Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/323830343a366432343a3a2f33322d313238203d3e20323730353135.roa
File:                     323830343a366432343a3a2f33322d313238203d3e20323730353135.roa (raw, json)
Hash identifier:          bgm//sEgDJkDUbv8uumD7/TiwE43/IbWCaFjMaDTaLg=
Subject key identifier:   6D:A3:75:79:6A:FF:0C:95:7F:FD:37:C8:9C:AB:F2:CA:0C:8B:87:67
Certificate issuer:       /CN=CFBDC034E21CCE505A2A3F65B427FEC98751D9C7
Certificate serial:       59A0479294DD43C726F7829567CC8E453457B5D4
Authority key identifier: CF:BD:C0:34:E2:1C:CE:50:5A:2A:3F:65:B4:27:FE:C9:87:51:D9:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/323830343a366432343a3a2f33322d313238203d3e20323730353135.roa
Signing time:             Sun 04 May 2025 12:05:48 +0000
ROA not before:           Sun 04 May 2025 12:00:48 +0000
ROA not after:            Sun 03 May 2026 12:05:48 +0000
asID:                     270515
IP address blocks:        2804:6d24::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.crl
                          rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a0:47:92:94:dd:43:c7:26:f7:82:95:67:cc:8e:45:34:57:b5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFBDC034E21CCE505A2A3F65B427FEC98751D9C7
        Validity
            Not Before: May  4 12:00:48 2025 GMT
            Not After : May  3 12:05:48 2026 GMT
        Subject: CN=6DA375796AFF0C957FFD37C89CABF2CA0C8B8767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a4:df:c6:b7:0a:c0:81:1f:a1:8d:98:67:23:
                    6d:97:bc:25:7b:1a:38:64:69:dd:91:a9:58:9d:2c:
                    0f:04:78:95:7d:63:49:09:b2:05:46:3c:90:8d:37:
                    71:5e:82:b4:59:5d:c0:35:01:c1:b9:e8:c6:74:46:
                    1f:a5:85:32:d0:e7:c8:2d:58:62:7e:f5:70:e3:ad:
                    cb:d2:17:91:84:df:34:6e:26:c0:d4:ff:71:a0:70:
                    bb:07:be:0d:d5:dc:c3:cc:41:c0:dc:c3:5f:f5:0e:
                    53:e4:6a:57:9a:6a:31:76:0c:1c:2b:c2:f4:c0:55:
                    07:89:66:5a:18:73:f1:a9:60:81:de:6e:28:96:64:
                    39:ed:b1:78:45:9d:f2:75:a3:62:b6:f2:0e:d7:7b:
                    1a:a2:0a:81:6f:a0:28:59:e6:48:28:d7:c4:79:35:
                    95:c3:e8:a3:d9:ae:d7:f6:c0:e4:dc:f2:9c:94:be:
                    21:91:eb:d6:7b:1f:67:53:e1:78:c6:1b:6f:95:ab:
                    f1:9c:c5:9d:32:7f:07:e9:05:88:9b:9b:bc:9e:42:
                    ae:c9:8d:2d:de:cb:69:8e:5e:17:e0:df:9f:3f:5d:
                    26:d9:c7:db:05:9c:fd:2a:8d:33:1f:9e:68:ef:78:
                    04:f4:72:27:cd:c7:95:90:85:a1:09:02:ba:ed:29:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A3:75:79:6A:FF:0C:95:7F:FD:37:C8:9C:AB:F2:CA:0C:8B:87:67
            X509v3 Authority Key Identifier:
                keyid:CF:BD:C0:34:E2:1C:CE:50:5A:2A:3F:65:B4:27:FE:C9:87:51:D9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFBDC034E21CCE505A2A3F65B427FEC98751D9C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9rzvenoRvecGysMgidQetVyS7RpYxo71wGpVrRzbVz5/0/323830343a366432343a3a2f33322d313238203d3e20323730353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d24::/32

    Signature Algorithm: sha256WithRSAEncryption
         e4:93:17:1b:a9:ba:1b:2c:f6:7e:03:40:d0:10:03:18:9a:de:
         f9:eb:09:bd:35:04:c6:64:e4:14:10:74:8f:12:a0:0c:50:86:
         db:fd:c2:97:a3:a1:fe:39:61:91:1c:aa:36:45:57:4a:8d:2f:
         9b:53:54:da:44:e9:4c:dd:b1:73:5d:ab:38:af:f3:bf:a8:eb:
         b9:62:73:b0:ef:ec:11:d0:1d:17:8b:92:a5:70:fa:92:2a:dc:
         88:14:81:cd:66:d1:24:12:2d:a2:2c:29:b7:52:d8:84:17:39:
         1a:0d:61:b4:4e:9f:2f:4e:de:48:e2:6e:12:97:dc:54:75:b1:
         4b:f9:6f:89:ca:6e:a1:e5:ab:59:b5:41:19:51:a9:d9:29:a7:
         50:7d:cc:20:2c:10:82:e2:d4:3a:9a:9a:38:70:ba:d6:17:9b:
         74:3f:27:77:9c:54:18:de:40:e9:46:1d:aa:d3:dc:76:0e:c5:
         61:32:4b:42:02:ce:c4:bf:2d:85:5e:2c:42:aa:7b:56:e0:33:
         e6:be:c6:47:b4:0e:c1:b0:1c:71:8e:9c:97:46:3f:ad:37:8a:
         75:55:a7:4c:3c:d8:69:6e:05:8c:f0:ae:89:bb:e2:a2:6a:c7:
         df:6e:62:cd:4f:37:b8:3b:f2:30:7b:05:03:67:55:c4:99:2a:
         da:af:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:32:01 2025 by rpki-client