Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a3a2f33322d3332203d3e20323638343234.roa
File:                     323830343a353130303a3a2f33322d3332203d3e20323638343234.roa (raw, json)
Hash identifier:          Cyh+Qf6VC+kxYp2uwlfrxEuuDL8HkDdYlRIVulv0Kto=
Subject key identifier:   25:F0:7A:F5:7B:08:86:2D:B8:CE:A0:92:36:53:00:8B:FA:0B:A4:B6
Certificate issuer:       /CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
Certificate serial:       67D18ABD344E002238E21D7864E80F43F9121AC7
Authority key identifier: 93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a3a2f33322d3332203d3e20323638343234.roa
Signing time:             Thu 06 Mar 2025 01:41:51 +0000
ROA not before:           Thu 06 Mar 2025 01:36:51 +0000
ROA not after:            Thu 05 Mar 2026 01:41:51 +0000
asID:                     268424
IP address blocks:        2804:5100::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl
                          rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 05:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d1:8a:bd:34:4e:00:22:38:e2:1d:78:64:e8:0f:43:f9:12:1a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Validity
            Not Before: Mar  6 01:36:51 2025 GMT
            Not After : Mar  5 01:41:51 2026 GMT
        Subject: CN=25F07AF57B08862DB8CEA0923653008BFA0BA4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:57:5a:35:36:df:37:b3:e4:70:0d:b8:d0:
                    31:2c:50:b4:51:9f:cc:03:65:c0:30:06:3a:18:a5:
                    a0:29:2a:7b:df:c1:f0:a7:25:17:38:fa:e1:ff:72:
                    1e:11:1b:6f:9e:9d:d9:ba:9a:d5:bc:87:86:2a:de:
                    cf:52:80:10:79:36:f2:30:c0:4e:80:a3:f8:03:89:
                    5f:6d:65:be:e2:2b:99:db:da:58:89:ed:fd:bf:0c:
                    6d:c1:44:53:b5:42:40:9e:93:4f:82:2b:2d:cd:fe:
                    7d:02:70:58:3b:1d:31:db:1d:98:92:0d:1f:6f:32:
                    11:04:76:86:e3:0e:4b:8c:72:0e:1a:b7:2b:d4:7b:
                    51:90:e6:58:7a:e3:54:92:ad:7e:43:7b:5f:c4:c5:
                    5e:60:e3:d0:4f:91:60:ed:76:65:cf:d8:42:1a:ad:
                    3a:72:45:66:a8:3e:be:65:cd:75:7e:74:b3:a9:ba:
                    7f:99:02:c0:e0:c4:e7:83:84:ec:13:97:1d:32:89:
                    f0:10:06:00:77:33:7c:5f:3e:3d:d7:0b:4a:01:9f:
                    40:62:1f:03:b1:29:66:a5:ec:17:f0:3e:9a:03:14:
                    c1:2e:b5:a2:0e:2e:39:97:c6:7e:d3:ae:04:50:6d:
                    48:d9:4f:8e:91:5f:26:1c:d0:4d:bd:52:54:3e:d8:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F0:7A:F5:7B:08:86:2D:B8:CE:A0:92:36:53:00:8B:FA:0B:A4:B6
            X509v3 Authority Key Identifier:
                keyid:93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/323830343a353130303a3a2f33322d3332203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5100::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:91:d2:71:c4:c4:ed:87:7b:14:b3:7e:90:07:b4:21:1a:ea:
         71:a5:f1:c6:ff:c9:8f:ab:56:13:ee:99:c6:f1:d8:4d:81:e7:
         b2:ea:69:24:9a:fe:e1:d7:f4:04:7d:65:21:f9:d6:40:06:c5:
         4b:e7:f1:eb:fd:69:73:b2:9e:7e:da:2d:4b:94:37:e1:98:1e:
         91:c6:94:3f:d6:3f:3a:b9:d2:3c:87:3b:b6:f9:0f:fd:ab:2c:
         d4:50:00:40:db:43:c1:c1:45:c7:50:4d:cd:f8:a7:d2:5c:d5:
         16:8e:b5:25:bb:01:b6:a8:5c:25:79:53:a0:d6:8d:6a:b7:d6:
         b5:09:7b:b0:20:7c:90:7c:1a:56:7e:39:92:d8:79:94:a0:31:
         12:88:d4:d5:3f:01:17:f6:5f:6a:65:37:20:fd:fd:39:d1:f1:
         79:9a:01:41:a1:c4:fc:a0:74:00:b0:2a:9f:c1:50:06:2e:22:
         08:42:67:57:fb:31:09:cd:3a:1f:93:79:69:37:18:02:99:c3:
         90:3e:36:94:d9:86:e7:60:fe:26:f7:d8:44:c1:35:12:0c:ca:
         85:07:9b:92:3e:b6:5b:51:03:ef:e2:d7:79:ad:2f:1a:ea:3d:
         7b:38:de:c7:53:a3:b0:ab:bc:53:05:2d:bf:e6:8e:3e:a6:5c:
         5e:63:b2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:43:58 2025 by rpki-client