Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a353030303a3a2f33362d3336203d3e203631393233.roa
File:                     323830343a313833343a353030303a3a2f33362d3336203d3e203631393233.roa (raw, json)
Hash identifier:          Ra0n/6YkzociQSTJUFJ7gZ+usimc6642gaNX/LXkNIg=
Subject key identifier:   BC:7E:2A:E8:A7:24:12:15:DB:08:A4:0D:F7:6D:2F:AC:90:FB:E7:C6
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       2A51CCFF9AAF235A01EF195BFA343AE89DC1EF0F
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a353030303a3a2f33362d3336203d3e203631393233.roa
Signing time:             Tue 15 Apr 2025 19:08:12 +0000
ROA not before:           Tue 15 Apr 2025 19:03:12 +0000
ROA not after:            Tue 14 Apr 2026 19:08:12 +0000
asID:                     61923
IP address blocks:        2804:1834:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 08:50:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:51:cc:ff:9a:af:23:5a:01:ef:19:5b:fa:34:3a:e8:9d:c1:ef:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Apr 15 19:03:12 2025 GMT
            Not After : Apr 14 19:08:12 2026 GMT
        Subject: CN=BC7E2AE8A7241215DB08A40DF76D2FAC90FBE7C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4b:44:dd:65:d9:30:b9:8e:b7:4a:d6:41:1d:
                    67:0d:8d:cf:e4:e1:c4:90:52:ba:17:2a:a6:19:a4:
                    c2:76:62:f2:f6:a3:c8:6f:d8:24:df:43:61:19:b7:
                    cf:ed:a3:67:cb:dc:8d:ae:a7:35:ce:58:20:c0:c3:
                    3e:6a:94:ec:82:e4:33:71:e8:23:f6:7e:43:4d:38:
                    4e:44:ef:fd:14:b2:64:1e:0b:b3:5f:fe:51:2b:e3:
                    14:ea:1e:88:9c:e9:34:99:7a:65:43:0d:5c:46:c4:
                    aa:93:64:7d:d4:ca:93:27:22:08:1c:cb:5b:e3:cb:
                    0d:b5:ec:39:be:3f:38:18:fa:e2:8b:ef:97:e5:67:
                    c8:cc:a7:d7:0e:e8:f4:48:0a:18:84:bf:d1:aa:a2:
                    94:e9:f8:0b:b8:df:37:2f:d8:b8:fa:fa:f8:78:54:
                    c3:0c:12:c0:0c:4d:33:75:ad:70:8e:17:4a:55:0b:
                    83:7c:5a:e1:4e:8f:27:1d:01:67:19:b9:64:a8:57:
                    f0:7f:e5:da:6c:b1:83:cb:e9:e6:20:99:2c:0c:cd:
                    71:d9:31:14:0b:c4:f4:58:48:72:06:ad:db:36:4b:
                    d1:2e:c3:d7:38:36:f9:0d:7c:06:dd:1d:66:bb:6b:
                    66:8f:3a:f9:5e:b0:37:9d:d6:3a:be:81:77:4a:41:
                    78:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7E:2A:E8:A7:24:12:15:DB:08:A4:0D:F7:6D:2F:AC:90:FB:E7:C6
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/323830343a313833343a353030303a3a2f33362d3336203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1834:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         84:1b:e6:af:a8:c4:a8:8f:64:c4:c5:5d:4c:ba:cc:cc:b1:1c:
         73:8b:3f:ff:56:29:2d:77:e3:f5:4f:fc:9e:1c:b2:9f:58:d7:
         d7:0c:10:d7:0c:69:ec:6e:77:c1:13:ed:db:18:c7:5b:a5:ab:
         84:60:96:26:fa:3a:a3:4c:d4:a5:4f:f7:4e:91:b7:53:c5:f1:
         6b:e5:be:e2:36:f7:35:c2:9b:56:e8:b2:37:bb:f9:be:f6:ea:
         f0:ab:ae:91:81:84:3c:75:aa:8a:d7:97:05:79:a4:a6:68:24:
         68:80:50:5c:55:11:9d:cd:e5:c2:e6:0a:bb:31:fa:ec:e1:fe:
         0c:3a:f3:16:e2:1e:be:0c:d9:1c:46:20:b1:20:99:88:f1:7d:
         45:8d:6e:5b:25:bb:11:37:1c:b1:13:40:1d:cb:d2:ac:39:1f:
         81:2b:9c:32:77:0a:69:dc:76:db:4a:0f:e0:95:76:19:cb:b7:
         b5:30:19:fa:09:1e:7f:79:eb:d9:ad:fa:1b:84:54:54:09:cc:
         45:42:be:77:6e:0d:7b:d4:51:02:3a:2f:c6:17:3c:8b:d3:e3:
         ff:72:50:d0:96:d7:15:8e:7f:09:50:ac:4c:db:84:5a:0f:8e:
         d4:b6:75:b5:ea:0f:27:0b:e1:86:93:cd:6a:a3:11:11:68:3c:
         c7:0a:71:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:30:32 2025 by rpki-client