Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/323830343a6632303a3a2f33322d313238203d3e203532373431.roa
File:                     323830343a6632303a3a2f33322d313238203d3e203532373431.roa (raw, json)
Hash identifier:          23fml3JkCqQ7Pjum/AFyH1lG0vEzAJgH55Uz2dHvbeg=
Subject key identifier:   5D:B6:1A:DD:5F:A2:59:7A:63:58:90:6C:6A:7C:B2:25:06:91:AF:86
Certificate issuer:       /CN=9525905700962482C0F4F6E9E0D71074880AC7C5
Certificate serial:       6D69633464419440CBB67266F45432CF33AB7B3D
Authority key identifier: 95:25:90:57:00:96:24:82:C0:F4:F6:E9:E0:D7:10:74:88:0A:C7:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/323830343a6632303a3a2f33322d313238203d3e203532373431.roa
Signing time:             Tue 11 Mar 2025 20:45:13 +0000
ROA not before:           Tue 11 Mar 2025 20:40:13 +0000
ROA not after:            Tue 10 Mar 2026 20:45:13 +0000
asID:                     52741
IP address blocks:        2804:f20::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.crl
                          rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:69:63:34:64:41:94:40:cb:b6:72:66:f4:54:32:cf:33:ab:7b:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9525905700962482C0F4F6E9E0D71074880AC7C5
        Validity
            Not Before: Mar 11 20:40:13 2025 GMT
            Not After : Mar 10 20:45:13 2026 GMT
        Subject: CN=5DB61ADD5FA2597A6358906C6A7CB2250691AF86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cc:7e:06:0c:86:8c:e3:f6:56:09:62:55:20:
                    81:ea:1d:50:01:5a:92:18:17:70:09:06:fb:5d:ad:
                    35:1c:bb:33:88:cd:22:21:ec:47:55:f0:77:be:7b:
                    fd:72:10:45:11:cd:b8:48:dd:d6:30:69:3a:60:ae:
                    d6:dc:82:26:52:3c:43:52:b4:1a:2f:fc:fa:22:ab:
                    39:6d:9b:26:64:3d:cf:8c:81:f1:f2:6f:9e:67:e5:
                    89:99:2d:84:ee:9b:04:6c:52:a4:46:81:95:a9:60:
                    9a:4d:20:1f:d8:17:c7:32:c0:60:df:ea:9e:ca:ad:
                    d0:17:da:4d:c2:8d:05:5c:46:00:cf:6a:69:a2:f5:
                    a5:70:25:f4:07:bd:1e:d6:26:95:19:9e:3c:37:fe:
                    1b:49:f2:0a:84:3c:c7:e0:99:b0:95:03:2e:44:fb:
                    5c:52:93:00:9d:fc:a1:3c:55:bc:ed:83:22:6e:24:
                    2b:ac:87:1a:1f:7d:0b:85:96:bd:c5:a8:41:65:ce:
                    11:45:b3:1f:3f:74:79:26:03:91:a6:6c:14:51:bb:
                    4c:68:ad:d4:b0:18:61:26:f8:22:36:fc:36:bd:0f:
                    53:ef:b7:2b:43:2a:75:30:ab:fe:16:a5:3b:7f:df:
                    51:17:94:ce:0f:62:86:14:e8:4a:8b:67:45:ed:03:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B6:1A:DD:5F:A2:59:7A:63:58:90:6C:6A:7C:B2:25:06:91:AF:86
            X509v3 Authority Key Identifier:
                keyid:95:25:90:57:00:96:24:82:C0:F4:F6:E9:E0:D7:10:74:88:0A:C7:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/9525905700962482C0F4F6E9E0D71074880AC7C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9525905700962482C0F4F6E9E0D71074880AC7C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/323830343a6632303a3a2f33322d313238203d3e203532373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:5b:d5:a6:42:89:91:66:46:72:63:d7:a0:1b:9e:17:7b:92:
         c6:88:5c:f6:3a:85:f1:ac:d6:89:d3:df:ae:22:b2:45:99:b5:
         6e:fa:a4:d7:96:84:af:14:ea:64:79:1d:b9:43:a9:b7:da:63:
         43:c8:31:7f:1a:63:24:4e:29:0d:08:f7:db:52:96:bc:fa:ed:
         ff:9d:18:d3:38:41:c5:6d:70:bf:51:05:fc:40:08:05:2e:d6:
         03:f5:b5:bd:42:16:be:b6:34:85:fd:03:91:57:72:d2:55:f7:
         ac:84:58:e0:a9:e6:8b:44:9c:ce:f6:8d:81:d6:43:37:bc:86:
         e1:4e:47:00:5b:68:46:1b:4f:7f:71:af:ba:32:5a:a4:a0:b3:
         97:f1:a0:f9:a7:e9:c0:80:3e:03:0c:27:05:be:21:a2:ce:da:
         91:b0:dd:3e:6c:c4:8d:40:60:0b:b6:9e:a7:ec:95:0e:32:62:
         0d:b2:b8:91:2c:e1:03:23:24:cc:39:4f:f1:23:f4:e1:c3:07:
         bb:d6:03:83:91:2f:b8:72:dd:8c:05:4a:10:49:fd:4a:8b:35:
         d0:c9:9b:c7:9b:dd:89:ff:02:23:52:fc:7c:ff:22:9c:95:2b:
         59:e7:73:97:16:1d:fd:e9:66:cf:fe:e1:43:cb:3a:91:13:76:
         0b:2e:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:14:15 2025 by rpki-client