Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa
File:                     323830343a353534633a3a2f33322d3332203d3e20323632383939.roa (raw, json)
Hash identifier:          ZkjO2ZXyzt3Q/Y5gmQ1gEDDN6kSVOBiG+BJqjtUJPeM=
Subject key identifier:   59:08:54:95:B0:DC:21:7A:EE:69:3A:25:9E:F1:64:15:E2:67:0C:FF
Certificate issuer:       /CN=65ED5B226428D53E661BBABFEE00DB614AC84E30
Certificate serial:       3A1901FC55C18EC5E744CAFA0B851A114D726F9E
Authority key identifier: 65:ED:5B:22:64:28:D5:3E:66:1B:BA:BF:EE:00:DB:61:4A:C8:4E:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65ED5B226428D53E661BBABFEE00DB614AC84E30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa
Signing time:             Mon 05 May 2025 12:33:01 +0000
ROA not before:           Mon 05 May 2025 12:28:01 +0000
ROA not after:            Mon 04 May 2026 12:33:01 +0000
asID:                     262899
IP address blocks:        2804:554c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/65ED5B226428D53E661BBABFEE00DB614AC84E30.crl
                          rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/65ED5B226428D53E661BBABFEE00DB614AC84E30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65ED5B226428D53E661BBABFEE00DB614AC84E30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 20:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:19:01:fc:55:c1:8e:c5:e7:44:ca:fa:0b:85:1a:11:4d:72:6f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65ED5B226428D53E661BBABFEE00DB614AC84E30
        Validity
            Not Before: May  5 12:28:01 2025 GMT
            Not After : May  4 12:33:01 2026 GMT
        Subject: CN=59085495B0DC217AEE693A259EF16415E2670CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:0f:79:5d:08:57:a7:49:eb:2d:45:42:25:
                    27:13:f1:c8:31:50:d8:b3:93:70:b6:6a:25:a4:a7:
                    3c:14:3c:f3:f3:24:04:42:69:c5:ad:b1:21:1b:59:
                    e7:69:3c:33:4b:fd:9d:c2:69:f7:fe:21:99:e5:db:
                    ef:1e:2c:13:35:51:b9:9b:da:66:aa:e1:90:04:74:
                    90:45:81:49:1b:50:9e:b6:fd:fa:a7:00:d6:02:81:
                    3f:0c:11:4e:a8:19:9e:8d:83:6c:c7:5f:5d:ce:aa:
                    9a:93:0e:96:13:49:99:08:e0:56:d7:94:b4:05:d5:
                    be:9b:e3:70:58:f0:c5:8c:55:3c:85:f0:70:64:40:
                    d7:52:c1:26:72:b7:5e:1b:c9:05:a7:f8:d2:36:19:
                    6b:74:b4:96:92:85:13:d4:bd:5b:2f:cd:30:6a:02:
                    fc:a1:c9:15:3e:82:35:c2:67:06:88:86:8d:52:28:
                    f3:f8:0d:15:09:45:05:47:fa:e2:61:60:1d:f2:63:
                    9e:6a:c1:db:ef:ad:41:34:d1:9e:d3:e8:ca:7b:a2:
                    04:d6:ea:b5:d4:89:60:1a:2f:91:a5:ae:f2:ce:0a:
                    47:a9:09:c7:5b:b4:a4:fa:09:04:03:10:af:04:6f:
                    2a:8e:99:f2:80:f6:95:2b:f7:b8:54:67:4a:7b:db:
                    45:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:08:54:95:B0:DC:21:7A:EE:69:3A:25:9E:F1:64:15:E2:67:0C:FF
            X509v3 Authority Key Identifier:
                keyid:65:ED:5B:22:64:28:D5:3E:66:1B:BA:BF:EE:00:DB:61:4A:C8:4E:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/65ED5B226428D53E661BBABFEE00DB614AC84E30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65ED5B226428D53E661BBABFEE00DB614AC84E30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:554c::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:1e:fe:2d:db:7a:94:cc:a1:5a:55:8f:4f:e3:5c:79:1c:66:
         f1:59:38:9c:40:b9:88:a9:e5:f0:03:6c:7e:a3:af:26:6e:f1:
         14:63:ef:25:ae:79:1d:8a:0a:c2:6e:59:91:ed:d8:7a:23:bd:
         c3:8b:eb:e2:7b:6a:6b:ee:72:3e:87:12:3c:ce:4e:de:3f:e8:
         00:c9:2a:77:63:8b:cd:78:c7:09:dd:b8:8e:f4:f6:71:e0:0c:
         fd:e7:0e:16:f8:59:9e:2c:8e:8a:2b:2f:ee:d5:d7:66:61:62:
         ee:02:e5:2a:4b:01:b3:96:c3:67:fd:73:13:fc:1c:f9:c2:fc:
         e3:89:b4:86:ad:7f:c2:d5:65:b7:64:36:4a:9d:fa:79:fe:a7:
         65:c8:93:da:67:50:54:2b:ea:8f:10:92:65:6b:07:d6:fe:b0:
         18:00:9e:71:96:45:4a:e9:92:1b:07:e9:cd:5c:49:a2:76:5d:
         17:6a:c0:2a:a5:67:14:2e:02:b8:07:05:06:e3:94:79:14:fe:
         04:8a:68:61:ea:5d:fa:ab:3a:08:1d:77:05:a0:26:78:68:64:
         8b:3b:71:0a:42:de:24:4f:0d:dc:a9:ab:5c:ac:c9:07:c3:e7:
         fe:d6:f8:99:68:60:ff:ab:59:54:b4:37:c3:84:3d:ba:0e:72:
         c9:3a:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 01:11:47 2025 by rpki-client