Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a383030303a3a2f33342d3334203d3e20323731373031.roa
File:                     323830343a376661383a383030303a3a2f33342d3334203d3e20323731373031.roa (raw, json)
Hash identifier:          yZ+xn2u22jrXgSNlMIQmNaN4njxc2oj8m08P6GCJxF8=
Subject key identifier:   A0:D2:38:BF:10:C6:14:70:4E:DC:52:DB:3E:CF:3C:96:6F:F3:59:F4
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       7CAAA95D156B4F12447FE15B7F07E20438905455
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a383030303a3a2f33342d3334203d3e20323731373031.roa
Signing time:             Tue 13 May 2025 14:00:22 +0000
ROA not before:           Tue 13 May 2025 13:55:22 +0000
ROA not after:            Tue 12 May 2026 14:00:22 +0000
asID:                     271701
IP address blocks:        2804:7fa8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 17:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:aa:a9:5d:15:6b:4f:12:44:7f:e1:5b:7f:07:e2:04:38:90:54:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: May 13 13:55:22 2025 GMT
            Not After : May 12 14:00:22 2026 GMT
        Subject: CN=A0D238BF10C614704EDC52DB3ECF3C966FF359F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:4f:e1:4d:26:38:67:38:7e:df:3b:b4:b1:
                    01:f5:29:d4:db:3b:2f:d5:c5:d6:fb:61:e6:82:0e:
                    b2:1b:b0:d5:99:38:a2:77:0a:61:4c:e9:a8:46:37:
                    d2:e5:28:db:cd:9f:b4:5f:91:81:3e:18:67:82:8c:
                    f8:97:5c:32:d6:13:6b:27:60:a2:78:46:aa:54:89:
                    17:e4:41:9f:ad:64:7c:f7:68:0e:3e:b8:9f:1e:b0:
                    44:d0:04:5b:ea:a2:3a:00:eb:24:a1:b5:76:5c:4a:
                    5c:02:05:da:d0:82:de:31:f4:2f:d3:62:e8:53:3e:
                    4f:55:5f:53:f2:5f:a4:08:6d:23:31:22:54:c7:f3:
                    79:02:4b:b7:57:47:c1:1d:30:b2:b2:d0:0b:18:6d:
                    21:96:0a:47:b2:54:0c:21:ef:69:ac:24:28:c0:ea:
                    0a:d4:dc:fc:93:3b:0b:0b:a2:46:3e:3d:30:70:aa:
                    d5:0b:fd:ed:90:a7:9c:3b:7a:9a:2f:bb:82:f5:2f:
                    3e:0b:02:22:b1:29:fd:e4:34:35:6d:35:03:95:b1:
                    39:8e:66:01:59:2a:c4:bb:67:05:6e:1c:b9:f6:cd:
                    f3:38:67:31:a6:e8:ab:43:e3:66:12:1c:6b:49:1f:
                    6f:9e:86:8f:b4:ee:b2:ba:17:bd:1e:39:d6:ad:24:
                    d3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D2:38:BF:10:C6:14:70:4E:DC:52:DB:3E:CF:3C:96:6F:F3:59:F4
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a383030303a3a2f33342d3334203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         64:d3:c9:4c:3b:3d:a0:6a:97:76:84:65:f4:41:71:85:dc:4f:
         ac:2f:07:ee:e4:2d:51:b6:ea:26:76:a6:8d:d1:fc:7a:85:63:
         fb:3a:0c:26:59:fc:d0:76:d6:09:a7:18:74:75:56:7d:90:3f:
         8d:5a:d9:dc:5b:15:bd:f9:ff:08:96:10:a7:40:c7:75:c2:8a:
         e5:9f:1b:47:0d:05:3e:6d:28:2a:25:37:52:5b:23:fb:ba:54:
         f9:30:3f:57:cb:56:22:a2:0d:4e:10:8c:69:5e:b6:e2:ee:40:
         80:16:77:f0:98:fb:d5:9c:74:d7:a1:33:fc:bb:9b:dc:f4:be:
         73:e3:26:5d:7b:1a:8f:7b:b9:b7:62:5d:cd:0a:ee:7d:44:13:
         e3:21:77:db:75:54:c1:65:b4:0c:9b:32:f2:61:7d:74:13:2b:
         78:1d:2e:cd:86:9d:9c:9c:82:4e:58:15:83:41:d7:6a:27:f8:
         f3:67:4e:39:f0:ef:74:84:dc:87:6c:c9:8d:bd:5b:c5:f8:a3:
         9b:f9:08:1e:0a:aa:f1:e9:20:ce:d0:a2:49:3d:15:a3:5f:3c:
         56:f8:3b:52:08:27:fc:15:cc:b6:d1:85:ec:05:a1:a6:72:cb:
         20:5d:87:a7:7f:63:87:f2:ce:72:a6:9a:ef:89:82:43:5f:03:
         9f:a3:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:17:30 2025 by rpki-client