Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jAGE7pxw6x2VwkyGR41xk6mCxHnDnLRWDZzYzgyHttT/0/323830343a353638383a3a2f33322d313238203d3e20323638303037.roa
File:                     323830343a353638383a3a2f33322d313238203d3e20323638303037.roa (raw, json)
Hash identifier:          Ef5Qt63+qRB212eM6aapMMvGkJBoan2JG4doPTRkihg=
Subject key identifier:   62:36:35:AD:F2:BA:F1:62:78:F3:E1:D1:B9:B7:BA:D2:A1:9C:3F:BE
Certificate issuer:       /CN=ED95B102E2B0EAAE2671F4B061220D0F2FC9AC99
Certificate serial:       72CEEE6354180DDD4E88A46BDC5A325F24E95DB0
Authority key identifier: ED:95:B1:02:E2:B0:EA:AE:26:71:F4:B0:61:22:0D:0F:2F:C9:AC:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED95B102E2B0EAAE2671F4B061220D0F2FC9AC99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jAGE7pxw6x2VwkyGR41xk6mCxHnDnLRWDZzYzgyHttT/0/323830343a353638383a3a2f33322d313238203d3e20323638303037.roa
Signing time:             Wed 12 Feb 2025 12:33:17 +0000
ROA not before:           Wed 12 Feb 2025 12:28:17 +0000
ROA not after:            Wed 11 Feb 2026 12:33:17 +0000
asID:                     268007
IP address blocks:        2804:5688::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jAGE7pxw6x2VwkyGR41xk6mCxHnDnLRWDZzYzgyHttT/0/ED95B102E2B0EAAE2671F4B061220D0F2FC9AC99.crl
                          rsync://rpki-repo.registro.br/repo/jAGE7pxw6x2VwkyGR41xk6mCxHnDnLRWDZzYzgyHttT/0/ED95B102E2B0EAAE2671F4B061220D0F2FC9AC99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED95B102E2B0EAAE2671F4B061220D0F2FC9AC99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 10:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ce:ee:63:54:18:0d:dd:4e:88:a4:6b:dc:5a:32:5f:24:e9:5d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED95B102E2B0EAAE2671F4B061220D0F2FC9AC99
        Validity
            Not Before: Feb 12 12:28:17 2025 GMT
            Not After : Feb 11 12:33:17 2026 GMT
        Subject: CN=623635ADF2BAF16278F3E1D1B9B7BAD2A19C3FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:da:f8:9b:11:0e:66:8c:81:8b:1b:7d:ec:33:
                    c9:be:74:09:a9:43:d7:ff:b6:a6:86:7d:f6:85:5b:
                    01:8e:aa:c5:de:5a:4a:14:79:82:7f:86:ed:d3:43:
                    6e:e5:7c:9d:d4:21:c9:c6:85:ab:b5:76:34:70:9a:
                    19:79:49:bc:d1:df:96:94:57:b9:02:11:80:bb:41:
                    3b:5a:c5:19:d3:bf:90:9e:b4:27:2f:ae:e3:6a:91:
                    aa:3d:07:03:d5:d2:31:24:cb:3f:f6:22:72:7f:32:
                    9d:fe:1d:70:b9:95:1b:1a:60:6b:56:a5:5e:fa:70:
                    61:8d:b5:60:fa:f2:fd:6e:2c:d4:48:45:7c:11:2f:
                    df:5f:6f:96:ff:c7:17:7d:d3:0d:2c:7c:b3:ce:6d:
                    47:bf:98:9d:23:f4:c3:3a:8e:87:8f:a7:0a:58:6c:
                    55:c4:20:03:35:b2:10:cf:09:6f:43:50:8f:8d:d5:
                    be:96:90:c1:6d:79:13:34:03:9d:ed:2c:af:9a:e7:
                    2f:32:95:4b:53:3b:48:43:f9:0e:87:90:4b:71:cc:
                    dc:96:75:cd:51:e3:4f:74:84:50:73:b0:a4:dc:7c:
                    32:76:de:b0:18:b2:43:00:9d:72:40:9b:71:a2:8a:
                    e6:94:06:b1:84:d4:ef:31:27:ef:65:2a:33:f7:ec:
                    36:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:36:35:AD:F2:BA:F1:62:78:F3:E1:D1:B9:B7:BA:D2:A1:9C:3F:BE
            X509v3 Authority Key Identifier:
                keyid:ED:95:B1:02:E2:B0:EA:AE:26:71:F4:B0:61:22:0D:0F:2F:C9:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jAGE7pxw6x2VwkyGR41xk6mCxHnDnLRWDZzYzgyHttT/0/ED95B102E2B0EAAE2671F4B061220D0F2FC9AC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED95B102E2B0EAAE2671F4B061220D0F2FC9AC99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jAGE7pxw6x2VwkyGR41xk6mCxHnDnLRWDZzYzgyHttT/0/323830343a353638383a3a2f33322d313238203d3e20323638303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5688::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:57:8e:b4:a3:f7:75:78:65:37:45:75:9c:05:76:10:4d:3a:
         ae:20:05:f9:5e:82:ce:33:3a:8c:78:ba:b5:db:f7:2d:16:78:
         c0:26:d5:f2:1a:45:bf:da:a8:d5:28:d3:76:95:36:9a:45:b3:
         50:7d:34:c0:e6:09:ac:6f:57:e2:73:09:dd:d7:e9:fe:fd:b7:
         e4:f2:08:67:f2:61:c6:af:cc:aa:7e:55:c4:8c:20:0f:b7:5a:
         d0:70:0f:9d:4c:14:f5:ef:3b:79:f9:09:28:64:ce:73:6b:33:
         0c:c1:d0:b2:74:a0:1f:b0:78:0c:8d:92:47:dc:93:c5:66:42:
         43:5f:1e:24:94:ef:a2:ff:eb:04:4b:70:a3:87:6e:68:c6:b1:
         b6:87:f6:0d:a8:14:23:c6:f7:db:24:a9:c5:8e:02:9e:19:86:
         aa:a9:6b:9c:a5:3a:61:e3:ad:97:12:97:4c:20:69:d7:91:9f:
         80:0e:5f:c3:4c:cd:58:6b:6e:dd:45:bd:79:54:5a:1d:01:42:
         c6:ab:4f:ef:1b:57:32:98:0d:21:fd:3e:01:3a:27:77:24:c6:
         25:a9:61:36:bd:ca:b3:f5:a4:2b:c8:2e:bc:3e:81:05:f7:bb:
         d6:07:d7:c2:48:fa:4b:ce:e6:47:13:72:80:0d:38:f4:d1:eb:
         f1:f0:2e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:11:41 2025 by rpki-client