Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/323830343a3534383a3a2f33322d3634203d3e203533303035.roa
File:                     323830343a3534383a3a2f33322d3634203d3e203533303035.roa (raw, json)
Hash identifier:          SJICC9A4XBBENhf/MYxM7+A6sNG+03mwyOtHp5TaFis=
Subject key identifier:   F9:03:7A:12:55:C1:A7:8F:D8:46:7D:0E:DC:E1:8A:0D:EE:2B:C0:B5
Certificate issuer:       /CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
Certificate serial:       33B981451F718D210EA8D648300A1E5820BD8C4A
Authority key identifier: E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/323830343a3534383a3a2f33322d3634203d3e203533303035.roa
Signing time:             Thu 06 Mar 2025 05:20:40 +0000
ROA not before:           Thu 06 Mar 2025 05:15:40 +0000
ROA not after:            Thu 05 Mar 2026 05:20:40 +0000
asID:                     53005
IP address blocks:        2804:548::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl
                          rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b9:81:45:1f:71:8d:21:0e:a8:d6:48:30:0a:1e:58:20:bd:8c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E77FFE037CEF76A2021361C120C5E3DD2783824C
        Validity
            Not Before: Mar  6 05:15:40 2025 GMT
            Not After : Mar  5 05:20:40 2026 GMT
        Subject: CN=F9037A1255C1A78FD8467D0EDCE18A0DEE2BC0B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d9:77:56:93:aa:64:b3:1d:da:22:a4:50:9e:
                    ab:2e:02:68:ff:bd:9c:ca:29:bd:3c:87:29:ce:ca:
                    98:03:62:a8:5c:d8:48:e4:bd:08:a5:1c:e6:5f:25:
                    1a:e2:1e:22:6e:90:10:42:84:4c:8b:06:88:be:5d:
                    f8:da:ae:2b:48:7a:3c:68:f8:cd:ab:e6:d9:09:9c:
                    e4:16:4e:4f:b6:11:62:cb:51:22:f0:bc:1a:19:c6:
                    76:78:b0:6a:9a:ca:b5:c2:3f:77:eb:c3:81:56:40:
                    82:b3:74:1f:ed:42:40:e6:a0:94:12:de:96:04:1d:
                    e0:36:26:c8:3f:f2:50:51:f0:59:59:a0:79:dc:1c:
                    f0:0e:82:5e:96:56:25:4b:4d:c7:96:9c:43:6e:0c:
                    f7:42:39:ee:9b:a1:64:7b:df:5a:3f:76:61:71:54:
                    7f:7f:c6:fd:51:6e:cb:cb:f4:1b:cc:df:43:65:a7:
                    e7:cc:1d:7b:46:15:83:f7:ea:c5:cb:2e:74:49:b0:
                    bd:ac:4d:15:ea:cd:ac:4c:08:02:b6:9e:de:4b:85:
                    a3:45:00:99:df:f4:46:11:cc:5f:b7:31:e1:28:88:
                    3b:37:fe:85:7c:c5:33:85:9d:a0:5b:d0:1a:94:96:
                    c1:c8:8b:03:a8:42:1b:f0:5a:d2:bb:77:5c:1e:b8:
                    25:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:03:7A:12:55:C1:A7:8F:D8:46:7D:0E:DC:E1:8A:0D:EE:2B:C0:B5
            X509v3 Authority Key Identifier:
                keyid:E7:7F:FE:03:7C:EF:76:A2:02:13:61:C1:20:C5:E3:DD:27:83:82:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/E77FFE037CEF76A2021361C120C5E3DD2783824C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E77FFE037CEF76A2021361C120C5E3DD2783824C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/2/323830343a3534383a3a2f33322d3634203d3e203533303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:548::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:f4:3f:b4:ba:43:56:5f:ed:28:e3:a0:1f:53:e3:9a:7b:3c:
         e8:c0:c0:3a:f6:9f:ee:f5:e7:89:02:c1:8b:46:5f:bb:63:df:
         0f:d7:f1:ed:f9:f3:e4:b5:85:0c:16:ad:6b:26:75:76:fb:35:
         35:a7:4f:d6:3a:e2:3d:a6:40:1c:9d:7d:fe:c0:57:9c:06:d5:
         a1:43:7b:ab:5c:95:db:94:54:53:8c:ee:75:72:9c:f5:21:58:
         0a:89:06:d5:6f:c0:b4:2c:b7:bb:6c:17:3d:77:9c:a3:00:94:
         28:31:9b:4e:73:05:ab:91:3b:68:44:cb:fb:c6:d3:16:30:c2:
         ac:12:0a:3f:b1:a8:37:c3:21:92:82:eb:3e:fe:2e:38:1d:fd:
         e8:d5:54:7d:71:54:71:f0:dd:ac:82:19:67:68:90:85:73:c5:
         11:f5:76:91:e4:48:79:de:67:73:2f:fe:ef:93:27:92:34:94:
         d4:70:ad:c1:cc:5b:72:e8:e0:44:ab:eb:52:37:0b:9d:83:4a:
         6f:15:ea:a9:89:2a:16:2c:1a:86:f2:24:af:81:f0:4d:1b:d7:
         b4:80:30:b5:83:1c:d0:51:f1:dc:92:a0:f9:ff:a0:1e:2c:f7:
         21:25:a2:ee:18:50:6a:4b:98:27:b4:f3:61:aa:ac:ef:6f:b1:
         fd:c8:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:33:06 2025 by rpki-client