Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a383030303a3a2f33332d3333203d3e203238333238.roa
File:                     323830343a3637343a383030303a3a2f33332d3333203d3e203238333238.roa (raw, json)
Hash identifier:          cX4AY4vDZiAIEdJrug7+se6QRZjccuCV6ls8wFaQ8Jg=
Subject key identifier:   1B:B9:E6:25:15:C2:C7:D0:37:89:0D:33:4E:6D:83:5D:9B:77:2A:68
Certificate issuer:       /CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
Certificate serial:       33662E0E420B7213F4D9A8CD3FA4215326E7D3D4
Authority key identifier: 5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a383030303a3a2f33332d3333203d3e203238333238.roa
Signing time:             Wed 26 Mar 2025 21:47:00 +0000
ROA not before:           Wed 26 Mar 2025 21:42:00 +0000
ROA not after:            Wed 25 Mar 2026 21:47:00 +0000
asID:                     28328
IP address blocks:        2804:674:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl
                          rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 04:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:66:2e:0e:42:0b:72:13:f4:d9:a8:cd:3f:a4:21:53:26:e7:d3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B2D2DF0A92DA3733DD7225515A63E3D6BF65785
        Validity
            Not Before: Mar 26 21:42:00 2025 GMT
            Not After : Mar 25 21:47:00 2026 GMT
        Subject: CN=1BB9E62515C2C7D037890D334E6D835D9B772A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:9f:58:15:fb:75:0c:e9:7b:ef:1d:c8:81:
                    5e:06:61:3b:c1:7d:01:6a:58:b1:27:13:bf:9b:89:
                    f6:3b:2f:ee:cd:77:43:60:09:a4:1f:09:45:52:75:
                    d3:a3:71:b7:db:8c:2e:f8:bf:7a:cb:4d:7d:1a:71:
                    e5:38:eb:1e:52:10:12:10:c1:aa:1c:1d:11:53:3d:
                    08:77:ea:fa:4e:79:b3:5f:fc:2b:0c:20:2c:00:53:
                    bb:39:7f:1e:46:82:3a:b6:b3:57:15:12:b5:cd:ba:
                    72:68:ee:10:49:fb:01:8a:91:ac:11:c6:c9:2a:dd:
                    71:86:7f:20:af:78:c7:df:2f:59:62:62:b8:df:7e:
                    41:37:ff:a6:20:45:da:2c:f5:7f:cb:a5:78:1d:c1:
                    31:03:c7:17:ae:22:c8:16:ed:a0:73:ba:0e:97:09:
                    7e:ab:42:87:51:ad:ff:2f:f5:40:ac:07:ce:1e:35:
                    26:02:b7:6b:eb:b2:9e:9e:78:5f:86:09:09:a5:e8:
                    a5:d5:d3:78:18:96:da:24:0b:4f:b1:91:f3:c8:d7:
                    b6:91:70:27:dc:33:37:d6:4a:66:c8:d5:26:80:a3:
                    90:22:8b:f9:28:ce:01:5f:fd:8b:4b:e1:7a:5c:2a:
                    df:52:d2:ce:1a:19:d8:71:7f:81:cf:d1:3a:70:67:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B9:E6:25:15:C2:C7:D0:37:89:0D:33:4E:6D:83:5D:9B:77:2A:68
            X509v3 Authority Key Identifier:
                keyid:5B:2D:2D:F0:A9:2D:A3:73:3D:D7:22:55:15:A6:3E:3D:6B:F6:57:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B2D2DF0A92DA3733DD7225515A63E3D6BF65785.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/XWWV878AXX23G99pEXbrrnADvVAaxJMuKmoiUhDLxvH/0/323830343a3637343a383030303a3a2f33332d3333203d3e203238333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:674:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7a:2a:c6:08:73:f3:90:ec:4f:6f:89:8e:b2:e1:cc:69:a5:b6:
         88:f5:b7:1f:92:db:80:1e:70:87:93:75:80:85:e3:5b:16:18:
         c3:7f:69:b6:ae:74:71:e7:0e:f4:47:ae:f4:d5:b5:3b:ec:cc:
         fe:d8:c1:04:95:57:2f:94:80:e7:12:61:1d:d0:5a:7c:ac:e7:
         49:c2:6d:76:f6:27:05:74:4b:63:ff:66:b9:3f:e8:36:b8:9d:
         ac:9a:a0:bf:fc:3b:3c:68:f2:4a:0c:82:87:6b:49:63:09:65:
         45:23:64:9b:97:24:1c:25:92:4e:2f:c1:14:f1:13:d9:26:c6:
         8a:21:87:70:e7:c4:b8:7d:d6:1a:6d:e0:cc:16:31:e9:f2:2a:
         90:61:2a:6a:6f:e2:bc:53:87:df:fd:4e:36:0b:e2:b2:b6:de:
         6f:0a:f8:5c:9a:4e:03:0f:eb:89:91:12:06:da:39:e5:b8:d6:
         d4:68:11:7a:27:a5:3c:85:37:ba:88:2c:5f:42:c8:e1:bc:af:
         06:ee:7b:39:55:a4:67:50:73:ac:8a:6f:d3:53:5d:7a:2e:dc:
         e9:7b:59:94:44:dc:aa:1d:57:f3:fd:01:41:f6:a0:a0:7a:a3:
         1a:69:cb:cc:8c:3a:8d:85:63:3d:50:d8:ff:ad:ef:39:96:a4:
         26:ed:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:05:20 2025 by rpki-client