Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/323830343a353562383a3a2f33322d313238203d3e20323637393532.roa
File:                     323830343a353562383a3a2f33322d313238203d3e20323637393532.roa (raw, json)
Hash identifier:          JXwaWH7rFNpzQyuWPg0pu1ekJOHVeIbNKT5jgZykhJc=
Subject key identifier:   C4:EA:A2:FF:14:EE:8F:E6:30:4F:B3:AA:D9:76:7D:F7:48:7C:99:AB
Certificate issuer:       /CN=07F2D01155D284A1D960BB3A2106F0928460D782
Certificate serial:       59BAFFDEA1A1FD4F783A617744140278D7E8262F
Authority key identifier: 07:F2:D0:11:55:D2:84:A1:D9:60:BB:3A:21:06:F0:92:84:60:D7:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07F2D01155D284A1D960BB3A2106F0928460D782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/323830343a353562383a3a2f33322d313238203d3e20323637393532.roa
Signing time:             Wed 30 Apr 2025 20:12:52 +0000
ROA not before:           Wed 30 Apr 2025 20:07:52 +0000
ROA not after:            Wed 29 Apr 2026 20:12:52 +0000
asID:                     267952
IP address blocks:        2804:55b8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/07F2D01155D284A1D960BB3A2106F0928460D782.crl
                          rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/07F2D01155D284A1D960BB3A2106F0928460D782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07F2D01155D284A1D960BB3A2106F0928460D782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 18:44:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ba:ff:de:a1:a1:fd:4f:78:3a:61:77:44:14:02:78:d7:e8:26:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07F2D01155D284A1D960BB3A2106F0928460D782
        Validity
            Not Before: Apr 30 20:07:52 2025 GMT
            Not After : Apr 29 20:12:52 2026 GMT
        Subject: CN=C4EAA2FF14EE8FE6304FB3AAD9767DF7487C99AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:c9:3a:a1:6b:c2:d4:15:80:58:9e:95:c3:
                    e4:16:5a:a3:1c:4b:44:8f:2f:f6:68:53:66:cf:ea:
                    e1:71:f8:56:2a:d5:8c:90:1f:05:41:36:c7:5d:6d:
                    cc:84:71:75:f3:c1:62:96:ab:b0:9a:de:fc:b6:6c:
                    34:83:86:b7:e3:69:08:76:46:e5:4a:fb:0a:19:2a:
                    41:79:8d:f9:c4:63:80:f1:6c:49:fd:8f:b7:c7:ff:
                    e6:76:ea:fa:0d:ff:b5:d9:4e:06:22:ce:39:b4:92:
                    fe:d8:bb:4b:45:96:c3:47:eb:8a:d1:1f:9f:3e:cd:
                    d0:5b:dd:d5:98:49:ff:da:0d:e7:d8:74:40:b5:3b:
                    6d:8a:fa:5b:3a:14:21:4a:22:52:79:bf:00:6c:b6:
                    4a:14:69:c0:00:b3:40:da:f0:be:27:89:00:29:87:
                    93:9d:2a:69:43:a2:3f:8d:c4:12:d9:d0:6a:85:ac:
                    da:46:58:0c:39:7c:d3:7c:8d:8e:da:05:6a:85:3e:
                    29:87:70:ba:35:39:20:39:52:34:74:64:e2:66:55:
                    90:b4:0a:66:09:0b:09:6d:88:e7:31:00:7c:8e:9e:
                    51:db:f1:0e:aa:33:fa:a3:67:27:aa:53:64:f9:08:
                    85:ba:c7:59:ee:39:b4:1f:9a:fc:cd:05:ba:b7:51:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EA:A2:FF:14:EE:8F:E6:30:4F:B3:AA:D9:76:7D:F7:48:7C:99:AB
            X509v3 Authority Key Identifier:
                keyid:07:F2:D0:11:55:D2:84:A1:D9:60:BB:3A:21:06:F0:92:84:60:D7:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/07F2D01155D284A1D960BB3A2106F0928460D782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07F2D01155D284A1D960BB3A2106F0928460D782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/323830343a353562383a3a2f33322d313238203d3e20323637393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:19:22:a2:04:3f:48:48:6f:23:c1:7e:66:43:b1:eb:6d:aa:
         d6:82:7c:fd:b7:95:8b:81:ae:3d:16:84:52:ee:ff:70:e2:f7:
         85:1d:fd:1d:90:d1:fa:64:d1:19:39:c4:6f:f6:80:81:b4:84:
         1f:d8:f6:72:16:b7:c2:59:93:e0:7c:b7:3e:f4:8d:98:35:70:
         5b:62:36:8a:f3:79:44:44:4e:2a:e0:d3:3f:49:b2:46:97:06:
         46:bf:9e:4b:6d:7f:e3:39:24:e6:ed:33:72:5e:31:1c:db:11:
         59:9e:44:8d:5d:78:58:89:5f:10:f8:7a:04:87:ef:a8:65:85:
         7b:06:43:77:d0:19:5f:9d:0d:24:c3:a8:8e:85:9a:b5:8c:1c:
         8d:34:d6:e1:9f:b9:48:56:94:1e:66:4a:2c:eb:19:ec:be:76:
         5b:65:e1:08:a1:ca:89:ee:79:0a:9a:49:bb:69:eb:c4:10:55:
         2b:a3:1a:a1:b2:cf:84:15:61:fb:b9:cc:7c:0b:a9:c7:cf:91:
         49:14:63:3b:ec:e6:62:5a:d1:e1:0a:26:51:46:22:22:77:8d:
         ca:2a:4d:f2:c2:c2:2f:7f:80:a4:a3:3c:52:b2:70:40:e2:e3:
         24:2b:cc:d7:63:de:b3:66:33:30:12:0d:85:ef:16:38:df:7a:
         4e:12:a8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 04:38:54 2025 by rpki-client