Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa
File:                     323830343a323539633a3a2f33322d3332203d3e203532373732.roa (raw, json)
Hash identifier:          7i8PNiZy7UrEhvpiW3Goqw6tna2/N8kVlQNd4cZH4LU=
Subject key identifier:   FB:A2:A8:E3:03:FD:24:96:9E:2E:E8:F1:91:16:19:81:03:13:B7:CA
Certificate issuer:       /CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
Certificate serial:       7F724C2C19D004547F394ED695EBA93565D75335
Authority key identifier: 9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa
Signing time:             Thu 08 May 2025 18:30:35 +0000
ROA not before:           Thu 08 May 2025 18:25:35 +0000
ROA not after:            Thu 07 May 2026 18:30:35 +0000
asID:                     52772
IP address blocks:        2804:259c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl
                          rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 16:59:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:72:4c:2c:19:d0:04:54:7f:39:4e:d6:95:eb:a9:35:65:d7:53:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE70F913E9137B352592B7A2C075D2EA9F4269D
        Validity
            Not Before: May  8 18:25:35 2025 GMT
            Not After : May  7 18:30:35 2026 GMT
        Subject: CN=FBA2A8E303FD24969E2EE8F1911619810313B7CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:cf:bd:f5:24:4e:12:1b:c6:59:ee:c0:f6:
                    67:00:75:89:dd:fc:a2:02:6a:6c:ef:b3:e4:a8:1a:
                    e5:e9:25:99:84:44:01:69:6d:e6:bb:d5:8f:d9:16:
                    96:82:7e:20:22:d1:8c:c9:f9:15:7d:29:19:52:e0:
                    1b:fd:00:33:27:05:bd:28:2b:6f:fc:28:6a:55:96:
                    f5:e6:d9:aa:9e:f1:1e:0c:e4:6d:c6:1e:7c:e2:75:
                    58:02:db:f5:e0:a6:d9:07:d3:a6:b4:8e:8b:8d:23:
                    c3:60:17:16:bb:ec:1c:20:ab:a2:a5:42:f0:c0:0c:
                    58:c4:53:02:e6:ca:29:e0:ff:5e:4e:6a:e1:d8:85:
                    d1:36:db:0e:04:8d:4b:5d:e5:77:2b:5d:f6:38:ef:
                    02:bd:04:45:99:91:fe:65:6e:c9:2a:ac:0f:83:11:
                    a9:07:b7:b8:9b:7f:e6:72:af:b2:c4:2e:1a:89:68:
                    07:db:13:f1:29:7e:89:bb:25:25:ea:8a:b4:16:ee:
                    1a:94:ed:03:77:34:a0:90:b2:8a:b9:7a:29:a7:65:
                    24:50:72:d6:ad:8d:3d:e0:b4:a8:35:8c:08:09:24:
                    53:03:a2:09:55:61:27:8b:93:01:ac:1b:95:5e:0a:
                    c6:ab:62:7b:2a:b9:ea:82:6f:ee:2b:94:d5:02:75:
                    c7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A2:A8:E3:03:FD:24:96:9E:2E:E8:F1:91:16:19:81:03:13:B7:CA
            X509v3 Authority Key Identifier:
                keyid:9C:E7:0F:91:3E:91:37:B3:52:59:2B:7A:2C:07:5D:2E:A9:F4:26:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/9CE70F913E9137B352592B7A2C075D2EA9F4269D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CE70F913E9137B352592B7A2C075D2EA9F4269D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3332203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:c2:64:9a:af:fd:35:ca:9f:98:b2:f7:d6:59:2d:0b:1c:f5:
         62:ef:a9:0a:be:78:86:88:8b:16:4d:73:0e:dc:b8:cb:4c:7f:
         2d:39:1a:a9:a0:f7:2b:60:e3:5f:28:73:7a:17:c5:40:6c:c2:
         83:13:15:33:8f:ef:08:76:b7:25:50:0e:d3:41:38:4f:a8:d8:
         d7:9b:c0:5f:90:28:1d:05:99:eb:0d:cb:9b:2e:ea:7b:d0:48:
         77:61:52:4f:38:67:ea:36:80:25:92:8d:c4:c2:9e:9b:0f:dd:
         97:9b:7c:89:cb:3a:84:32:9d:2a:e5:65:df:7f:f9:fc:e1:df:
         25:0f:56:59:05:77:20:1e:4d:d1:ae:07:be:fc:64:61:b6:9e:
         6d:a6:b8:a4:94:9d:58:d4:5c:fe:52:18:77:a7:d2:78:dc:85:
         04:4a:b5:43:9f:dd:e5:5c:5d:5e:cc:b4:e9:66:b7:37:32:c6:
         f9:1a:0a:04:89:fd:6d:94:c9:ed:f5:80:f0:b2:35:8f:36:42:
         7f:70:ce:e9:16:a1:49:0b:44:a9:80:ce:9d:8e:31:1e:0d:56:
         c5:55:06:72:0f:b5:fd:40:4e:23:3a:14:a4:c4:7d:20:bc:9e:
         bd:4f:c5:68:df:46:be:fd:d4:ac:00:8c:4b:39:8d:89:24:ad:
         7c:c7:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:37:59 2025 by rpki-client