Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/323830343a376234633a3a2f33322d313238203d3e20323731343233.roa
File:                     323830343a376234633a3a2f33322d313238203d3e20323731343233.roa (raw, json)
Hash identifier:          D6UugD7LMSE82MNKuHZ6AsbY2I0FQkZFbm92FJ5UaBg=
Subject key identifier:   B2:BB:B3:3C:B0:BE:35:8B:B3:FE:BB:AF:BB:31:B1:80:37:7B:E4:D0
Certificate issuer:       /CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608
Certificate serial:       08F68F866304762518912A97A09D79ECD8244F72
Authority key identifier: CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/323830343a376234633a3a2f33322d313238203d3e20323731343233.roa
Signing time:             Wed 30 Apr 2025 20:02:23 +0000
ROA not before:           Wed 30 Apr 2025 19:57:23 +0000
ROA not after:            Wed 29 Apr 2026 20:02:23 +0000
asID:                     271423
IP address blocks:        2804:7b4c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl
                          rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 14:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f6:8f:86:63:04:76:25:18:91:2a:97:a0:9d:79:ec:d8:24:4f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608
        Validity
            Not Before: Apr 30 19:57:23 2025 GMT
            Not After : Apr 29 20:02:23 2026 GMT
        Subject: CN=B2BBB33CB0BE358BB3FEBBAFBB31B180377BE4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:c6:0c:c2:99:c5:a0:3b:94:d9:cc:2c:fb:
                    58:a5:df:d0:d5:0b:70:67:d1:01:1a:57:20:85:b8:
                    e0:98:76:ed:4f:08:13:c3:68:e0:24:e5:5a:ae:17:
                    d7:5a:64:5c:53:d6:75:da:e9:7e:5c:f3:e6:41:b4:
                    ca:de:16:eb:f0:53:f7:01:cc:6b:fb:66:4c:2d:87:
                    9a:5a:71:d5:e7:ed:c0:0f:13:ba:71:89:e1:ee:c0:
                    87:0f:33:02:9a:de:43:d7:ce:64:35:3c:9f:b9:50:
                    f8:88:ba:fa:9f:ea:00:36:6d:a0:5c:4b:41:94:4d:
                    58:e2:e4:02:50:45:0e:f5:d9:21:35:65:51:00:5b:
                    fb:d0:63:2d:6c:38:26:80:ca:5a:5d:92:0a:b1:1b:
                    00:43:ea:c6:de:aa:35:3d:d3:da:b5:62:06:f4:2c:
                    ca:ef:6d:f8:e7:29:04:46:c8:0c:1c:8c:a0:cf:a7:
                    3a:df:ed:0f:a3:7a:36:dd:81:ca:8f:aa:77:f9:2f:
                    0a:04:61:9f:5f:2e:88:4c:60:bd:ca:1d:c2:10:3a:
                    19:2e:f9:74:f0:9c:ff:cd:87:90:a0:e5:9c:ec:1f:
                    6d:04:7f:cb:ac:cb:02:f6:f2:69:13:28:08:31:ad:
                    2c:9b:cb:b2:90:63:96:e0:9a:0f:8d:55:11:2e:4d:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BB:B3:3C:B0:BE:35:8B:B3:FE:BB:AF:BB:31:B1:80:37:7B:E4:D0
            X509v3 Authority Key Identifier:
                keyid:CE:47:DB:DD:28:40:AA:7B:CB:7E:5B:EF:8D:2B:B7:AD:F7:98:56:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE47DBDD2840AA7BCB7E5BEF8D2BB7ADF7985608.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5hvb94BtP3C8b4GVgyGtfYAAKS8kvjHtx36mdZ29e2s6/0/323830343a376234633a3a2f33322d313238203d3e20323731343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:34:67:6d:98:d5:50:7e:65:4b:cc:54:ed:7a:9c:d2:fc:47:
         e8:8d:bb:d4:38:c0:4c:f7:39:47:a3:2e:50:f3:35:d4:c6:37:
         71:3b:03:10:63:18:5d:d5:37:06:75:0b:b0:e2:df:10:0d:80:
         f0:b1:fe:4f:12:9d:31:e7:7a:36:d8:c0:72:f7:0a:fc:83:53:
         9a:24:50:b2:ac:55:67:9f:ab:73:a5:93:9a:cf:44:72:0f:5d:
         e8:fd:c4:16:2b:2c:ea:a2:1a:ee:a7:b4:c6:88:15:91:85:f8:
         7e:0c:3c:36:1f:6a:b8:0d:8b:7b:3d:5e:f9:09:43:98:dc:23:
         e0:5d:1a:d6:6f:41:37:74:bd:a6:85:ca:00:97:9e:df:62:28:
         27:9f:51:7b:6f:05:89:04:ba:a5:61:fc:95:25:8e:cf:1e:dc:
         cc:74:76:d9:6d:5b:83:d3:b2:c1:78:47:04:78:eb:7d:7f:a8:
         c4:42:8a:49:8b:be:3a:5c:71:0d:b3:f2:4c:b7:8b:87:b3:3b:
         5a:42:a7:e5:85:b4:68:ca:3e:36:af:60:f1:8b:a2:4e:d0:51:
         c0:d1:34:a1:e0:64:e1:91:19:9a:a5:89:33:e3:77:e3:af:5d:
         17:b6:0b:d9:0c:87:a2:15:f6:3d:6b:3d:9f:00:2c:f9:71:69:
         60:44:d3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:10:09 2025 by rpki-client