Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33322d3333203d3e20323637303539.roa
File:                     323830343a343738343a3a2f33322d3333203d3e20323637303539.roa (raw, json)
Hash identifier:          Sjqvf1yBEiUFrHbgUZPX2cvQEcX94SQSveYfWu9aWbY=
Subject key identifier:   A0:17:5F:FB:8F:D2:94:BA:F2:96:8E:EB:70:DF:F3:2A:A4:E5:9F:2F
Certificate issuer:       /CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
Certificate serial:       3836342E46564CC2CF1F4C6C7D8039DBBC09E8F7
Authority key identifier: 13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33322d3333203d3e20323637303539.roa
Signing time:             Sat 26 Apr 2025 18:14:20 +0000
ROA not before:           Sat 26 Apr 2025 18:09:20 +0000
ROA not after:            Sat 25 Apr 2026 18:14:20 +0000
asID:                     267059
IP address blocks:        2804:4784::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl
                          rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 05:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:36:34:2e:46:56:4c:c2:cf:1f:4c:6c:7d:80:39:db:bc:09:e8:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13A8F7FF18790DD7526A982E956B58BEB7F34AEE
        Validity
            Not Before: Apr 26 18:09:20 2025 GMT
            Not After : Apr 25 18:14:20 2026 GMT
        Subject: CN=A0175FFB8FD294BAF2968EEB70DFF32AA4E59F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:8f:5e:2c:eb:f1:df:32:d5:4a:4d:69:a6:
                    53:98:84:3d:b7:da:b7:62:c0:af:54:18:ba:8a:e0:
                    37:02:61:e0:d3:c8:7c:12:90:75:bb:4b:f7:b2:10:
                    92:a0:3d:75:ba:6c:77:05:49:3e:eb:4a:a7:47:5e:
                    9f:32:1f:b9:35:0d:48:1d:1d:86:6a:0e:7c:12:ce:
                    e7:e1:83:53:ac:5f:c0:ce:49:f6:8c:da:6f:3c:db:
                    d6:88:f0:8b:e6:9e:9d:01:04:65:4c:3c:63:a0:75:
                    de:6a:7c:8a:a4:de:20:2a:53:b6:cd:c3:57:00:55:
                    39:44:0d:13:2b:3f:b9:3d:05:0a:2f:e9:76:ec:99:
                    0e:8d:bc:2e:e8:78:fd:dc:71:d6:57:4c:c4:fe:a8:
                    82:4e:52:35:6b:d0:7e:ee:5f:54:4d:df:0f:fa:8d:
                    11:4e:0a:9e:3e:1d:61:e9:f3:5d:d4:bf:49:66:6c:
                    2a:b3:a1:42:22:86:f1:ef:67:12:e1:ac:b8:a8:67:
                    22:11:65:5c:77:68:68:41:c8:96:f6:da:0e:39:2e:
                    13:45:17:bd:5e:25:47:6e:5e:d7:63:13:32:04:9a:
                    07:18:4a:ff:af:9e:6f:87:ec:ec:74:36:2b:cb:6c:
                    61:4d:4d:57:e5:40:22:27:09:3d:f3:db:88:7e:6a:
                    96:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:17:5F:FB:8F:D2:94:BA:F2:96:8E:EB:70:DF:F3:2A:A4:E5:9F:2F
            X509v3 Authority Key Identifier:
                keyid:13:A8:F7:FF:18:79:0D:D7:52:6A:98:2E:95:6B:58:BE:B7:F3:4A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/13A8F7FF18790DD7526A982E956B58BEB7F34AEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a3a2f33322d3333203d3e20323637303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4784::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:43:bc:90:59:f0:aa:59:02:ca:7a:de:00:a1:96:fe:8c:b1:
         16:b4:b8:6d:d1:b1:2c:56:d9:18:7e:ec:4d:81:e0:c6:66:68:
         78:b7:59:cc:bb:7c:0f:f5:a7:81:43:d4:5f:58:a7:ac:db:51:
         a1:7b:b9:ce:f8:56:15:6e:c6:a0:1b:5a:fd:97:ac:6b:2a:1f:
         8c:f9:7b:d9:2b:ce:46:a7:cb:22:85:93:bc:c8:08:16:e7:d6:
         17:86:42:10:d0:d0:85:68:5e:46:6c:b9:2e:73:ea:2e:06:6b:
         66:f2:ef:2d:23:f1:c2:2f:00:1d:90:ef:20:5f:c9:f6:0e:05:
         58:9f:ae:84:4c:c5:38:b0:1c:57:f4:6a:e6:8d:59:7c:c0:55:
         f3:8e:e1:d9:a7:7d:5b:e3:9c:e1:97:71:a8:ad:41:3e:c0:c8:
         ec:ca:66:b3:25:fa:38:2a:93:49:1f:51:56:26:de:ad:d9:b8:
         42:e8:b7:8e:c8:a3:c7:04:02:b1:02:3d:60:15:19:b0:83:fe:
         be:89:14:32:f8:74:ea:5f:6a:10:22:0c:ca:40:8f:94:51:9c:
         03:cb:58:75:12:33:ae:12:44:05:c2:1b:67:d8:dc:c2:a7:e6:
         30:8b:6a:82:f8:2f:bd:d1:09:9e:ed:13:09:97:8d:d5:bc:f0:
         24:24:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:25:06 2025 by rpki-client