Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a3a2f33322d313238203d3e203238363439.roa
File:                     323830343a3566343a3a2f33322d313238203d3e203238363439.roa (raw, json)
Hash identifier:          5p2HQyY/esoy68x+8EjYyDGUkyypow7wSvqWW4M5yLQ=
Subject key identifier:   F3:42:9E:6E:67:15:76:FF:44:7A:C4:11:01:BE:46:DD:3E:AC:4B:DB
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       7CB6AD1559F2D3A651160403A3C57520D344D281
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a3a2f33322d313238203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:58:17 +0000
ROA not before:           Tue 06 May 2025 00:53:17 +0000
ROA not after:            Tue 05 May 2026 00:58:17 +0000
asID:                     28649
IP address blocks:        2804:5f4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 01:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b6:ad:15:59:f2:d3:a6:51:16:04:03:a3:c5:75:20:d3:44:d2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:53:17 2025 GMT
            Not After : May  5 00:58:17 2026 GMT
        Subject: CN=F3429E6E671576FF447AC41101BE46DD3EAC4BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:4b:b7:13:cc:d0:51:41:db:56:33:b2:26:
                    c9:f0:29:93:bb:2c:06:33:52:fe:1b:92:ee:c3:37:
                    72:39:29:ee:b9:c8:7d:8f:4b:c3:fa:8e:12:70:9c:
                    6f:35:26:97:7b:0c:7d:bb:a9:47:1f:5b:35:f2:15:
                    f7:13:9b:ab:e8:1c:55:65:93:91:54:95:01:d7:05:
                    92:78:f5:88:5a:f0:12:85:42:a6:c2:10:35:62:0b:
                    9b:0e:92:02:dc:3c:54:50:cd:88:1f:f5:61:86:7f:
                    63:a7:d0:9c:c5:df:13:e4:83:ad:6f:3e:50:dd:14:
                    e6:b9:f8:51:26:16:f9:3d:1e:b4:d3:77:de:f1:19:
                    c1:43:f5:eb:ad:55:4a:86:77:19:b5:77:46:8f:a0:
                    aa:7b:23:88:09:67:1b:5b:86:87:28:51:bf:c7:f8:
                    ec:1d:9e:b1:89:c3:24:45:d3:20:42:c2:88:29:00:
                    a4:93:3c:a1:89:3e:66:24:fa:e4:12:d1:cf:00:42:
                    3c:8f:55:e4:a5:f0:ba:ae:93:b8:1b:78:4d:fe:58:
                    49:ca:85:09:97:b2:25:09:a3:91:9e:58:d5:b8:ff:
                    9e:1d:f2:1a:bc:ef:e7:1e:44:5a:d9:fb:b3:2a:3d:
                    5f:49:02:92:a6:8e:8c:82:a6:c0:c8:85:6d:46:26:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:42:9E:6E:67:15:76:FF:44:7A:C4:11:01:BE:46:DD:3E:AC:4B:DB
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a3a2f33322d313238203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:6a:ea:d7:88:6a:b6:7d:ba:82:13:94:05:de:93:f4:0f:
         ff:4a:3b:1f:0e:8b:96:df:7f:93:ff:44:fe:be:1f:2e:aa:4b:
         97:34:60:d9:f9:4b:bb:2f:fc:a7:f1:ca:e5:18:4d:b4:72:52:
         d5:38:f6:3d:12:c6:ce:5f:29:74:0b:7f:fb:28:85:42:01:40:
         f8:82:8d:82:bf:f7:82:d8:04:1e:0d:00:f6:24:60:24:78:7f:
         66:76:4d:7a:5a:ce:52:0d:99:f0:03:6b:f3:af:53:6b:0a:fd:
         ab:4b:8e:06:86:cd:79:92:4e:3b:d0:46:e0:80:0e:a3:7a:50:
         72:39:56:da:97:eb:71:5c:02:97:79:39:0e:ad:9d:66:e2:02:
         9e:28:10:aa:6b:22:8f:b0:36:f8:41:a5:a5:ab:59:6f:7a:5c:
         03:11:36:36:b2:8e:f7:9b:be:67:3a:4e:b5:8d:21:b1:57:37:
         79:12:59:03:9e:8e:67:69:41:8e:cf:22:b5:f8:75:70:53:b9:
         63:2f:79:e3:bb:68:4e:86:8d:f3:9a:3a:1e:49:fd:5f:c2:46:
         d1:51:40:af:29:0e:91:39:98:ea:18:2a:ee:2e:1c:78:fd:62:
         82:c8:1c:ec:7e:91:db:03:f1:3d:6d:ae:99:d4:4a:59:c8:d9:
         61:ae:c9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:09:47 2025 by rpki-client