Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa
File:                     323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa (raw, json)
Hash identifier:          8Y57mDV1pW34vH5xtMZZdv6/yrVyVpGLyXZC5QuhkPg=
Subject key identifier:   37:81:8D:E2:F5:BE:11:EF:7D:CE:84:52:49:30:D8:BD:64:9A:16:D9
Certificate issuer:       /CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
Certificate serial:       081DD6750779C64EBF127D089C1A5B92D3ED7483
Authority key identifier: B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa
Signing time:             Wed 30 Apr 2025 19:00:09 +0000
ROA not before:           Wed 30 Apr 2025 18:55:09 +0000
ROA not after:            Wed 29 Apr 2026 19:00:09 +0000
asID:                     52468
IP address blocks:        2804:74:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl
                          rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 19:20:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1d:d6:75:07:79:c6:4e:bf:12:7d:08:9c:1a:5b:92:d3:ed:74:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7F62D55DC758875B49ADCA0FCD115807B2F1DD1
        Validity
            Not Before: Apr 30 18:55:09 2025 GMT
            Not After : Apr 29 19:00:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9b:aa:62:f5:f7:e4:72:52:7f:38:93:9c:f9:
                    92:a2:3c:6c:71:32:f6:d3:47:ca:80:2d:05:e4:e7:
                    82:30:23:74:18:c2:3b:9e:99:2e:7b:b5:28:7d:97:
                    5d:ba:3c:e6:9c:f7:09:65:77:04:86:ad:44:31:fe:
                    79:80:f9:5f:e6:3f:ce:41:0b:3f:74:ba:2f:3c:84:
                    ee:38:7a:6a:d1:5f:65:e4:ad:3d:26:2c:57:26:d1:
                    3f:c2:98:c7:c5:c1:18:14:dd:3d:76:29:dc:7d:58:
                    fb:cd:0f:b6:1f:ee:42:91:4e:da:61:5a:05:14:5f:
                    80:d4:df:49:21:3a:fd:52:b4:b1:aa:b5:c4:c6:86:
                    44:3d:72:3c:60:f5:45:ef:73:d3:83:10:8f:f8:49:
                    15:a7:50:0a:0e:1a:f8:65:84:2b:36:ac:b9:93:5a:
                    dc:49:78:e5:35:2a:e6:37:77:cb:f5:8c:66:fa:16:
                    7c:23:3c:87:35:66:79:62:38:03:3b:a7:35:42:c9:
                    87:17:db:2d:7b:07:f0:ee:cd:ed:01:33:c9:9f:98:
                    7d:df:02:25:8c:40:2f:eb:db:9e:1c:f5:92:74:e0:
                    8b:06:d5:8f:50:68:09:f9:e8:f9:8e:f5:7c:22:54:
                    15:8c:73:40:41:aa:5a:04:df:73:d8:6c:9c:d6:66:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:81:8D:E2:F5:BE:11:EF:7D:CE:84:52:49:30:D8:BD:64:9A:16:D9
            X509v3 Authority Key Identifier:
                keyid:B7:F6:2D:55:DC:75:88:75:B4:9A:DC:A0:FC:D1:15:80:7B:2F:1D:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7F62D55DC758875B49ADCA0FCD115807B2F1DD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/1/323830343a37343a383030303a3a2f33332d3333203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ac:a0:e3:85:5a:5d:bb:cd:1a:ba:40:05:6a:0e:74:8e:e3:55:
         ab:c9:8b:1c:24:c0:18:2e:43:d7:c5:9a:73:2b:89:6e:3f:e5:
         0e:fa:bc:f3:19:b0:2d:ea:92:96:85:f2:14:96:43:41:52:2b:
         66:04:c6:8f:f8:c9:0b:d4:bf:a9:76:be:80:d7:40:cb:dd:4d:
         99:5a:dd:a9:bd:5f:26:2c:fc:cb:a0:09:20:dc:49:ae:b1:6e:
         db:ef:79:79:f6:6d:4c:a4:b2:e5:81:d8:c8:68:87:d0:55:aa:
         11:f9:69:05:1d:f9:cd:2d:48:6c:c4:ff:f0:db:6f:b0:a9:e7:
         80:19:d2:3b:cf:8c:6d:f8:93:45:01:7f:73:c4:fd:86:c7:d6:
         77:7d:e4:a0:2f:69:a8:c8:50:c4:3f:d8:b1:2b:42:3e:f0:96:
         0e:57:ec:f2:ca:e8:3e:f7:70:6b:21:3b:fb:23:c9:20:08:17:
         6d:4e:18:6a:5e:c4:cd:ad:6b:cd:3a:8b:66:40:c3:f3:da:af:
         d2:5a:95:e0:1b:2e:96:cf:40:ba:2f:ca:d8:38:5b:33:23:75:
         7d:29:0e:f1:7d:c6:c1:28:7a:8b:09:b4:22:eb:3e:94:e5:ff:
         c1:cd:0c:59:28:d4:45:f9:cc:e7:2c:f0:9e:e1:6b:0f:43:b7:
         6a:c6:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:53:06 2025 by rpki-client