Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a633030303a3a2f33342d3334203d3e20323731373031.roa
File:                     323830343a376661383a633030303a3a2f33342d3334203d3e20323731373031.roa (raw, json)
Hash identifier:          tvSC4jSZ12kTWbwLEagoCVZ9pGvYHxXnoh2Jv49kyY4=
Subject key identifier:   0A:00:98:B1:43:BE:16:47:A7:F4:50:1F:BD:3D:BA:D4:AF:98:CC:C0
Certificate issuer:       /CN=05563772FA5F7F02E46B10D42952096452B02F7E
Certificate serial:       115D7DE878DB8E0F8D25E65F26E270BD9F55555A
Authority key identifier: 05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a633030303a3a2f33342d3334203d3e20323731373031.roa
Signing time:             Tue 13 May 2025 14:00:23 +0000
ROA not before:           Tue 13 May 2025 13:55:23 +0000
ROA not after:            Tue 12 May 2026 14:00:23 +0000
asID:                     271701
IP address blocks:        2804:7fa8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl
                          rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 17:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5d:7d:e8:78:db:8e:0f:8d:25:e6:5f:26:e2:70:bd:9f:55:55:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05563772FA5F7F02E46B10D42952096452B02F7E
        Validity
            Not Before: May 13 13:55:23 2025 GMT
            Not After : May 12 14:00:23 2026 GMT
        Subject: CN=0A0098B143BE1647A7F4501FBD3DBAD4AF98CCC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:f2:09:f4:e8:27:54:01:ed:a5:65:a1:03:
                    75:54:13:fa:12:c8:30:22:f5:b3:2e:4e:9d:08:5e:
                    90:d8:36:06:c0:d5:86:29:67:99:f2:26:75:f1:e7:
                    06:b5:eb:de:bd:3d:dc:ef:f2:0c:4e:d3:a2:ef:1e:
                    bc:b2:2d:bc:0d:31:3e:1b:25:ce:b8:dd:1d:54:03:
                    6e:a4:f7:f3:74:b7:07:d4:93:f1:ca:e8:ab:c0:be:
                    6f:07:d6:a9:be:46:c5:2c:28:c5:64:cd:c5:55:4c:
                    ef:96:2a:da:9a:f6:f1:44:b2:ca:4c:43:24:dd:91:
                    b1:e0:85:08:29:32:07:fa:31:f9:89:44:b1:5a:29:
                    85:a4:65:79:e5:54:9e:9a:13:69:02:93:91:13:65:
                    49:a3:8f:e7:db:27:e0:de:4e:30:6b:ed:b2:b4:f7:
                    71:fb:87:d1:ed:b5:36:c8:6b:b1:2d:87:08:3c:aa:
                    1b:90:99:f4:93:59:d1:6b:b0:92:e3:25:d7:c8:2e:
                    c1:1e:bb:20:48:51:63:b8:5f:23:41:0f:9a:c8:55:
                    49:e9:44:23:e4:1f:47:12:f5:b6:5b:cf:3b:73:36:
                    65:b8:87:0d:ff:a0:7b:03:f1:16:9d:84:85:71:f1:
                    bf:d6:29:78:b5:f9:00:c4:ba:3c:8d:b0:65:95:df:
                    e4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:00:98:B1:43:BE:16:47:A7:F4:50:1F:BD:3D:BA:D4:AF:98:CC:C0
            X509v3 Authority Key Identifier:
                keyid:05:56:37:72:FA:5F:7F:02:E4:6B:10:D4:29:52:09:64:52:B0:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/05563772FA5F7F02E46B10D42952096452B02F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05563772FA5F7F02E46B10D42952096452B02F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/323830343a376661383a633030303a3a2f33342d3334203d3e20323731373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7fa8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         76:db:e8:f9:cf:04:40:ff:fa:1c:c3:fd:52:5a:14:68:94:2e:
         87:69:e5:a7:a3:20:e0:aa:c9:44:70:9b:00:da:44:f8:7c:9e:
         92:4e:6b:1f:d3:44:df:fd:81:11:6b:a7:0c:89:dc:30:4a:36:
         70:4d:a5:9c:97:89:30:3e:11:25:45:4f:b0:2f:7d:63:db:16:
         ba:89:35:97:ba:82:64:96:d8:a3:ea:2d:3c:30:87:61:2c:17:
         95:e1:22:c0:e9:74:8a:95:ce:8e:4c:e8:b6:1b:5c:08:cc:c9:
         bf:8d:a5:66:d4:3f:68:2d:13:71:e4:ef:d4:3b:38:d0:6c:e3:
         7e:45:70:59:ef:ef:af:d0:d5:91:ad:a6:aa:42:6d:18:a0:e9:
         51:19:40:ce:eb:03:79:bb:c5:35:68:1f:1c:22:e1:7c:9c:24:
         6d:f8:31:96:4e:c3:ec:79:8a:5f:17:e4:79:3a:f1:8a:1a:5f:
         a7:c1:06:4f:ba:71:1c:42:bf:75:fc:cc:24:20:91:bd:e3:64:
         83:48:81:30:ba:48:12:01:4d:61:7f:55:7e:62:70:96:3a:9a:
         85:3d:05:1c:53:c7:64:19:16:f8:99:8a:f5:fd:53:23:c8:ac:
         02:cb:95:f6:e1:03:42:47:31:3c:3a:2e:67:03:89:ec:fc:4b:
         8c:86:e0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:14:18 2025 by rpki-client