Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa
File:                     323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa (raw, json)
Hash identifier:          G0oSf+uxpDDhtzDZP9TuvLy9OkdXy0egqltlhoZAf5k=
Subject key identifier:   50:D2:F4:33:B7:7C:A2:8E:9C:3C:5D:3E:8D:A8:75:32:C1:9D:D9:C0
Certificate issuer:       /CN=089033F3A2658F713EF52AAD4E26A915E28F2C55
Certificate serial:       47E73B241E2C6692822BED746D0D040108981E72
Authority key identifier: 08:90:33:F3:A2:65:8F:71:3E:F5:2A:AD:4E:26:A9:15:E2:8F:2C:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa
Signing time:             Mon 12 May 2025 15:00:00 +0000
ROA not before:           Mon 12 May 2025 14:55:00 +0000
ROA not after:            Mon 11 May 2026 15:00:00 +0000
asID:                     265294
IP address blocks:        2804:2da4:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.crl
                          rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 07:26:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e7:3b:24:1e:2c:66:92:82:2b:ed:74:6d:0d:04:01:08:98:1e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089033F3A2658F713EF52AAD4E26A915E28F2C55
        Validity
            Not Before: May 12 14:55:00 2025 GMT
            Not After : May 11 15:00:00 2026 GMT
        Subject: CN=50D2F433B77CA28E9C3C5D3E8DA87532C19DD9C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:e4:90:69:80:15:0e:5b:e8:41:80:58:35:
                    ba:c4:c5:bc:52:77:10:ca:af:60:ec:07:86:4f:1c:
                    31:5a:c4:96:45:97:e9:59:35:bd:03:4c:87:e1:8f:
                    8f:d8:c3:8a:4f:01:0e:e2:0c:11:cb:58:dd:b8:5d:
                    e9:15:f1:cc:2b:f8:0e:ac:36:55:61:65:c7:8b:45:
                    50:0d:f8:30:36:e7:06:e5:1b:6d:dc:d6:df:cb:9a:
                    07:d4:21:58:a2:14:fa:ef:ac:28:35:7b:60:fd:90:
                    34:47:75:66:e1:0b:6e:d0:3d:e0:e6:03:a2:4a:3f:
                    ac:b3:3c:d2:8d:ce:1a:95:bf:31:d2:2a:cb:03:55:
                    c7:85:9e:ca:fd:7f:8b:3b:71:3d:a6:3a:00:34:1c:
                    5c:15:9f:7b:1c:9a:e9:a2:5a:98:3a:51:6c:a6:0c:
                    de:6e:17:3b:b5:ab:e8:82:7d:28:ea:37:21:f9:1d:
                    c1:6e:d4:9c:d2:0e:26:fc:82:a1:b6:db:1c:fe:a6:
                    0c:8a:71:9b:e3:35:cd:87:18:85:16:e1:1c:ad:8c:
                    c1:ab:e8:d9:aa:6b:9c:61:9b:15:0c:c3:c9:2e:bc:
                    ea:89:7c:b5:8d:f5:0c:57:af:b6:d1:de:80:70:75:
                    b8:6b:63:1c:1d:78:44:ac:5a:f7:18:2a:f8:7c:c0:
                    ee:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D2:F4:33:B7:7C:A2:8E:9C:3C:5D:3E:8D:A8:75:32:C1:9D:D9:C0
            X509v3 Authority Key Identifier:
                keyid:08:90:33:F3:A2:65:8F:71:3E:F5:2A:AD:4E:26:A9:15:E2:8F:2C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/089033F3A2658F713EF52AAD4E26A915E28F2C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7F2uTK23xSndtZayouTxQTyU81sNuGUs8E9DLZsEStst/1/323830343a326461343a383030303a3a2f33332d3333203d3e20323635323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2da4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         54:6d:86:95:f0:99:e1:66:f7:36:1a:35:98:0c:7c:75:6c:cc:
         b4:6e:14:72:36:ec:3a:29:ca:ba:01:23:d1:d6:f4:dc:d9:d5:
         47:6e:c1:d8:50:f4:d2:bc:16:ce:d1:78:94:07:f2:27:f3:c7:
         2b:cc:5d:c5:2d:47:23:dc:85:8d:35:26:06:d2:b8:bc:a0:5b:
         d5:09:e1:85:ec:a3:5c:5e:52:66:a1:6a:ce:7e:1d:6a:46:ff:
         c3:6d:97:2f:05:fb:30:b9:b4:a4:96:9f:7f:db:33:40:13:fb:
         78:3d:cd:bf:e4:05:5d:e3:61:e5:ce:fa:84:f7:2b:19:62:ad:
         34:bc:35:df:47:a4:ce:09:ca:a3:10:2a:02:9a:57:bd:c1:e7:
         fd:66:61:1d:09:7e:8c:5e:8b:6e:24:d0:2d:27:7e:6e:82:cf:
         63:5d:5e:dc:39:03:b5:0f:f6:de:30:6a:85:5d:33:a1:8d:cf:
         41:2d:55:50:c7:bd:df:d6:53:e1:52:00:f0:89:bd:6b:80:14:
         23:fc:22:bc:0e:df:66:19:3e:15:c6:ce:1a:23:64:0a:7e:65:
         a8:97:0e:73:bc:77:09:fb:cb:27:19:cc:ec:ea:28:4a:39:3f:
         40:3e:22:1a:8b:a9:c9:0b:29:63:b9:b5:49:37:61:1c:7d:96:
         28:94:9c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 11:34:23 2025 by rpki-client