Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/323830343a343939383a3a2f33322d3438203d3e20323637313932.roa
File:                     323830343a343939383a3a2f33322d3438203d3e20323637313932.roa (raw, json)
Hash identifier:          rpvinbCa/xsk5ZhS8SmIPSXZKq8nf8iM6hxn8Uq4z84=
Subject key identifier:   F0:A7:F6:47:87:C8:6C:41:05:3B:57:41:27:DA:9D:83:81:04:B4:D7
Certificate issuer:       /CN=59D79079ECD031F0A1D0E88BA326755415EE0813
Certificate serial:       0FC5CFC5B2E95665F96C11658F326B90525B856A
Authority key identifier: 59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/323830343a343939383a3a2f33322d3438203d3e20323637313932.roa
Signing time:             Wed 07 May 2025 20:31:26 +0000
ROA not before:           Wed 07 May 2025 20:26:26 +0000
ROA not after:            Wed 06 May 2026 20:31:26 +0000
asID:                     267192
IP address blocks:        2804:4998::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.crl
                          rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 15:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c5:cf:c5:b2:e9:56:65:f9:6c:11:65:8f:32:6b:90:52:5b:85:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59D79079ECD031F0A1D0E88BA326755415EE0813
        Validity
            Not Before: May  7 20:26:26 2025 GMT
            Not After : May  6 20:31:26 2026 GMT
        Subject: CN=F0A7F64787C86C41053B574127DA9D838104B4D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:95:10:41:e1:6f:7c:6b:80:cb:17:79:c3:
                    a0:6f:67:a7:81:45:2d:bc:c0:16:3d:f7:b5:1a:43:
                    a7:56:16:01:5d:dd:01:e9:2f:19:25:77:c4:a4:7e:
                    fd:21:25:24:0f:91:36:1b:9b:0b:56:7b:7e:fb:83:
                    82:5d:00:3d:81:06:db:5e:d4:de:96:be:ed:ea:cc:
                    53:0b:94:7f:49:60:47:91:c1:10:fa:22:2f:7f:3a:
                    71:1e:ed:86:41:ec:bd:76:a1:ba:9d:0e:b8:c9:19:
                    a7:48:d6:db:85:22:16:c3:ea:62:ea:69:38:79:13:
                    ed:d8:5f:99:c8:a0:02:46:8c:6b:d5:32:13:af:99:
                    0d:9a:44:ed:dd:fd:85:07:d7:66:f0:0b:8c:e8:5d:
                    15:8b:82:05:a5:2a:41:65:bf:22:3c:f9:a3:53:bb:
                    51:d6:2c:07:70:55:0c:a8:d4:54:8a:bd:4e:be:12:
                    fe:ee:db:74:e5:ba:9d:95:1e:8d:4a:3d:d7:8f:08:
                    b2:e6:b3:87:67:37:b8:0a:08:01:8c:3e:98:0c:0e:
                    26:e0:35:52:94:dd:1d:20:94:e1:ea:3c:ee:86:41:
                    70:99:0b:63:c4:ed:1b:62:0d:28:bd:1f:ea:f2:8d:
                    3c:e0:b1:bf:05:de:1b:47:c8:97:26:c7:41:bb:f1:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:F6:47:87:C8:6C:41:05:3B:57:41:27:DA:9D:83:81:04:B4:D7
            X509v3 Authority Key Identifier:
                keyid:59:D7:90:79:EC:D0:31:F0:A1:D0:E8:8B:A3:26:75:54:15:EE:08:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/59D79079ECD031F0A1D0E88BA326755415EE0813.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59D79079ECD031F0A1D0E88BA326755415EE0813.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5w8ZCj8BsQADfBArDwMCpSqNt5BjFNDdS8fZe7jAVUs/0/323830343a343939383a3a2f33322d3438203d3e20323637313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4998::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:65:14:d6:ef:81:93:57:72:4b:87:5d:c7:e0:b7:96:74:21:
         08:11:37:0e:f4:b4:4c:9b:f4:bf:90:30:d8:6a:92:50:45:08:
         87:23:6f:8d:81:fd:d0:64:71:41:15:10:d7:60:97:aa:3c:05:
         9e:37:5d:bf:be:5b:7a:99:06:cb:31:ef:28:47:45:eb:df:d3:
         77:ca:2f:1f:bb:e3:d5:9f:de:39:c6:44:e6:85:90:63:43:d8:
         2c:cf:0e:ad:ca:ec:0c:9a:3c:a0:d0:63:97:f9:ef:a7:02:d4:
         d7:c1:02:91:78:f8:4a:25:8c:0b:5a:92:6d:b7:b1:be:ca:0d:
         16:da:5b:e4:0c:9f:b7:4e:e2:a6:1e:a3:c3:4d:37:d0:c1:48:
         8f:ee:78:7e:ff:e0:29:4c:7c:85:c0:87:e2:4a:5c:1d:cf:6c:
         a3:48:bd:9a:5d:ac:7a:c6:4a:51:dc:4c:db:ea:ee:8f:b0:f2:
         6b:eb:8e:80:29:6b:a1:28:1e:42:82:17:a4:a5:0a:91:87:83:
         00:f9:3a:f4:b7:4d:fa:64:73:02:b8:ce:05:ef:83:76:f5:e7:
         a7:61:ee:20:a2:e3:6f:01:19:3e:60:45:5a:e3:98:b6:e0:68:
         93:04:76:d0:c7:fe:65:4e:9b:9c:13:9d:a7:a3:1b:ec:30:99:
         1e:bc:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:21:20 2025 by rpki-client