Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa
File:                     323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa (raw, json)
Hash identifier:          aD/1W5vcN5sKlP6Ppoy6UUzi65TpJP9G+BK78fxP0pU=
Subject key identifier:   82:42:BF:16:D0:CA:2F:3A:63:67:91:84:F6:C2:D3:0B:A3:42:DD:66
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       77282B0F5623CADC3FC51A9BE27B51430CBD1BF8
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa
Signing time:             Thu 01 May 2025 20:44:44 +0000
ROA not before:           Thu 01 May 2025 20:39:44 +0000
ROA not after:            Thu 30 Apr 2026 20:44:44 +0000
asID:                     52916
IP address blocks:        2804:2b10:200::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 14:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:28:2b:0f:56:23:ca:dc:3f:c5:1a:9b:e2:7b:51:43:0c:bd:1b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: May  1 20:39:44 2025 GMT
            Not After : Apr 30 20:44:44 2026 GMT
        Subject: CN=8242BF16D0CA2F3A63679184F6C2D30BA342DD66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:5e:78:4d:3e:48:85:7b:44:95:da:38:98:
                    f8:05:69:b0:0a:3c:38:a4:39:95:ee:cb:17:d7:97:
                    e9:5d:a8:07:6b:2d:ec:a8:c2:cb:e5:34:98:2c:1d:
                    2b:74:8f:5e:53:0c:60:fa:07:d7:16:14:17:76:b8:
                    0a:eb:09:99:32:a3:d2:ce:fe:34:57:b4:2c:47:95:
                    c5:42:9e:8d:f6:21:ad:e9:d4:3f:4e:50:04:7a:a3:
                    63:29:38:0f:6b:8a:87:c9:d8:ee:e5:93:38:58:41:
                    99:fe:29:1e:b6:c8:cd:a9:6f:f9:c2:af:88:8b:6a:
                    84:78:4b:b0:a4:6e:64:2e:05:32:10:48:a1:42:91:
                    30:c0:4c:0f:f1:89:78:32:04:26:84:e7:62:5a:99:
                    70:59:cd:00:cd:62:3a:8e:e9:63:95:e4:96:22:3f:
                    12:ce:9a:c5:62:35:79:55:3a:ec:1b:17:4f:ee:82:
                    9b:25:e0:73:d6:44:45:46:33:77:1c:d9:15:0b:f1:
                    10:a8:7f:47:d5:ea:7b:7d:f8:54:84:36:81:b0:c8:
                    fc:89:5d:f1:94:74:71:12:60:5a:97:85:35:a6:0d:
                    70:77:37:4b:9f:04:62:68:9f:e2:43:94:5b:cb:18:
                    df:da:6a:d4:37:19:08:a0:5d:2a:d1:f7:a0:8a:8f:
                    01:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:42:BF:16:D0:CA:2F:3A:63:67:91:84:F6:C2:D3:0B:A3:42:DD:66
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3230303a3a2f33392d3339203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         81:9e:ff:dc:b0:bc:b5:98:90:5d:63:87:be:19:7d:06:9c:2b:
         2b:df:c4:3d:8b:6c:ba:2c:a6:dd:f8:e4:1d:74:bb:ea:80:32:
         df:7c:5c:84:93:19:a3:60:da:68:23:74:e3:6d:d6:10:a7:49:
         4d:2e:79:49:d5:f4:32:de:b8:ab:fd:be:f3:61:00:75:33:cb:
         32:0d:28:c7:0a:e5:f5:15:0e:3d:77:d2:46:80:ed:d8:d9:75:
         74:08:25:50:7a:ee:97:05:e4:7d:cb:ff:e0:7e:94:ca:ac:60:
         15:dd:0e:b8:50:15:7b:9f:1a:4e:d3:fe:2f:aa:6f:d1:9d:a8:
         a2:00:4a:0c:03:1c:92:27:ad:8a:dd:38:51:2c:a8:44:ba:16:
         8d:18:3a:6b:74:e3:0e:75:de:1a:53:5c:d1:09:80:1e:74:0d:
         dc:33:1d:f0:72:9e:08:e8:fb:4d:02:63:1f:5c:32:59:dc:c0:
         13:a2:d6:8a:91:d5:24:e5:e2:2f:dd:68:2e:a5:ce:7f:8d:49:
         09:fe:50:79:3f:b6:c3:b4:4b:52:80:5a:c8:86:a0:0f:99:55:
         28:fb:66:82:9a:db:91:d0:7c:eb:0e:03:0b:47:c3:fd:dc:05:
         d6:21:8e:fe:12:0a:47:24:a1:41:57:77:fc:c2:1b:58:93:5d:
         5b:04:c9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:01:59 2025 by rpki-client