Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/323830343a6430633a3a2f33322d3332203d3e203533313132.roa
File:                     323830343a6430633a3a2f33322d3332203d3e203533313132.roa (raw, json)
Hash identifier:          6yCsHgK/N7x9KhfCrYsfSifkykd3Vik/Qn70N1DzLJM=
Subject key identifier:   CD:B8:96:EB:29:A2:59:6D:6E:6C:E9:74:23:F6:6F:28:B6:42:9D:8A
Certificate issuer:       /CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
Certificate serial:       58AA3D761B0D781B09A2C70FE1ACFD590E33F657
Authority key identifier: 74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/323830343a6430633a3a2f33322d3332203d3e203533313132.roa
Signing time:             Thu 06 Mar 2025 10:20:34 +0000
ROA not before:           Thu 06 Mar 2025 10:15:34 +0000
ROA not after:            Thu 05 Mar 2026 10:20:34 +0000
asID:                     53112
IP address blocks:        2804:d0c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl
                          rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:aa:3d:76:1b:0d:78:1b:09:a2:c7:0f:e1:ac:fd:59:0e:33:f6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651
        Validity
            Not Before: Mar  6 10:15:34 2025 GMT
            Not After : Mar  5 10:20:34 2026 GMT
        Subject: CN=CDB896EB29A2596D6E6CE97423F66F28B6429D8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8d:b7:3b:e1:7f:99:41:9e:80:53:12:dc:62:
                    f7:07:c7:4f:89:b6:93:2a:05:f7:1b:a4:ce:fc:0e:
                    11:c6:1e:d3:80:17:14:f2:c4:d4:e5:8d:ea:c1:5a:
                    5b:61:66:f4:56:34:db:c1:31:48:70:1d:f2:a0:e7:
                    f7:9f:55:d8:a2:aa:8b:8c:9c:5d:dc:80:cb:26:c7:
                    b6:f9:40:5a:e4:5d:f6:6e:d4:09:9b:89:e1:99:b6:
                    03:d4:b2:74:34:84:82:bd:2d:5f:11:48:5e:25:41:
                    51:29:d6:2e:02:c5:04:87:61:ae:d7:59:e9:43:58:
                    ad:3b:91:33:7c:24:0f:70:30:a4:78:ee:00:71:f9:
                    c8:d4:e7:fd:ed:a3:ba:d1:16:8c:a3:ed:a0:e1:03:
                    4c:7d:3c:1e:b7:e4:c6:d4:9d:5f:f4:ee:17:57:b4:
                    ce:c6:77:ce:9f:4f:4f:5c:4c:8a:e6:ac:5e:13:c7:
                    2a:c2:c5:9b:ac:ba:3a:a2:27:84:0a:32:8b:c2:b7:
                    1d:a7:77:10:44:f2:94:7c:5e:90:cf:68:f3:e2:2e:
                    fa:d6:de:76:66:fd:f3:91:e5:07:5a:37:26:19:cf:
                    ad:73:f0:3f:48:c3:f4:f7:16:dd:3b:4a:20:73:df:
                    00:f5:a0:69:e2:78:b8:8e:39:3f:5a:c3:4d:e5:0e:
                    de:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B8:96:EB:29:A2:59:6D:6E:6C:E9:74:23:F6:6F:28:B6:42:9D:8A
            X509v3 Authority Key Identifier:
                keyid:74:AD:EB:5B:0B:06:9D:AC:2D:94:A5:DD:C5:51:0D:9D:CC:0C:B6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74ADEB5B0B069DAC2D94A5DDC5510D9DCC0CB651.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/1/323830343a6430633a3a2f33322d3332203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:db:6d:d1:94:8c:0c:7f:36:e2:17:d8:fc:e5:02:dc:90:30:
         fa:d0:e3:dd:14:29:a4:08:90:d4:ae:9d:cd:47:7f:69:12:c5:
         fc:26:60:ab:39:d0:9c:06:a4:94:03:0c:c4:bb:b5:22:48:cc:
         70:1a:95:b8:ba:20:9c:10:67:8a:5e:95:01:21:37:a4:91:ad:
         01:bc:3a:30:e5:62:97:56:d6:00:cf:71:44:33:0d:48:1d:2b:
         90:cd:2b:6a:a5:b6:01:e9:c1:d2:a0:79:31:55:67:05:82:ef:
         31:38:76:b6:c6:aa:37:a8:a3:9f:9a:83:7e:d6:b4:30:2e:66:
         3d:d2:c5:77:1a:32:be:07:3f:16:17:20:3b:67:fa:dc:ad:9f:
         ad:16:fb:f0:c0:3f:90:6e:fd:11:5c:7e:ec:06:1d:4b:8d:10:
         12:a4:da:c6:5c:f9:d6:16:9d:34:80:e6:68:eb:5f:33:b1:0d:
         83:df:6c:49:fe:da:b6:b4:ff:37:15:96:f4:85:2e:98:4f:91:
         a8:a4:ae:22:22:11:60:33:27:e4:97:12:64:06:75:1d:97:ca:
         09:20:fc:4a:3a:bd:76:46:fd:d0:71:56:ec:18:ac:06:50:e3:
         be:ae:ef:64:12:fd:e0:70:fc:33:04:da:53:0e:81:c4:17:39:
         26:05:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:45:10 2025 by rpki-client