Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a3a2f33322d313236203d3e20323637363238.roa
File:                     323830343a343435633a3a2f33322d313236203d3e20323637363238.roa (raw, json)
Hash identifier:          +WHf/RWC8eE61l6UzxCvf6YyXJ2FdknRQr0KoCVwAaw=
Subject key identifier:   55:4F:14:65:8F:A4:CC:36:F2:AF:B0:BF:4D:D1:DE:DC:7F:C8:15:FF
Certificate issuer:       /CN=CC4C58019807553918DEAD8A63DFB7011B89945A
Certificate serial:       285C3EF07005011CE3C67576950B30BC3C98EB79
Authority key identifier: CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a3a2f33322d313236203d3e20323637363238.roa
Signing time:             Thu 05 Jun 2025 18:56:52 +0000
ROA not before:           Thu 05 Jun 2025 18:51:52 +0000
ROA not after:            Thu 04 Jun 2026 18:56:52 +0000
asID:                     267628
IP address blocks:        2804:445c::/32 maxlen: 126
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/CC4C58019807553918DEAD8A63DFB7011B89945A.crl
                          rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/CC4C58019807553918DEAD8A63DFB7011B89945A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 11:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:5c:3e:f0:70:05:01:1c:e3:c6:75:76:95:0b:30:bc:3c:98:eb:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC4C58019807553918DEAD8A63DFB7011B89945A
        Validity
            Not Before: Jun  5 18:51:52 2025 GMT
            Not After : Jun  4 18:56:52 2026 GMT
        Subject: CN=554F14658FA4CC36F2AFB0BF4DD1DEDC7FC815FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6a:07:eb:af:0e:aa:9e:bb:aa:f5:40:f7:89:
                    5b:f2:98:40:d4:43:f5:6d:2b:ae:85:fe:ae:16:ef:
                    e1:aa:be:d2:9c:91:1a:4d:ac:dd:e8:6a:48:69:1b:
                    be:69:d1:ca:cb:dd:e9:5a:36:84:19:65:d2:4a:1f:
                    44:72:b7:77:7a:9a:a2:5e:a1:09:d3:43:f2:37:11:
                    ea:23:d3:99:bf:ab:b3:6c:a6:8c:b4:bc:b0:35:8e:
                    cc:e3:21:31:d5:4c:bc:c3:fc:31:2f:d2:48:a9:45:
                    6e:1a:87:f2:f8:95:b7:76:20:a6:c8:ec:fa:63:07:
                    ac:5a:26:31:87:2c:42:95:67:b9:ec:37:ad:b7:34:
                    ff:e8:ad:87:93:fa:49:6c:67:50:c4:7d:e8:00:6e:
                    c9:65:89:64:a0:a9:eb:cb:4a:0b:82:10:ee:ff:1d:
                    5e:27:9c:fb:58:91:b0:53:a3:cc:f0:76:9d:a7:4c:
                    c3:63:df:49:65:a4:ee:c6:05:4c:87:ce:d3:20:25:
                    59:98:9b:ab:8f:1a:03:46:46:58:3f:f9:65:86:11:
                    56:05:64:b5:eb:3a:59:d5:c8:90:f6:90:fb:81:eb:
                    15:6b:25:df:cb:a0:71:98:1e:74:ff:9c:53:2f:6c:
                    99:26:36:0d:5c:b4:6e:7e:58:28:09:0c:38:48:df:
                    4d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4F:14:65:8F:A4:CC:36:F2:AF:B0:BF:4D:D1:DE:DC:7F:C8:15:FF
            X509v3 Authority Key Identifier:
                keyid:CC:4C:58:01:98:07:55:39:18:DE:AD:8A:63:DF:B7:01:1B:89:94:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/CC4C58019807553918DEAD8A63DFB7011B89945A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC4C58019807553918DEAD8A63DFB7011B89945A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HE4HFuDBLdZCTAjneirr3pWRAWGZvCCDfudVVtqfeifQ/0/323830343a343435633a3a2f33322d313236203d3e20323637363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:445c::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:91:a6:b5:07:4c:d3:61:29:f2:f0:21:5a:d0:b8:42:d0:
         2e:a6:5f:82:85:7d:b3:1c:7c:89:cc:8c:b3:1c:85:30:96:df:
         8a:03:20:68:54:7d:90:0b:d3:78:33:78:aa:19:1e:45:df:45:
         bf:13:69:a6:e7:a1:8f:38:49:fd:37:a3:be:81:89:3f:ee:80:
         98:34:88:65:aa:d2:a1:bc:60:3a:ea:1e:d7:60:51:bc:0c:e5:
         0b:6c:9b:fd:97:dc:8f:b8:5b:ed:c9:80:5b:83:be:01:8b:f9:
         6a:95:3b:dc:d3:f5:ec:c6:b0:54:42:1f:10:88:12:db:ce:73:
         f1:33:36:2d:34:bf:46:72:de:1c:61:71:a1:1c:83:e4:79:e6:
         c6:46:67:fd:da:83:63:6c:de:0f:cf:21:b0:cd:cb:02:e3:ef:
         31:d8:38:9e:95:8c:9e:23:cf:d4:01:bd:d3:4f:70:eb:21:89:
         9d:71:db:d3:d6:94:ea:f3:f4:d2:42:37:34:a7:7e:28:be:82:
         0d:1b:4a:5d:8e:81:a2:e5:27:8c:8f:0a:a2:0e:d1:3a:1c:8b:
         c0:d7:4c:89:af:82:09:a2:30:dd:2b:45:60:71:60:dc:09:54:
         88:15:31:ff:8c:f1:90:80:2d:a8:37:59:37:f8:4c:1b:3e:ad:
         2b:c2:12:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:08:43 2025 by rpki-client