Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a323030303a3a2f33372d3337203d3e203532393136.roa
File:                     323830343a326231303a323030303a3a2f33372d3337203d3e203532393136.roa (raw, json)
Hash identifier:          0JKwbYqMDphqKB5/fHpb2LBhGj4iNMR9YFLwc+Mz6x0=
Subject key identifier:   7A:50:0B:9E:8F:49:F4:22:C3:CD:C5:24:2F:38:59:5A:CE:99:6B:8C
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       2DA92CA1BADA80B4C5DC60FDB00E668C770AAEE4
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a323030303a3a2f33372d3337203d3e203532393136.roa
Signing time:             Thu 01 May 2025 20:44:44 +0000
ROA not before:           Thu 01 May 2025 20:39:44 +0000
ROA not after:            Thu 30 Apr 2026 20:44:44 +0000
asID:                     52916
IP address blocks:        2804:2b10:2000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 14:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a9:2c:a1:ba:da:80:b4:c5:dc:60:fd:b0:0e:66:8c:77:0a:ae:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: May  1 20:39:44 2025 GMT
            Not After : Apr 30 20:44:44 2026 GMT
        Subject: CN=7A500B9E8F49F422C3CDC5242F38595ACE996B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8e:cf:df:36:8f:cb:57:54:bb:54:b6:33:fb:
                    be:ca:dd:17:74:84:7d:d7:95:4a:b0:10:40:53:ae:
                    3b:e3:89:08:0c:60:85:64:86:3d:51:99:f7:96:8f:
                    45:1f:1e:66:da:21:ec:59:16:14:78:54:90:40:af:
                    7f:c0:c5:5b:ca:fd:5e:44:7f:69:31:6b:a4:75:7b:
                    99:ba:84:5e:3d:07:24:61:b2:94:b5:45:85:a1:e5:
                    8a:10:75:75:27:4e:b1:5e:e0:a5:9b:45:f2:a6:1f:
                    45:b1:91:fa:28:e0:89:7b:80:36:86:08:ad:ef:4b:
                    96:b6:d9:b1:dc:66:c8:b3:79:07:ba:ff:bd:70:84:
                    3b:eb:32:c5:c6:58:32:c1:e2:97:ee:bb:56:27:60:
                    61:5a:82:00:f1:b4:5f:aa:4c:a6:f3:ed:90:ab:30:
                    2e:ca:7b:b3:47:57:51:e5:17:ef:ea:79:bb:18:ba:
                    e1:55:f6:a1:a7:e3:94:ca:7b:84:1b:a5:3c:69:c5:
                    03:30:a9:ea:d0:c9:55:3f:99:2f:43:68:54:9d:da:
                    0c:d8:d3:19:10:69:ae:58:af:a6:9f:e1:cf:90:61:
                    20:2c:a4:26:c5:1b:10:d8:00:dc:e3:c2:b6:00:ab:
                    3f:cf:27:e8:cb:48:6a:45:ab:7f:41:69:f7:ff:e7:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:50:0B:9E:8F:49:F4:22:C3:CD:C5:24:2F:38:59:5A:CE:99:6B:8C
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a323030303a3a2f33372d3337203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:2000::/37

    Signature Algorithm: sha256WithRSAEncryption
         88:0e:91:1f:c0:00:04:da:9c:fd:50:5e:79:cf:0f:f6:fe:a0:
         36:f6:62:12:7d:9f:06:af:ca:d9:85:91:5e:3f:f7:7a:1c:f8:
         85:12:87:27:d9:cc:6a:48:ae:8e:af:71:bf:fd:c4:ce:fe:19:
         0b:d6:fe:3d:82:58:37:d6:e3:cd:c4:b4:0c:40:1b:19:90:99:
         e0:c6:29:25:cc:1e:ad:87:6b:7e:80:20:ae:61:6b:bc:2b:ff:
         e8:d2:78:a1:49:fb:50:33:b0:bb:fc:c2:04:5c:67:79:4f:5e:
         21:f0:d3:70:4f:20:83:80:a7:48:02:53:de:58:9f:1b:2d:4b:
         18:47:dc:34:15:14:75:31:77:36:34:eb:ce:b2:88:6c:82:d8:
         42:58:98:11:70:0f:98:6b:55:d3:b4:2e:ab:ee:dc:f1:c9:95:
         e4:eb:30:05:94:1e:c4:ee:20:59:97:41:31:33:80:81:c3:20:
         56:f4:89:1d:3a:37:6f:64:a3:87:e4:92:3e:5a:84:8a:8c:28:
         0f:c3:d5:56:66:8e:4a:e1:ba:31:62:8c:12:d7:09:c5:99:2a:
         97:4b:48:06:a2:1c:5a:eb:16:9d:d2:f8:f9:2b:11:72:d2:8c:
         a0:d5:1d:56:2c:38:26:f3:85:65:07:6d:f3:0f:4f:92:7f:cc:
         d0:d2:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:50:32 2025 by rpki-client