Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/323830343a383539343a3a2f33322d3333203d3e20323732353838.roa
File:                     323830343a383539343a3a2f33322d3333203d3e20323732353838.roa (raw, json)
Hash identifier:          ug0K6WFDKBWM3KOJ4cnBW4ah011CH9FeGcHhPHd0qkI=
Subject key identifier:   DC:B4:16:DA:5D:92:71:4E:B0:E4:28:64:47:BD:1E:E8:6D:EE:2D:D8
Certificate issuer:       /CN=404EF1E548374354D9B828749323416749EF23B4
Certificate serial:       18BB7C0D4429B66F36D4E626F8EAA482CD4BEC9B
Authority key identifier: 40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/323830343a383539343a3a2f33322d3333203d3e20323732353838.roa
Signing time:             Mon 05 May 2025 11:44:13 +0000
ROA not before:           Mon 05 May 2025 11:39:13 +0000
ROA not after:            Mon 04 May 2026 11:44:13 +0000
asID:                     272588
IP address blocks:        2804:8594::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.crl
                          rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 May 2025 01:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bb:7c:0d:44:29:b6:6f:36:d4:e6:26:f8:ea:a4:82:cd:4b:ec:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=404EF1E548374354D9B828749323416749EF23B4
        Validity
            Not Before: May  5 11:39:13 2025 GMT
            Not After : May  4 11:44:13 2026 GMT
        Subject: CN=DCB416DA5D92714EB0E4286447BD1EE86DEE2DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:b4:50:00:25:82:9b:fa:bf:85:76:85:df:
                    0d:fc:79:52:14:f2:9f:06:73:ce:08:03:f3:c9:e2:
                    e7:77:ac:7e:e3:6f:64:9f:f1:93:5c:32:ed:f3:01:
                    a7:cb:7e:75:0e:ea:31:34:64:0c:9d:c8:2a:c0:55:
                    75:ac:d4:c2:18:41:2f:56:04:38:66:48:2d:7b:60:
                    b5:12:b5:76:37:83:22:6a:2f:81:6f:d8:dd:53:4f:
                    dd:7e:24:ee:17:9c:5a:4d:89:2c:e2:e3:eb:06:a0:
                    ee:2e:81:97:72:91:70:39:95:fa:ad:b2:ae:d3:74:
                    4a:d5:29:69:43:d8:ff:70:8b:7c:87:e7:89:2f:5e:
                    56:90:e6:c8:39:29:ee:9e:2e:71:c9:bd:13:d8:55:
                    13:73:0f:41:6d:f9:41:75:9a:3a:b8:22:2d:a7:0e:
                    da:91:38:76:44:1e:eb:7c:f9:6c:d1:16:33:2f:e0:
                    17:4e:6d:4f:56:10:bc:2d:56:38:79:a7:28:90:00:
                    f0:8b:6d:62:c4:c5:17:b1:39:c9:63:8e:03:43:22:
                    61:a4:62:f6:4f:68:6c:32:96:35:11:c6:bd:46:f7:
                    e8:d4:70:3a:27:27:2c:76:d4:d6:97:be:4b:ba:d2:
                    f9:41:c8:08:98:77:fb:00:05:3e:d9:f7:bf:34:3c:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:16:DA:5D:92:71:4E:B0:E4:28:64:47:BD:1E:E8:6D:EE:2D:D8
            X509v3 Authority Key Identifier:
                keyid:40:4E:F1:E5:48:37:43:54:D9:B8:28:74:93:23:41:67:49:EF:23:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/404EF1E548374354D9B828749323416749EF23B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/404EF1E548374354D9B828749323416749EF23B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fbKWBuA5wDeG8nMUKAUokahdjghf6EazfVWhgLGd93V/0/323830343a383539343a3a2f33322d3333203d3e20323732353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8594::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:93:da:b3:0f:a3:5b:b9:7c:16:56:6e:fb:81:c3:f2:a7:ce:
         06:a4:3f:ad:a4:13:ef:24:9a:78:48:8e:29:5f:f9:47:7d:d4:
         b0:39:2a:d3:87:db:b5:d7:28:ea:ed:1b:e5:09:8e:05:7d:3e:
         67:69:de:d8:8c:df:8e:ac:3d:f8:32:e7:ca:34:e4:b7:96:a4:
         90:79:ed:20:a2:12:7c:ee:2c:8f:1f:c0:26:b4:95:b1:32:13:
         38:27:17:2e:37:76:25:f7:12:3a:e8:c2:7b:03:8e:a9:af:4d:
         e4:76:2e:a1:09:54:df:38:17:d4:1c:04:c7:bd:ea:42:f2:27:
         70:46:b5:8f:37:b0:62:db:53:c0:d2:0a:a8:ce:68:3e:bb:97:
         37:39:32:ee:5a:b7:ec:23:92:49:f1:61:d5:ca:d9:ae:f3:e4:
         bc:05:e9:7c:b0:44:86:df:7a:1c:15:58:ad:2a:85:d5:f1:b5:
         c1:48:2e:d0:95:8c:00:c3:12:65:af:74:8c:7a:4e:84:f5:0d:
         aa:47:45:5f:74:3d:22:a9:8d:fd:c1:ea:6b:7e:47:6f:19:fc:
         00:6b:94:9e:8d:d4:df:cc:97:71:ca:ff:31:1c:c0:6b:ce:fe:
         2a:4e:d6:f1:d3:03:6b:a7:18:98:07:f7:c4:ec:0e:43:2e:fe:
         d7:df:8d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 07:42:39 2025 by rpki-client