Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa
File:                     323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa (raw, json)
Hash identifier:          LfarhGnNjKHnPAFgd3CYwp0sdISX37Y7r//68lj+vzY=
Subject key identifier:   12:72:23:6B:F3:99:CD:DE:91:00:55:0D:A7:3F:96:2A:0B:B5:C8:DF
Certificate issuer:       /CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
Certificate serial:       4EBC4EAFAD13A35BEE57AA7577C34BB6A9C2EF35
Authority key identifier: D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa
Signing time:             Tue 29 Apr 2025 17:45:26 +0000
ROA not before:           Tue 29 Apr 2025 17:40:26 +0000
ROA not after:            Tue 28 Apr 2026 17:45:26 +0000
asID:                     267027
IP address blocks:        2804:4708:c000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 05:10:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bc:4e:af:ad:13:a3:5b:ee:57:aa:75:77:c3:4b:b6:a9:c2:ef:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
        Validity
            Not Before: Apr 29 17:40:26 2025 GMT
            Not After : Apr 28 17:45:26 2026 GMT
        Subject: CN=1272236BF399CDDE9100550DA73F962A0BB5C8DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:8c:6f:5e:27:50:bb:10:74:1d:f9:b4:60:
                    e1:d5:27:e8:70:61:d2:bb:75:d0:6d:26:85:bf:00:
                    c8:8e:84:8c:20:94:54:98:e8:96:da:dd:f8:50:22:
                    fc:47:ab:37:de:30:4f:1a:91:6b:57:2e:f3:29:86:
                    31:98:8a:27:a9:f0:cc:0b:3b:d3:74:a2:8e:0b:85:
                    4b:ec:ef:22:cc:98:98:89:10:42:26:9a:54:77:e2:
                    a7:25:69:06:a1:10:bd:a2:1e:e5:cf:57:3a:83:60:
                    d4:e5:18:50:12:26:0f:e8:04:54:17:fa:66:52:6b:
                    57:39:22:25:58:a8:26:2a:9e:3b:21:46:ca:ba:96:
                    71:46:7f:5d:6e:94:df:31:9c:db:84:1e:b1:20:f9:
                    5c:75:e4:1d:0f:49:58:6d:c3:ef:e7:ae:a1:71:11:
                    d2:8d:2f:d1:b7:5a:c4:a4:11:0c:9d:3b:72:14:80:
                    86:2b:5d:13:24:f3:6c:88:55:68:d8:2c:81:5a:54:
                    07:35:a5:a8:e3:50:8d:5b:33:46:f3:2e:42:44:10:
                    39:a2:37:6a:ec:02:19:c0:7c:cc:88:77:1a:57:da:
                    67:6c:09:11:41:93:2c:32:4a:ff:ea:cb:65:ca:43:
                    c5:e7:1f:f2:d8:be:76:dd:4f:ec:b3:00:43:0c:34:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:72:23:6B:F3:99:CD:DE:91:00:55:0D:A7:3F:96:2A:0B:B5:C8:DF
            X509v3 Authority Key Identifier:
                keyid:D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a633030303a3a2f33372d3337203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         e1:6c:cb:80:75:6c:9a:30:de:69:03:64:e6:4d:5b:dd:47:8c:
         85:ed:e7:a1:bf:85:56:65:16:5a:fc:d6:f9:84:ed:65:b1:2f:
         9b:0e:8d:02:60:d4:82:eb:21:0f:69:e9:6f:94:30:32:46:03:
         0b:eb:39:7f:9d:1c:03:17:2e:a0:02:c1:a3:98:f8:b7:49:c2:
         38:88:b8:e8:61:0a:8d:a8:2a:46:ae:5f:52:23:50:68:2f:40:
         0b:7f:ca:1c:49:7a:03:d5:4c:62:7c:bb:a5:9f:c8:42:1a:18:
         96:67:d3:c2:f7:83:59:cd:72:a4:14:6f:c5:3a:57:fe:51:4b:
         93:f8:46:8e:3c:05:3c:35:69:4c:0e:f6:a8:fa:a2:f5:04:71:
         2e:3b:9c:9a:c2:38:35:5e:0d:45:15:32:55:57:50:b0:c3:e2:
         59:5d:b0:14:95:6a:0b:8d:1f:df:1f:a8:46:a6:cf:07:0c:18:
         87:69:9f:8b:58:ff:b3:8c:f8:a3:01:51:55:2f:a6:06:01:de:
         1d:92:e3:0c:26:fc:9b:e4:b1:70:60:e8:73:f1:bc:c8:51:e5:
         84:ea:64:e3:a3:61:96:4a:c6:4c:3e:42:28:ac:55:6d:5b:7f:
         6d:0d:45:62:c5:5d:a4:7f:0d:c8:3f:36:09:03:87:23:18:44:
         49:97:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:48:36 2025 by rpki-client