Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/323830343a336139303a3a2f33322d3336203d3e20323636303936.roa
File:                     323830343a336139303a3a2f33322d3336203d3e20323636303936.roa (raw, json)
Hash identifier:          F7YLm0ork93d8Kra/7Q+GD/3IRXh2NK6V1guZDQEQQs=
Subject key identifier:   78:02:29:5A:05:21:B9:DD:34:8A:3E:D6:13:DF:F7:1A:30:31:83:01
Certificate issuer:       /CN=5D4824580436E9E25FD6D099253DCC3B98F6438C
Certificate serial:       25D9189AA073164FFE5A01B117AFC9B537593BB1
Authority key identifier: 5D:48:24:58:04:36:E9:E2:5F:D6:D0:99:25:3D:CC:3B:98:F6:43:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/323830343a336139303a3a2f33322d3336203d3e20323636303936.roa
Signing time:             Thu 06 Mar 2025 03:31:30 +0000
ROA not before:           Thu 06 Mar 2025 03:26:30 +0000
ROA not after:            Thu 05 Mar 2026 03:31:30 +0000
asID:                     266096
IP address blocks:        2804:3a90::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.crl
                          rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 22:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d9:18:9a:a0:73:16:4f:fe:5a:01:b1:17:af:c9:b5:37:59:3b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D4824580436E9E25FD6D099253DCC3B98F6438C
        Validity
            Not Before: Mar  6 03:26:30 2025 GMT
            Not After : Mar  5 03:31:30 2026 GMT
        Subject: CN=7802295A0521B9DD348A3ED613DFF71A30318301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:23:61:8c:b5:d5:5f:bf:71:5c:d7:64:e5:db:
                    25:54:c3:a4:5e:e1:3e:2e:f3:cf:d7:05:dc:72:42:
                    81:52:45:aa:53:27:86:e4:43:81:44:95:1b:76:38:
                    da:d6:a7:13:59:36:59:fe:ea:fc:b7:03:42:f0:b1:
                    03:82:e9:0a:19:e6:70:f9:7e:f3:8e:a9:eb:cf:de:
                    69:5a:e6:ba:7b:6d:c0:fa:63:f9:46:e8:71:53:68:
                    2d:7f:95:ec:5f:47:50:9c:71:8a:9c:a1:c0:db:3c:
                    4b:51:76:5d:46:11:70:25:6e:3e:2f:ed:ce:24:01:
                    c8:a9:09:27:bd:dd:01:8c:85:b0:40:80:fc:d5:5a:
                    7f:33:55:51:eb:3f:57:1a:a1:84:ca:22:a7:e2:2e:
                    bd:db:d3:9c:a4:02:ef:fe:35:89:16:78:59:1c:b0:
                    c0:76:50:f2:d4:0b:cf:be:4c:bb:0d:63:a7:81:f3:
                    48:40:0f:c1:91:4e:dc:67:49:f3:b1:a5:29:65:1d:
                    4f:b8:83:47:bf:eb:98:c0:80:80:86:41:f4:a4:2c:
                    8b:73:07:5b:57:56:2e:73:13:45:79:b1:ec:07:8c:
                    13:1a:41:74:a2:df:36:ec:9a:f4:4c:d6:b1:c8:5a:
                    9a:90:1b:36:c4:0c:be:fe:23:4a:e1:ee:83:a7:29:
                    1b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:29:5A:05:21:B9:DD:34:8A:3E:D6:13:DF:F7:1A:30:31:83:01
            X509v3 Authority Key Identifier:
                keyid:5D:48:24:58:04:36:E9:E2:5F:D6:D0:99:25:3D:CC:3B:98:F6:43:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D4824580436E9E25FD6D099253DCC3B98F6438C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLtGh7uZQpqNfmQvW9BuzF2FDWHqAkK44QYEQ5PPBJpe/1/323830343a336139303a3a2f33322d3336203d3e20323636303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:93:75:73:da:d1:0d:b9:73:7c:82:0c:24:86:db:8f:f9:16:
         0a:27:d9:11:1b:8f:57:d7:d8:b4:d2:ab:6f:90:05:b7:cc:01:
         17:7c:ed:a8:fc:c8:06:d4:b8:0a:20:8e:54:bd:5a:c7:8c:f2:
         44:11:89:73:d9:05:18:73:1d:d2:c9:92:29:10:b7:63:96:cb:
         09:6e:57:e9:dc:a2:e9:1c:89:14:0b:5f:ba:f3:96:5c:b7:7b:
         09:e1:61:6e:a7:88:89:d9:be:01:38:4f:75:94:34:84:76:42:
         35:cd:d5:07:42:bf:98:6a:ad:64:19:7c:0b:64:4d:e7:e5:33:
         e9:b0:f0:5b:46:9e:b9:39:49:75:c2:cd:32:ce:6b:6b:a0:73:
         c2:51:ba:55:10:5a:59:32:1a:45:ae:29:38:0d:62:ea:73:46:
         5b:7f:79:bd:78:f5:38:87:52:19:11:f7:fc:92:ac:d8:5c:d6:
         20:e5:59:fd:6c:1a:38:9c:4b:74:e7:01:92:8f:06:50:5b:b6:
         81:ff:dd:a8:3f:10:89:18:7b:bd:eb:7c:83:e7:86:d8:0e:aa:
         a7:72:39:16:6a:ce:23:ec:e5:c7:24:ae:a9:71:d4:f2:5a:80:
         34:32:1e:39:8a:49:38:a4:ad:9a:2d:ad:ff:3c:a9:4c:73:bf:
         6f:1f:4b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:57:03 2025 by rpki-client