Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/323830343a353737383a3a2f33322d3438203d3e20323638303637.roa
File:                     323830343a353737383a3a2f33322d3438203d3e20323638303637.roa (raw, json)
Hash identifier:          YcHNCzba80Cl/YxYgOIz0MJ3Tze/Lg2AKgVbs8dAqPI=
Subject key identifier:   2C:03:89:40:61:7A:C7:F7:3B:5C:4D:78:9D:55:8B:61:20:FE:BC:59
Certificate issuer:       /CN=B8B386180239E0E94402A3C51AD2C5F24E37A621
Certificate serial:       4ABF060DAC64C2E613B0044F63B7A57E7495A9F2
Authority key identifier: B8:B3:86:18:02:39:E0:E9:44:02:A3:C5:1A:D2:C5:F2:4E:37:A6:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B386180239E0E94402A3C51AD2C5F24E37A621.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/323830343a353737383a3a2f33322d3438203d3e20323638303637.roa
Signing time:             Wed 07 May 2025 16:19:32 +0000
ROA not before:           Wed 07 May 2025 16:14:32 +0000
ROA not after:            Wed 06 May 2026 16:19:32 +0000
asID:                     268067
IP address blocks:        2804:5778::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/B8B386180239E0E94402A3C51AD2C5F24E37A621.crl
                          rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/B8B386180239E0E94402A3C51AD2C5F24E37A621.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B386180239E0E94402A3C51AD2C5F24E37A621.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:bf:06:0d:ac:64:c2:e6:13:b0:04:4f:63:b7:a5:7e:74:95:a9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8B386180239E0E94402A3C51AD2C5F24E37A621
        Validity
            Not Before: May  7 16:14:32 2025 GMT
            Not After : May  6 16:19:32 2026 GMT
        Subject: CN=2C038940617AC7F73B5C4D789D558B6120FEBC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:04:62:e9:7f:6a:d2:fa:7a:40:92:11:bc:
                    0f:fa:7a:aa:49:3a:22:fa:27:a8:ea:b3:95:e8:41:
                    e3:d1:4e:07:ff:5d:03:9f:ee:94:e2:13:ad:fa:df:
                    d0:1c:0d:b9:4a:2b:b3:59:60:45:db:cc:0c:a5:d0:
                    66:4a:94:e0:65:d1:44:f6:b7:85:4a:9d:ed:9c:53:
                    3f:46:44:0a:12:a4:48:16:54:e1:b1:ac:c6:0e:ac:
                    31:ad:58:71:a8:79:4f:66:7c:98:9d:f5:db:9f:63:
                    11:24:8c:a9:61:8d:ed:ad:ed:0f:1d:49:12:66:3d:
                    ef:d9:90:3b:0d:92:f4:ab:63:43:10:71:b5:4a:a3:
                    6c:25:1c:2f:d8:c9:73:ac:b8:29:4d:71:ae:72:04:
                    9c:df:c9:c8:41:c5:3f:61:9b:1f:4a:58:1b:ac:d7:
                    53:af:21:97:d0:8b:f8:38:08:69:a4:6f:30:6d:14:
                    d6:ff:86:76:e9:be:80:a0:ab:bb:10:fd:8f:ab:ce:
                    53:02:c8:1e:70:20:78:c1:d7:86:92:53:23:83:a3:
                    59:b7:44:f8:53:4e:ff:c3:25:e6:99:5c:9a:d6:4d:
                    14:d2:83:1a:23:96:f8:7c:e1:74:93:75:7c:a8:ca:
                    69:3f:a2:d6:03:61:3f:94:50:df:a0:38:92:1f:2a:
                    08:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:03:89:40:61:7A:C7:F7:3B:5C:4D:78:9D:55:8B:61:20:FE:BC:59
            X509v3 Authority Key Identifier:
                keyid:B8:B3:86:18:02:39:E0:E9:44:02:A3:C5:1A:D2:C5:F2:4E:37:A6:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/B8B386180239E0E94402A3C51AD2C5F24E37A621.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B386180239E0E94402A3C51AD2C5F24E37A621.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Zr5wzH5YF8VShfbqdxoG9wmCFeWKHervmL73wf2qLuf/0/323830343a353737383a3a2f33322d3438203d3e20323638303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5778::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:23:ac:ab:4b:41:9e:b9:f4:be:cd:5d:57:c0:b8:c2:ee:40:
         38:26:26:86:8e:c9:c6:81:dc:9c:0a:ff:4b:93:70:b1:96:a7:
         44:d3:f3:d7:c6:84:77:0e:29:d6:54:ca:cd:41:89:d9:72:fb:
         bd:db:79:e2:c2:4d:4a:b6:12:a4:c2:1d:fb:74:3f:f4:43:ac:
         34:5a:e3:e3:19:4b:bc:d2:62:4d:0e:92:ab:2a:25:17:99:f0:
         d4:5f:34:65:b9:8a:fa:14:9d:d4:02:3a:97:48:16:79:05:fc:
         7b:c9:50:66:b8:fc:51:30:b4:c5:66:d9:38:62:90:4d:65:5c:
         ed:74:ac:00:da:0b:4c:ac:5e:68:43:29:53:81:2d:67:ff:a7:
         24:31:ad:0a:8b:59:84:d7:af:89:be:49:b8:3c:92:f8:96:19:
         a9:f7:39:50:61:48:fd:8b:67:f1:5b:f5:6a:d2:7b:bf:38:f0:
         c2:f1:86:a8:28:52:ce:74:b8:e9:cb:7d:2e:c5:95:9e:c6:11:
         ae:5f:e0:1a:e4:7e:aa:d8:b1:91:30:b2:97:1a:9e:b2:ac:52:
         42:38:cd:67:da:1b:35:0f:8b:6a:81:81:2e:f1:f5:81:a7:2f:
         86:f5:ef:75:52:1f:12:b1:6c:ee:55:51:6e:24:c8:15:a8:fe:
         96:4b:71:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:40:37 2025 by rpki-client