Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa
File:                     323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa (raw, json)
Hash identifier:          hOjWRIgWTxLgTLKgLtsBXKSg29aJxOHi5enSjupOH4E=
Subject key identifier:   57:23:FD:0B:02:1E:71:4C:A4:7C:A6:1E:97:D6:56:2C:BD:CF:88:85
Certificate issuer:       /CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
Certificate serial:       282F498F6C26132D338DFF3522C00BDDE6AB3E3E
Authority key identifier: 2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa
Signing time:             Thu 29 May 2025 14:29:04 +0000
ROA not before:           Thu 29 May 2025 14:24:04 +0000
ROA not after:            Thu 28 May 2026 14:29:04 +0000
asID:                     263518
IP address blocks:        2804:1324:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl
                          rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 01:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2f:49:8f:6c:26:13:2d:33:8d:ff:35:22:c0:0b:dd:e6:ab:3e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F4916C0EC5F1E6BFF1A64DC9604454738775E27
        Validity
            Not Before: May 29 14:24:04 2025 GMT
            Not After : May 28 14:29:04 2026 GMT
        Subject: CN=5723FD0B021E714CA47CA61E97D6562CBDCF8885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:87:35:a3:85:71:fb:d6:19:a4:21:2e:bd:2d:
                    5e:2a:c0:bb:90:46:7d:f5:9c:db:58:5d:f3:10:21:
                    86:ed:15:c3:02:01:56:e6:78:13:be:85:ef:1e:db:
                    30:0f:43:0c:2a:28:87:6a:0f:7b:87:a5:46:4c:fb:
                    2a:9a:40:e7:b8:c3:7b:03:85:a0:0d:43:17:51:5c:
                    cc:88:83:88:01:99:7c:99:40:89:ef:a6:37:2a:65:
                    26:4c:c4:c2:34:48:58:38:b1:96:0a:9e:cf:80:fa:
                    57:6c:37:7b:02:f7:5d:1b:bc:e8:d9:55:f3:d7:4e:
                    ed:e0:3f:58:b1:44:86:ef:8a:4b:53:ca:ae:26:71:
                    36:ad:ec:c6:3b:ca:e1:32:ff:19:13:8c:6c:09:49:
                    e0:d8:db:43:b6:09:c7:dd:21:96:44:1d:30:00:d6:
                    ba:fa:62:d2:19:4e:40:c5:17:68:4b:f5:a3:94:9c:
                    cc:25:d3:f5:f7:0e:8b:e9:d0:99:ab:63:71:1b:21:
                    2e:3c:a0:ef:6d:c6:73:05:5f:06:78:bf:32:33:c7:
                    96:07:3c:84:7e:7e:d5:64:bf:9a:07:bc:77:00:71:
                    84:e4:c6:d2:3d:e2:b7:f2:ba:15:a5:39:46:19:0b:
                    57:db:32:7c:1a:fe:72:3a:bc:52:37:cc:be:1e:ab:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:23:FD:0B:02:1E:71:4C:A4:7C:A6:1E:97:D6:56:2C:BD:CF:88:85
            X509v3 Authority Key Identifier:
                keyid:2F:49:16:C0:EC:5F:1E:6B:FF:1A:64:DC:96:04:45:47:38:77:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F4916C0EC5F1E6BFF1A64DC9604454738775E27.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hm99MLVemgJZseUfGkM6GoLBbfvMXpphpvWe8U5U6iTn/0/323830343a313332343a343030303a3a2f33342d3334203d3e20323633353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1324:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         41:b7:ae:da:78:ac:87:ca:6f:c8:93:f4:71:ff:4e:86:10:db:
         96:a8:fb:b2:36:75:f4:31:a6:de:da:f6:7b:70:77:26:73:9b:
         33:30:ce:f4:5f:e3:5f:7b:39:c3:af:76:3e:e7:87:42:51:85:
         3b:f5:b7:d3:4d:a9:cc:b6:f4:63:47:af:54:56:1d:1e:bf:91:
         57:0e:d4:20:8a:33:9c:9a:9d:17:25:03:4d:e8:4f:f9:b7:9c:
         ec:fb:1e:43:73:25:cc:ec:89:2b:e8:89:88:1c:ff:e6:0e:be:
         c1:18:56:db:30:0f:88:cb:4a:d1:e1:58:5a:00:26:80:9c:61:
         e8:ea:21:b5:ba:42:04:44:11:30:a0:6d:a1:64:93:a2:02:87:
         55:dd:4b:42:bb:21:a4:c5:4d:63:1d:41:f9:55:a6:f3:14:03:
         b5:06:76:21:ab:14:24:2d:f5:5e:68:83:04:e9:5c:58:7f:64:
         cd:f4:94:a7:03:d2:6d:15:94:13:64:a7:84:70:3e:23:9f:b9:
         43:9a:fc:6f:2f:b4:a2:f0:da:ac:a2:f3:21:3e:b6:c1:a2:75:
         9d:e7:f8:48:3a:d3:e5:e5:c3:6b:9e:c2:53:64:70:f4:ed:ed:
         51:ad:9f:ec:38:e3:12:97:e9:0c:05:c7:d4:5e:21:9b:01:87:
         f2:f5:54:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:15 2025 by rpki-client