Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa
File:                     323830343a326231303a3a2f33372d3337203d3e203532393136.roa (raw, json)
Hash identifier:          wcJMeWoanvy2wFJbeaUFCcXJxjN3pZlhN5sTDCvEj28=
Subject key identifier:   57:A6:41:2F:A4:DF:25:3C:A1:7E:B7:DF:9B:7E:29:DB:D3:EB:EE:21
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       3CA835EDD80BB34E54C98011F9852E8F4B000D5D
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa
Signing time:             Thu 01 May 2025 20:44:31 +0000
ROA not before:           Thu 01 May 2025 20:39:31 +0000
ROA not after:            Thu 30 Apr 2026 20:44:31 +0000
asID:                     52916
IP address blocks:        2804:2b10::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 19:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a8:35:ed:d8:0b:b3:4e:54:c9:80:11:f9:85:2e:8f:4b:00:0d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: May  1 20:39:31 2025 GMT
            Not After : Apr 30 20:44:31 2026 GMT
        Subject: CN=57A6412FA4DF253CA17EB7DF9B7E29DBD3EBEE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:9e:b4:59:1f:f7:5c:ad:9d:f1:a2:2e:b7:
                    34:24:ea:fd:1d:99:4e:d7:78:84:f8:a0:98:75:ee:
                    a4:c2:c8:af:23:f6:90:3c:35:fd:ab:13:66:91:8e:
                    e6:1e:03:b6:10:a8:1c:4f:e8:46:e0:d5:ae:cd:fd:
                    5b:9f:df:55:22:db:ff:19:1a:43:f5:2f:f3:b1:e2:
                    24:97:7e:e4:be:f3:be:1f:ad:65:84:16:33:16:30:
                    69:15:82:5d:31:e0:b5:31:65:d6:27:ca:10:85:32:
                    34:f6:06:4c:2d:59:5b:68:54:8f:b2:e9:24:ee:21:
                    57:4a:e1:67:b8:32:62:76:70:61:1e:86:91:7d:14:
                    a0:c2:06:4d:cc:e8:a5:d7:7c:43:e0:26:2f:c0:47:
                    51:01:b3:30:4a:2d:07:f6:a0:90:dd:71:86:52:2b:
                    b9:78:3f:15:c0:85:7f:4e:7b:dc:ff:90:3d:bb:83:
                    a8:fd:c8:2a:e5:2b:c4:69:56:77:d6:b3:c0:6b:2c:
                    63:e9:1a:08:e9:4c:79:8b:8b:9c:e4:e8:ab:ee:6d:
                    61:1b:97:33:5d:95:69:87:21:dc:8f:15:d1:e5:dc:
                    0b:86:30:f2:a4:9b:9a:17:be:d9:8d:67:9b:04:9f:
                    7f:07:0b:e3:82:f5:92:25:1a:06:fb:a3:ee:8b:20:
                    d4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:41:2F:A4:DF:25:3C:A1:7E:B7:DF:9B:7E:29:DB:D3:EB:EE:21
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10::/37

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:fd:67:b1:fa:14:c0:b7:8f:4c:77:fb:98:71:23:5b:26:
         38:f9:f6:cf:bf:3a:0c:f8:f7:96:d3:50:5e:67:ff:26:ec:80:
         8e:4c:a1:6f:b3:f8:f5:57:9e:d0:8b:4f:c8:5c:83:1c:ff:d5:
         4d:fc:98:ce:89:b2:73:c9:72:74:24:f9:49:2b:54:36:48:ee:
         0c:03:92:4c:5c:ec:a0:34:6b:ae:d9:e2:fa:88:6b:55:11:67:
         3b:ae:ee:40:4b:44:5e:ac:1e:92:06:e5:72:0b:c1:3b:f5:37:
         0a:02:9f:61:6c:f0:62:36:89:8b:f1:23:62:16:a8:58:c4:cb:
         5c:b1:5d:11:25:fb:93:2b:f1:9b:ae:23:4f:d5:65:7a:ab:d3:
         b1:59:6a:19:d4:9b:9d:d0:94:8a:b0:3a:04:e0:59:50:19:dc:
         1f:f4:f4:83:a3:b9:c3:59:e6:94:8e:42:93:9d:c9:df:62:d9:
         67:1e:63:b4:3a:4d:91:c4:6f:1d:13:71:dc:0d:4a:04:50:a2:
         ea:d7:65:ef:ca:5c:ce:e0:34:ff:a5:9d:9d:37:ac:58:32:ef:
         6a:36:48:9f:2b:93:1c:33:0c:17:ff:e1:8b:04:c9:1b:fa:99:
         07:a1:94:66:af:1b:16:b9:7a:6a:4c:f7:63:ac:4a:8c:a1:36:
         2b:ec:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:41:54 2025 by rpki-client