Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/323830343a6430633a383030303a3a2f34302d3430203d3e203533313132.roa
File:                     323830343a6430633a383030303a3a2f34302d3430203d3e203533313132.roa (raw, json)
Hash identifier:          7kKFLbfIuN2v3dP3xCQq7N6qkDG5lMOBXawVdF4wZr4=
Subject key identifier:   58:0A:D2:C2:BC:BD:09:55:41:E5:C2:3E:B0:C6:4B:BE:8D:6E:F2:31
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       0DB16D4A78E05621C88816E0F4488D33341B3D43
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/323830343a6430633a383030303a3a2f34302d3430203d3e203533313132.roa
Signing time:             Thu 06 Mar 2025 10:20:34 +0000
ROA not before:           Thu 06 Mar 2025 10:15:34 +0000
ROA not after:            Thu 05 Mar 2026 10:20:34 +0000
asID:                     53112
IP address blocks:        2804:d0c:8000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b1:6d:4a:78:e0:56:21:c8:88:16:e0:f4:48:8d:33:34:1b:3d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Mar  6 10:15:34 2025 GMT
            Not After : Mar  5 10:20:34 2026 GMT
        Subject: CN=580AD2C2BCBD095541E5C23EB0C64BBE8D6EF231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:81:64:44:dc:2f:b8:11:83:94:65:85:01:
                    db:30:1b:55:a2:b7:e2:46:75:4c:5c:37:dd:e7:1d:
                    e7:17:e7:21:ef:a5:93:ee:0c:02:d5:25:3a:2c:28:
                    7b:a0:66:3f:e7:b7:f0:48:a2:4f:fd:4d:46:18:c6:
                    35:11:40:f2:be:0a:ae:f3:a0:c2:b2:5d:df:e9:96:
                    0e:a5:98:f4:d4:7a:be:3b:19:c6:ad:fd:a1:80:79:
                    59:4c:b3:04:6f:78:65:4b:01:e8:d2:c8:d6:9d:87:
                    b6:4e:35:02:e6:a5:13:43:c0:db:a6:06:0e:26:90:
                    cc:ab:cc:4f:70:d5:50:eb:0b:e6:1d:46:34:c0:2d:
                    8c:ff:d9:6d:c8:30:b3:ec:7b:b1:73:12:b2:77:30:
                    54:eb:d0:b8:6c:8d:fb:28:f0:a7:2d:06:90:20:89:
                    e0:97:a8:90:8a:6a:eb:01:83:18:cd:ab:ae:bc:be:
                    67:aa:0d:26:d9:91:5f:56:ab:2f:17:31:c4:c3:81:
                    7d:6d:8d:bb:e9:ea:54:92:f8:e6:4f:df:3c:18:95:
                    f8:41:bd:25:59:02:fd:66:fb:e8:0b:e6:67:2e:1b:
                    e4:81:ca:0b:cf:5d:7b:6c:d5:bf:4f:70:ab:5a:51:
                    63:41:46:5c:0c:aa:b5:af:12:aa:41:57:19:fb:5b:
                    58:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0A:D2:C2:BC:BD:09:55:41:E5:C2:3E:B0:C6:4B:BE:8D:6E:F2:31
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/323830343a6430633a383030303a3a2f34302d3430203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0c:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:8e:a4:70:b1:26:f9:52:84:fc:69:4e:ab:02:fe:94:8b:af:
         bf:62:1f:31:4b:a1:99:bf:02:da:d8:8c:0e:33:f7:b7:d3:50:
         c7:31:d2:3f:da:56:e4:c8:60:ee:c4:f8:8b:c6:7d:b3:a0:2d:
         6c:3c:54:9d:67:b4:5e:08:b2:08:2d:1f:c9:8e:cf:f6:cf:81:
         90:f7:00:c0:df:bb:37:34:98:2e:f9:9d:aa:a6:00:eb:11:04:
         2a:82:f8:40:8e:c2:e5:01:ba:ed:42:fd:43:a0:b9:d6:13:a6:
         d5:14:41:ba:09:7f:ed:12:f1:d5:7b:dc:73:54:fc:f2:c6:86:
         92:48:e4:70:d5:ee:0c:8a:23:83:fc:16:f3:ed:c8:47:74:ed:
         69:e8:6a:7e:5d:14:bd:29:4b:0d:cb:83:44:a3:ea:87:34:64:
         d1:43:6b:ba:9f:3d:0d:df:50:3e:0a:03:22:4a:d7:4a:8b:3b:
         cc:9a:eb:68:52:e9:ca:e4:3d:80:7a:b6:60:99:f5:e9:c8:1b:
         a2:dc:28:53:96:9d:17:75:9f:26:f3:1f:f1:8c:25:4d:74:b2:
         ab:b6:50:9d:f9:65:c9:ad:68:a1:43:30:1d:ca:90:5b:dd:05:
         d4:75:58:c2:cf:fb:46:6c:a4:ed:3b:99:23:da:59:73:78:33:
         43:34:d8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:08:34 2025 by rpki-client