Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/323830343a393336343a3a2f33322d3332203d3e20323734373734.roa
File:                     323830343a393336343a3a2f33322d3332203d3e20323734373734.roa (raw, json)
Hash identifier:          OO7Z6diGpEfL/MFcTxHKDmseZGAvPEOiht5SQidTcN0=
Subject key identifier:   89:01:2C:B9:2E:51:CD:97:12:F2:C8:19:AB:8D:EB:32:0A:27:05:18
Certificate issuer:       /CN=58A28FA55A129B3ED7724531E87F15ECD22B918D
Certificate serial:       3CC5D844C37C2559AC96B5A7B0F56C7A214D4B4C
Authority key identifier: 58:A2:8F:A5:5A:12:9B:3E:D7:72:45:31:E8:7F:15:EC:D2:2B:91:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/323830343a393336343a3a2f33322d3332203d3e20323734373734.roa
Signing time:             Thu 01 May 2025 21:26:11 +0000
ROA not before:           Thu 01 May 2025 21:21:11 +0000
ROA not after:            Thu 30 Apr 2026 21:26:11 +0000
asID:                     274774
IP address blocks:        2804:9364::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.crl
                          rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 11:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c5:d8:44:c3:7c:25:59:ac:96:b5:a7:b0:f5:6c:7a:21:4d:4b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58A28FA55A129B3ED7724531E87F15ECD22B918D
        Validity
            Not Before: May  1 21:21:11 2025 GMT
            Not After : Apr 30 21:26:11 2026 GMT
        Subject: CN=89012CB92E51CD9712F2C819AB8DEB320A270518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:06:fa:18:31:55:42:c0:0e:a8:a8:54:98:f4:
                    db:e4:64:06:c2:c5:6e:0d:bd:b1:fc:d4:6a:1a:c9:
                    de:f3:ef:db:b2:a2:a5:7c:cf:6b:f9:af:e4:86:12:
                    d6:3e:0a:18:03:8b:ea:d3:28:7f:7e:ee:3d:c5:94:
                    02:15:4d:09:c3:58:fa:1f:0b:62:9a:f0:02:f7:ef:
                    c6:70:82:19:f4:40:ab:fe:f2:eb:a0:be:9e:14:bd:
                    0a:8c:2e:b0:bb:3d:95:6e:d2:49:4e:ee:35:bc:39:
                    08:bf:0c:47:af:6d:7f:f3:b2:52:fe:6e:3a:1a:d5:
                    42:fb:b1:59:a4:eb:15:56:9c:8c:ea:5c:32:27:24:
                    80:35:96:ba:15:bc:44:0f:a4:25:bb:d0:4f:19:59:
                    80:a3:09:ac:f3:dc:17:b9:3a:73:2f:09:ca:c3:3e:
                    cc:57:ac:5a:a7:94:50:77:c5:6c:b2:d1:c9:72:9e:
                    5f:bd:83:28:d6:42:78:68:ff:5b:51:12:ad:cc:dc:
                    61:bf:4b:f2:2c:b7:c1:c2:b9:b3:5f:ff:a8:09:44:
                    23:55:4a:0f:25:36:f0:70:85:13:95:0c:84:ad:a1:
                    cb:38:03:1f:9f:cd:eb:71:38:3d:4b:f0:81:3e:a8:
                    cc:63:16:3d:c3:83:02:e0:05:23:65:70:b0:79:c4:
                    3d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:2C:B9:2E:51:CD:97:12:F2:C8:19:AB:8D:EB:32:0A:27:05:18
            X509v3 Authority Key Identifier:
                keyid:58:A2:8F:A5:5A:12:9B:3E:D7:72:45:31:E8:7F:15:EC:D2:2B:91:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/58A28FA55A129B3ED7724531E87F15ECD22B918D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/58A28FA55A129B3ED7724531E87F15ECD22B918D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMVwJ2HAQi8rzGiv1Vi9PmCAoFqiChpni6T2SzJrZ24G/0/323830343a393336343a3a2f33322d3332203d3e20323734373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9364::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:9a:6b:08:e5:ce:53:dc:bf:7f:1f:da:33:78:c3:b6:be:67:
         1e:7c:f6:a1:b3:be:43:63:a1:86:5d:08:54:6c:04:b2:34:a1:
         57:aa:f6:e7:00:67:6c:a3:3c:7e:ca:b9:d6:66:c1:60:4b:1c:
         4d:e6:68:10:e6:e2:f3:23:27:90:a0:47:65:c5:a0:05:37:74:
         b3:af:6c:38:dd:46:75:76:da:86:99:ab:49:5a:9a:a6:6b:85:
         de:5d:a9:d3:a2:7b:59:0a:b0:23:99:66:9f:dd:37:c5:d2:97:
         1c:7f:d0:3a:21:b0:4a:77:e2:d4:27:3e:32:e7:d5:2d:32:73:
         1a:2e:ff:91:1b:36:71:9d:9a:64:40:5e:ae:2c:9a:44:4c:31:
         14:ab:29:b3:75:0d:2f:2f:68:ea:7d:e4:d2:1e:7e:2d:7a:18:
         69:e6:21:ff:b2:2b:a3:1c:7b:c6:60:97:b6:b3:2b:b2:93:68:
         18:d3:d4:cb:3e:7c:f3:49:ee:90:17:c6:7b:82:1b:c9:1d:05:
         b4:38:99:5a:a7:fe:d1:71:fc:da:46:73:5f:28:f2:43:4b:29:
         cf:f0:1c:63:0a:79:9e:13:98:07:c5:63:4c:2d:97:92:89:f7:
         90:62:0e:db:45:42:90:9c:52:15:fc:de:1c:27:90:8a:11:4e:
         d2:1f:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:09:46 2025 by rpki-client