Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa
File:                     323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa (raw, json)
Hash identifier:          2GtYFF90lR8iq51d1FcuW+toSrTQ6rpvDjXAXYNhdT0=
Subject key identifier:   60:32:1E:35:3F:44:C5:FE:BA:B5:47:E7:D1:00:6D:24:62:C0:FF:6D
Certificate issuer:       /CN=51352D74D3778F2422CE0E96FC53071E18935405
Certificate serial:       289EEE6D15213074C261101BCF746A787CB90472
Authority key identifier: 51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa
Signing time:             Thu 06 Mar 2025 05:04:34 +0000
ROA not before:           Thu 06 Mar 2025 04:59:34 +0000
ROA not after:            Thu 05 Mar 2026 05:04:34 +0000
asID:                     263049
IP address blocks:        2804:fe0:1880::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl
                          rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 13:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9e:ee:6d:15:21:30:74:c2:61:10:1b:cf:74:6a:78:7c:b9:04:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51352D74D3778F2422CE0E96FC53071E18935405
        Validity
            Not Before: Mar  6 04:59:34 2025 GMT
            Not After : Mar  5 05:04:34 2026 GMT
        Subject: CN=60321E353F44C5FEBAB547E7D1006D2462C0FF6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:98:9f:ee:11:09:ef:88:8e:b7:32:97:22:f3:
                    76:a3:4d:71:06:4a:35:4b:3a:87:51:92:e3:04:8f:
                    73:12:af:24:f2:2c:39:bc:ad:c2:59:ae:43:59:b5:
                    e7:5c:3b:c0:53:ea:37:f9:e7:59:5c:8c:61:86:ad:
                    b1:96:ba:3d:b8:f0:e1:29:00:f1:b5:ab:35:e8:6f:
                    29:14:51:e4:4e:a6:c3:c2:c7:70:42:09:14:5c:4e:
                    2e:4d:0c:20:c9:04:47:40:22:c8:fb:31:ba:ed:27:
                    09:29:d8:a4:f5:df:a5:ac:7b:ed:5b:24:d2:4b:6c:
                    52:39:6f:0b:de:6e:df:e2:0f:82:81:7a:1f:84:dd:
                    26:57:3b:5b:a8:e3:10:13:c9:37:b3:20:ea:bf:a3:
                    43:83:41:4a:63:83:95:ed:cf:b6:85:8b:5b:4c:0f:
                    a2:75:57:e6:9f:8b:1b:d2:37:a3:34:d8:f7:f9:14:
                    d6:00:bd:eb:56:c6:e7:fd:e8:8d:9f:1b:f2:92:23:
                    a7:a4:f2:a0:f9:8a:63:ab:61:c3:43:40:07:f4:7a:
                    67:4e:3c:f1:5c:2f:e1:43:7a:71:29:e9:a0:6f:a4:
                    98:91:1d:6a:c4:2e:cf:36:ee:86:6a:83:51:12:29:
                    1d:8b:2b:bc:0b:38:3d:a1:56:6f:95:ff:e7:f6:43:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:32:1E:35:3F:44:C5:FE:BA:B5:47:E7:D1:00:6D:24:62:C0:FF:6D
            X509v3 Authority Key Identifier:
                keyid:51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe0:1880::/41

    Signature Algorithm: sha256WithRSAEncryption
         6a:d9:60:82:c1:78:de:9f:c7:88:37:32:a7:fe:57:78:67:e4:
         47:90:94:2f:45:b1:20:9a:f2:a7:62:01:4c:dc:c5:3c:02:0c:
         7b:21:46:10:f4:31:3b:ac:93:11:5c:65:85:9a:cc:d6:a6:d8:
         6d:2a:21:23:5f:e4:74:b9:ff:02:0b:55:15:07:8a:31:21:69:
         07:d9:66:b8:f5:02:3c:b9:7e:37:5f:b9:cf:42:6e:a1:76:ed:
         ef:c9:90:d6:fe:7a:7e:e1:64:da:4e:3c:25:1e:39:fe:e3:39:
         7e:73:26:49:bb:96:99:54:e1:85:96:ff:7a:88:95:46:5c:d0:
         e5:21:f5:d2:d2:f4:89:3b:f3:ea:a3:8e:5b:fe:63:6f:81:8d:
         84:16:d3:22:b1:83:7a:2b:f1:9f:f4:e3:e0:93:79:f4:6a:cf:
         9a:18:99:03:36:b4:77:3c:29:6d:04:1a:6f:79:08:69:06:a4:
         5e:ae:b5:bb:b0:37:9d:ac:a9:ab:e0:e2:64:70:be:e3:f1:59:
         0d:2c:2c:61:fb:b8:55:3e:57:29:0b:be:d3:ed:11:21:45:e4:
         83:d0:fa:0e:89:ed:87:5c:d2:cb:05:69:9d:20:51:ed:54:a9:
         2d:49:4d:ff:6e:07:aa:ee:84:45:2f:e7:04:32:77:e7:57:16:
         b4:d3:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:01:45 2025 by rpki-client