Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a3a2f33322d3332203d3e20323638333033.roa
File:                     323830343a346631383a3a2f33322d3332203d3e20323638333033.roa (raw, json)
Hash identifier:          DHLm0yLGc84+vn3Y5PBX0UUz8B6SHpF5k7kNdM2zv9c=
Subject key identifier:   DC:43:BA:55:97:FD:ED:46:74:0B:2D:10:AC:99:BE:22:50:29:11:17
Certificate issuer:       /CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
Certificate serial:       35D20B1A71BD90432C8E537510F98326B707B01D
Authority key identifier: 7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a3a2f33322d3332203d3e20323638333033.roa
Signing time:             Fri 02 May 2025 14:16:00 +0000
ROA not before:           Fri 02 May 2025 14:11:00 +0000
ROA not after:            Fri 01 May 2026 14:16:00 +0000
asID:                     268303
IP address blocks:        2804:4f18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl
                          rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 18:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d2:0b:1a:71:bd:90:43:2c:8e:53:75:10:f9:83:26:b7:07:b0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E09C85B0E5ACF758DAA966E4C1E2328D0322164
        Validity
            Not Before: May  2 14:11:00 2025 GMT
            Not After : May  1 14:16:00 2026 GMT
        Subject: CN=DC43BA5597FDED46740B2D10AC99BE2250291117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:bf:5f:5a:c1:86:c4:6c:44:84:95:99:b5:
                    1d:69:5d:f5:f4:79:8b:ff:41:c1:c8:68:1a:00:43:
                    f9:c1:cb:1b:67:3b:0a:a2:10:8a:00:ba:db:f5:b1:
                    a1:99:9b:71:8f:8a:1f:27:ad:4f:96:fc:4e:a4:f7:
                    8a:26:f6:0f:a3:fe:dc:a1:98:b6:71:0f:07:55:24:
                    ea:a1:88:9a:c9:ef:e6:ae:0e:75:d6:19:d9:13:81:
                    a8:ab:2c:ee:18:1d:9f:b9:66:1d:01:0d:9a:41:ac:
                    4e:1a:e7:3e:a5:80:4e:83:69:80:af:19:2b:45:43:
                    c4:96:62:78:a9:5a:4a:18:82:c7:ea:5e:ef:67:e2:
                    a6:5f:e4:3e:91:a2:2c:ca:b1:58:09:0f:bf:0f:7e:
                    81:dc:86:64:fb:35:47:b3:4d:49:af:21:7e:ac:d8:
                    87:0a:87:5e:f6:6e:ec:e8:22:33:d1:de:db:38:74:
                    f9:93:e5:07:6b:58:ae:04:70:a5:01:91:56:94:af:
                    f0:25:5a:6d:8c:93:a9:ce:5b:2e:ee:95:a3:fb:aa:
                    1b:52:35:42:e8:dc:10:61:cc:84:7f:f5:1b:dd:ff:
                    d0:d8:6a:ae:f8:18:d4:73:bf:c7:f2:47:c3:48:22:
                    48:60:b5:f6:19:4c:a3:2f:ba:25:49:de:54:41:1f:
                    1d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:43:BA:55:97:FD:ED:46:74:0B:2D:10:AC:99:BE:22:50:29:11:17
            X509v3 Authority Key Identifier:
                keyid:7E:09:C8:5B:0E:5A:CF:75:8D:AA:96:6E:4C:1E:23:28:D0:32:21:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E09C85B0E5ACF758DAA966E4C1E2328D0322164.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a3a2f33322d3332203d3e20323638333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f18::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:a3:25:de:10:5c:d3:69:9d:1c:07:61:86:7d:e6:d8:be:d0:
         c8:17:66:e7:70:95:d9:8c:92:3b:65:ae:8f:13:5a:a1:c0:80:
         64:37:28:8e:85:59:d0:97:a5:70:c6:5f:41:1e:c2:0e:06:cf:
         21:f3:d7:c8:57:c1:90:b6:88:31:26:e1:f2:26:15:ed:48:b1:
         85:dd:49:af:9c:4a:c2:a6:2e:25:c5:b0:02:fc:5d:f2:42:c4:
         db:55:62:4b:1c:3b:c1:ad:a0:a9:4d:5f:cf:31:3f:68:17:ca:
         e5:60:74:44:95:f8:02:14:c2:c4:c4:9c:5e:ad:04:e8:63:24:
         9e:ee:01:b6:40:2c:21:c1:03:33:b3:3b:89:ba:fd:52:81:fe:
         80:69:cd:b2:ee:4f:a2:69:37:a4:af:82:98:22:43:f7:54:28:
         9d:ae:f2:30:ed:04:da:62:18:03:ac:b3:a2:f5:dd:01:bb:e8:
         6c:b7:ae:51:e7:31:27:60:38:4b:8c:91:b5:72:db:25:de:74:
         6d:d6:b4:84:d9:08:38:b2:23:a5:e2:20:d2:8b:f9:eb:0d:5e:
         1f:40:42:1e:90:56:1d:9b:53:f7:50:ab:fa:50:9c:6c:15:a5:
         b8:9d:4f:46:59:16:55:cf:65:37:a4:ec:ba:33:67:02:2c:69:
         31:07:47:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:03:33 2025 by rpki-client