Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33322d3438203d3e20323634303230.roa
File:                     323830343a323938383a3a2f33322d3438203d3e20323634303230.roa (raw, json)
Hash identifier:          kB6SXYsR6slyzgKdYN7OjSY4ReNrLnzS9tY+yZtYi/c=
Subject key identifier:   7C:AF:E2:B4:3A:38:E6:FC:2B:0D:65:50:64:D7:1D:69:AF:20:C0:59
Certificate issuer:       /CN=1FB958013DB5E23529E65FC0CF7135987F37CBEF
Certificate serial:       72CE784D2A20492B1796B69C2E891993AD4933DF
Authority key identifier: 1F:B9:58:01:3D:B5:E2:35:29:E6:5F:C0:CF:71:35:98:7F:37:CB:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB958013DB5E23529E65FC0CF7135987F37CBEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33322d3438203d3e20323634303230.roa
Signing time:             Thu 13 Mar 2025 14:38:12 +0000
ROA not before:           Thu 13 Mar 2025 14:33:12 +0000
ROA not after:            Thu 12 Mar 2026 14:38:12 +0000
asID:                     264020
IP address blocks:        2804:2988::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/1FB958013DB5E23529E65FC0CF7135987F37CBEF.crl
                          rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/1FB958013DB5E23529E65FC0CF7135987F37CBEF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB958013DB5E23529E65FC0CF7135987F37CBEF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 15:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ce:78:4d:2a:20:49:2b:17:96:b6:9c:2e:89:19:93:ad:49:33:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FB958013DB5E23529E65FC0CF7135987F37CBEF
        Validity
            Not Before: Mar 13 14:33:12 2025 GMT
            Not After : Mar 12 14:38:12 2026 GMT
        Subject: CN=7CAFE2B43A38E6FC2B0D655064D71D69AF20C059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:77:c5:c0:85:a6:93:79:75:a6:74:84:28:8b:
                    d5:a3:1e:4f:78:09:4d:a6:ce:55:4f:c5:0a:e2:51:
                    31:e1:56:7c:50:04:a3:b6:45:c0:6a:95:21:71:b0:
                    0a:d7:6b:e0:06:56:a3:e1:b5:be:c2:bd:cf:9e:43:
                    4a:d4:fc:9f:22:c7:ce:cd:12:3b:7b:3d:5e:64:39:
                    5c:c5:6e:50:58:6a:6e:55:15:13:4d:22:27:06:54:
                    61:2e:6a:92:85:65:54:04:8e:d3:1a:1a:8e:a3:a3:
                    f5:a6:1d:fe:1c:82:3c:d8:95:0c:9c:20:df:03:ff:
                    2b:c6:94:81:c6:34:33:71:10:cd:c5:30:f2:eb:89:
                    ce:bc:85:48:56:32:1b:c5:c7:b4:10:55:0e:56:c6:
                    54:f8:d3:26:7d:ce:60:66:db:54:ed:7f:73:10:34:
                    bb:6d:6b:12:05:92:0f:7b:7a:bd:55:c1:da:a8:aa:
                    8b:6c:e0:38:0d:a4:81:e2:ab:02:fc:ff:66:64:95:
                    30:01:81:72:29:e5:83:9d:f7:57:20:31:fa:7b:25:
                    6a:cd:86:0e:06:1d:56:aa:9b:b7:7b:7f:d3:06:34:
                    31:d0:02:8e:21:9c:2d:9d:5e:be:92:5f:dc:b0:40:
                    fd:1e:05:79:a2:02:be:92:e7:cd:43:ac:68:3a:78:
                    e5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AF:E2:B4:3A:38:E6:FC:2B:0D:65:50:64:D7:1D:69:AF:20:C0:59
            X509v3 Authority Key Identifier:
                keyid:1F:B9:58:01:3D:B5:E2:35:29:E6:5F:C0:CF:71:35:98:7F:37:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/1FB958013DB5E23529E65FC0CF7135987F37CBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB958013DB5E23529E65FC0CF7135987F37CBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/323830343a323938383a3a2f33322d3438203d3e20323634303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2988::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:a0:c9:3c:24:66:1b:8e:36:cb:7c:da:48:39:ed:28:eb:40:
         95:16:3a:ab:d0:6a:fc:cf:79:7e:62:af:27:a7:c4:e6:2a:a3:
         de:e7:e3:d2:2e:1a:d7:cf:1e:66:03:f3:da:10:8e:81:2b:89:
         b4:69:98:29:53:de:05:63:8e:c8:61:75:e7:5e:a2:7e:b2:ff:
         bd:00:45:5d:6c:03:8b:82:f3:28:7b:34:1a:02:b7:08:b0:79:
         50:44:49:d1:29:0e:cc:c8:83:86:0d:fe:e8:a2:b6:76:be:08:
         1d:49:f7:56:0d:17:61:f6:03:c2:20:70:b3:08:9c:97:cc:df:
         7f:d9:2b:5f:a4:19:40:36:3b:33:ac:39:e2:b6:24:99:3d:7c:
         07:6e:83:82:b7:ad:1a:3d:fd:ed:bc:c6:e8:5b:31:b8:04:16:
         df:94:ed:a4:6d:a6:94:39:2d:61:8c:28:4e:1e:27:83:2e:eb:
         5b:f2:90:dc:7a:13:29:a0:10:04:c7:58:b0:4c:c0:a3:37:28:
         7a:13:0f:08:2f:28:f0:ae:3c:13:ff:13:cc:e2:72:c3:2c:6e:
         51:85:0e:13:ca:d5:35:63:c9:c7:75:9b:79:40:26:8f:36:2e:
         bb:89:22:48:52:54:86:ef:c9:8d:75:61:97:b3:28:00:05:5e:
         4c:0b:a1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:22:59 2025 by rpki-client