43:cf:e7:8a:4f:c7:f9:e5:fa:7e:48:33:
                    41:c9:07:12:09:e4:02:bb:54:39:ce:d4:bc:2e:c0:
                    37:69:e3:89:d5:96:78:8f:43:21:04:ff:53:cc:83:
                    59:22:a8:9a:c6:1a:93:46:83:79:b5:b2:43:ec:f0:
                    32:91:13:ce:ba:d2:31:71:75:1c:db:93:e0:9c:32:
                    10:14:1e:6d:88:a5:de:b1:37:e9:50:f6:ab:b3:bb:
                    a0:9c:70:b6:1f:bc:18:23:c6:4d:56:3d:ad:73:08:
                    57:50:a8:62:b2:5f:ac:9f:da:76:a5:45:a7:4c:2b:
                    2b:e2:59:7b:6f:ef:38:a7:4b:63:54:90:c9:38:a3:
                    c1:47:43:15:71:d5:51:f8:88:a7:e3:7a:04:58:bd:
                    22:94:ba:94:17:9d:60:31:a6:93:87:b6:a5:78:19:
                    fb:7a:ad:5d:aa:22:54:33:43:13:64:3d:78:e2:80:
                    e0:35:b9:e7:7b:50:c4:78:d9:29:ce:76:c5:74:09:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C4:F1:93:A5:F6:B9:2F:DC:A6:66:76:62:95:E3:54:47:D3:2F:65
            X509v3 Authority Key Identifier:
                keyid:1C:EF:DC:A7:03:29:B9:DC:D2:17:60:9B:D9:CE:59:42:FE:1C:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1CEFDCA70329B9DCD217609BD9CE5942FE1C6A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5G9HcUzPADcdaxNyCTNJKTaMH6SCxyci91PVX5XamCX/0/323830343a386534343a3a2f33322d3438203d3e20323733343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e44::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:22:91:b2:c8:76:7a:6e:5c:8b:18:d2:8f:90:a4:b0:44:f7:
         58:42:5d:c5:25:01:0c:3c:fb:9d:24:52:94:9a:54:12:36:21:
         9a:82:5c:cc:56:88:31:0d:f7:eb:0d:e4:7f:cf:c6:11:d9:a6:
         d0:dc:6d:c5:7a:2e:7b:7b:2c:55:5b:02:80:22:67:08:cf:2f:
         a0:50:f2:92:b9:5a:c9:0a:1d:5c:c0:c0:3e:18:7b:85:68:8f:
         0a:e4:07:29:39:a3:42:ff:1d:e9:49:e8:f2:57:4a:d5:05:43:
         60:5a:a8:78:4e:da:15:54:c7:97:96:f4:fe:79:78:3e:c5:52:
         d3:3e:46:5b:9f:10:17:8a:cf:ea:5a:7b:f6:a3:f3:72:c0:d5:
         13:bd:f3:75:ff:ea:bc:12:2c:ef:02:79:2a:b9:0c:bc:da:a5:
         3a:d6:72:03:9c:56:7a:83:26:ef:8a:90:c3:a8:86:08:14:23:
         db:f6:e3:bf:4c:a9:25:67:e1:a4:55:4e:8e:7f:04:1f:21:0a:
         9f:81:6d:68:29:73:b9:eb:4b:e1:49:d7:5d:e5:ae:19:87:1a:
         d4:63:07:08:98:23:6a:ee:8a:e3:5a:52:4f:12:66:3e:e1:0d:
         6c:01:cf:ad:a7:d1:26:33:d7:e7:11:6e:d2:0c:6d:9c:04:6c:
         71:16:f1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:55:56 2025 by rpki-client