Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33382d3338203d3e203532393136.roa
File:                     323830343a326231303a3a2f33382d3338203d3e203532393136.roa (raw, json)
Hash identifier:          kJBP1vS+6cQ6tyY0U3zNjsBies5UKlVnL5KfYbA4d1A=
Subject key identifier:   11:13:20:39:46:56:2E:9B:B2:39:C6:C8:13:7D:8B:4C:58:C2:3C:FC
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       78EBF2B328090BE68D07E4F991A27E9EB9006F3D
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33382d3338203d3e203532393136.roa
Signing time:             Thu 01 May 2025 20:44:31 +0000
ROA not before:           Thu 01 May 2025 20:39:31 +0000
ROA not after:            Thu 30 Apr 2026 20:44:31 +0000
asID:                     52916
IP address blocks:        2804:2b10::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 19:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:eb:f2:b3:28:09:0b:e6:8d:07:e4:f9:91:a2:7e:9e:b9:00:6f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: May  1 20:39:31 2025 GMT
            Not After : Apr 30 20:44:31 2026 GMT
        Subject: CN=1113203946562E9BB239C6C8137D8B4C58C23CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:b5:be:dd:4f:4b:a2:d7:ad:73:9c:1c:20:
                    77:d9:0b:9d:03:93:41:7a:2f:92:89:ac:86:9b:15:
                    07:c9:7e:fe:4b:83:49:26:42:d2:20:75:91:68:61:
                    54:e9:c2:0c:f7:e1:3b:61:0b:26:3c:64:4d:41:9d:
                    76:b2:9c:30:ab:1d:1f:21:b4:95:40:dc:34:bd:34:
                    39:e5:0a:dc:05:59:1a:ab:74:93:a8:c5:2a:06:26:
                    17:7c:c8:eb:54:91:9b:ad:44:44:fe:55:18:f5:3f:
                    df:83:86:b5:51:1e:ce:84:2b:01:90:6d:24:32:12:
                    35:e5:b5:70:6c:a7:8d:94:3e:54:ac:51:c5:c9:bc:
                    14:f6:8c:5a:78:c4:e4:81:ba:93:b6:d4:46:a2:fa:
                    4f:66:38:23:17:ed:bc:27:4b:ea:48:d7:ae:a9:37:
                    36:02:ac:d1:e0:e9:e3:16:d7:31:c6:70:9b:cd:94:
                    98:3a:3b:ff:06:98:d0:53:13:7a:eb:22:a8:2c:c0:
                    c5:94:cd:07:d3:66:3a:15:68:27:81:c1:0f:a0:a9:
                    63:8b:90:04:b4:47:fc:6d:1c:22:82:b5:d9:df:c3:
                    9e:b7:f8:da:fa:60:d4:eb:cd:c9:17:ec:7a:c1:a2:
                    ec:19:95:d9:9e:16:df:28:b6:73:6f:30:0d:24:51:
                    41:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:13:20:39:46:56:2E:9B:B2:39:C6:C8:13:7D:8B:4C:58:C2:3C:FC
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33382d3338203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b10::/38

    Signature Algorithm: sha256WithRSAEncryption
         a8:d1:a7:c8:90:16:e1:7a:9e:28:3c:9e:31:52:20:29:78:81:
         2f:3a:fe:84:08:e6:98:7a:ad:d9:9f:96:48:14:54:ac:40:8b:
         10:97:9e:ef:ad:5c:a1:e9:26:42:55:ef:d2:be:c4:05:7f:af:
         dc:d4:a5:cb:ce:46:27:c0:92:7c:09:02:69:c3:54:9a:1a:89:
         67:a7:69:b1:36:f6:21:04:26:6c:b7:c0:5c:d4:a9:ca:e2:50:
         71:b6:fb:86:5e:15:11:f2:4e:d1:62:ee:98:65:df:c7:8d:2c:
         c6:ee:11:bb:3a:a3:b9:48:2d:8d:15:c5:26:32:9d:7a:81:cc:
         3f:6f:30:24:33:75:a6:c0:20:91:88:6c:51:6d:01:6e:ea:37:
         85:70:6e:10:5a:4c:76:b7:63:fd:04:db:ec:ba:ab:b9:ba:22:
         c8:9d:58:5d:e1:a0:9e:19:91:b9:85:67:5d:1c:0f:6c:14:10:
         b6:0a:92:5b:d1:7e:fd:f9:6d:de:ea:06:b2:54:b4:a3:0f:6f:
         e2:00:79:fe:c1:30:b0:9f:f7:03:ad:cb:87:cf:e5:17:7d:ea:
         21:04:06:e6:e3:23:af:73:b6:7d:ec:b8:4a:10:b5:8b:01:3f:
         09:0f:8b:c6:b4:49:59:90:57:48:79:d8:4b:0e:44:3e:cd:da:
         77:ba:df:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:40:37 2025 by rpki-client