Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/323830343a343637633a3a2f33322d3438203d3e20323636393932.roa
File:                     323830343a343637633a3a2f33322d3438203d3e20323636393932.roa (raw, json)
Hash identifier:          OOhZRSwm2hV4PpWU3fQqmsExv7PexpjxW2TE9xJY0RE=
Subject key identifier:   7E:5C:2B:53:FC:E5:08:BF:6A:3E:A3:95:29:CF:BC:49:F4:F2:52:C3
Certificate issuer:       /CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
Certificate serial:       6E8522F111E37A5F72351B5E354D073864280F5D
Authority key identifier: A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/323830343a343637633a3a2f33322d3438203d3e20323636393932.roa
Signing time:             Wed 07 May 2025 19:31:14 +0000
ROA not before:           Wed 07 May 2025 19:26:14 +0000
ROA not after:            Wed 06 May 2026 19:31:14 +0000
asID:                     266992
IP address blocks:        2804:467c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl
                          rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 02:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:85:22:f1:11:e3:7a:5f:72:35:1b:5e:35:4d:07:38:64:28:0f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0
        Validity
            Not Before: May  7 19:26:14 2025 GMT
            Not After : May  6 19:31:14 2026 GMT
        Subject: CN=7E5C2B53FCE508BF6A3EA39529CFBC49F4F252C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d8:ac:8a:77:65:36:aa:e6:ca:97:3e:aa:44:
                    e2:41:bf:01:e2:1a:17:98:4a:41:90:d4:53:82:cf:
                    0f:6a:0a:08:36:1d:5f:16:a4:40:7d:a7:d6:c2:8c:
                    ef:67:e9:b0:f2:88:d9:96:ba:1c:54:a5:39:b1:ca:
                    ea:8c:28:30:4a:ec:83:16:2b:c4:ea:f9:f9:85:93:
                    93:5b:72:f1:d3:f9:fd:c1:be:5f:9e:2a:56:2c:9b:
                    a8:c2:49:46:4d:6a:08:01:cb:86:96:9e:be:09:7f:
                    14:13:53:43:66:eb:df:b5:be:cc:e1:38:bd:15:a3:
                    fb:17:07:38:ec:7e:a8:a9:f2:b2:43:fa:9c:b2:c0:
                    f6:2b:fe:ab:e3:f7:60:70:8c:ac:1b:b1:85:e7:98:
                    31:a8:ef:c5:b7:15:ef:08:0b:66:20:75:29:02:15:
                    a1:c9:68:9b:94:27:18:ee:ac:fe:fb:7f:2c:52:92:
                    84:25:a8:c7:9f:dd:3b:9a:00:8a:0b:59:5e:99:1d:
                    44:6f:52:b3:d5:7f:b5:73:58:0b:9b:0e:9b:ef:e7:
                    61:58:0a:57:20:ec:80:3d:a1:a0:bf:b6:da:27:4d:
                    7f:2a:cd:3c:f4:74:d5:88:4f:e3:0a:5c:9b:74:e3:
                    5e:fb:d9:ea:fe:b3:25:fe:90:46:03:51:ce:8f:da:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5C:2B:53:FC:E5:08:BF:6A:3E:A3:95:29:CF:BC:49:F4:F2:52:C3
            X509v3 Authority Key Identifier:
                keyid:A4:E1:29:AD:8E:BD:2C:B6:5F:8F:AB:CD:04:BC:18:22:4C:FE:CE:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4E129AD8EBD2CB65F8FABCD04BC18224CFECEB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/323830343a343637633a3a2f33322d3438203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:467c::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:32:fd:46:43:f6:c4:16:60:d8:43:46:d4:0e:b4:ba:ba:35:
         d1:9f:b7:f0:57:0b:44:57:cf:68:5e:14:21:67:f8:c2:e2:92:
         e0:1d:57:fa:5e:25:5d:99:36:6c:90:f3:ae:4c:e5:4d:90:bc:
         bf:e9:c9:82:c8:6c:52:9f:94:72:29:11:35:4a:ff:40:8d:d7:
         f4:65:01:d4:b8:e8:0b:70:6c:c3:ce:a9:a7:e3:a2:6d:ab:66:
         4c:b7:35:07:35:ef:45:fd:7e:f0:d5:7a:d3:68:a0:b8:2e:dc:
         4e:3b:70:2f:dc:e6:b6:88:c6:a4:60:57:3c:fd:95:e9:3e:12:
         c0:9f:f6:09:b5:d6:df:aa:8e:af:3b:44:13:b3:ec:3e:04:eb:
         56:00:aa:85:11:58:bc:cb:64:bf:7c:34:19:b8:f0:ed:42:15:
         c1:32:5a:87:cf:86:17:4c:1a:1f:fb:b6:0d:3d:a4:d8:ac:09:
         d4:9a:a4:6e:05:ae:16:14:05:3f:4d:60:a2:51:d9:86:5e:ca:
         7e:7c:57:51:c3:48:b8:c3:3d:14:a2:e4:fb:49:7f:cd:f6:be:
         9a:1a:90:d4:3a:cd:ac:04:8c:67:fe:9e:fe:31:1c:7c:d2:69:
         2f:d6:00:40:36:89:42:1e:63:e3:69:ec:27:50:5b:ef:f9:cd:
         6a:f4:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:29:36 2025 by rpki-client