Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/323830343a353763343a3a2f33322d3438203d3e20323638303835.roa
File:                     323830343a353763343a3a2f33322d3438203d3e20323638303835.roa (raw, json)
Hash identifier:          wbVK4TghtEezQZBhAev+G7gKHbxY0cH2bKQD05gxZ3A=
Subject key identifier:   7D:52:17:1C:F9:71:D9:94:F1:CE:30:AC:F2:4A:47:19:EC:52:1B:93
Certificate issuer:       /CN=47C9D34AC5FB11828EAE43268ECB502451B9BA72
Certificate serial:       2AD75ED83B17FABEB7F42AE83675F086409561F7
Authority key identifier: 47:C9:D3:4A:C5:FB:11:82:8E:AE:43:26:8E:CB:50:24:51:B9:BA:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9D34AC5FB11828EAE43268ECB502451B9BA72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/323830343a353763343a3a2f33322d3438203d3e20323638303835.roa
Signing time:             Mon 12 May 2025 18:44:29 +0000
ROA not before:           Mon 12 May 2025 18:39:29 +0000
ROA not after:            Mon 11 May 2026 18:44:29 +0000
asID:                     268085
IP address blocks:        2804:57c4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/47C9D34AC5FB11828EAE43268ECB502451B9BA72.crl
                          rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/47C9D34AC5FB11828EAE43268ECB502451B9BA72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9D34AC5FB11828EAE43268ECB502451B9BA72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 01:30:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d7:5e:d8:3b:17:fa:be:b7:f4:2a:e8:36:75:f0:86:40:95:61:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47C9D34AC5FB11828EAE43268ECB502451B9BA72
        Validity
            Not Before: May 12 18:39:29 2025 GMT
            Not After : May 11 18:44:29 2026 GMT
        Subject: CN=7D52171CF971D994F1CE30ACF24A4719EC521B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:18:ce:d3:cb:d3:9e:cb:64:84:cc:3e:66:65:
                    dd:cc:29:13:26:6e:32:76:c8:f8:a6:05:25:e2:4e:
                    d6:64:da:e4:56:d0:6c:65:3d:1c:2e:48:d3:2b:34:
                    26:a2:84:98:83:8d:5f:42:f6:08:55:73:a3:62:67:
                    53:35:ce:bc:c2:28:e7:10:46:a4:6c:f7:4f:25:6c:
                    4e:6c:a8:15:f8:55:49:38:d9:e8:33:79:80:b0:ca:
                    72:61:72:9a:48:84:5e:00:85:ce:8b:bd:cd:40:8b:
                    14:c9:3f:2a:6e:88:54:f5:a6:07:83:49:57:6a:ed:
                    fb:c3:bd:32:9b:ab:aa:17:c5:68:65:dc:15:65:39:
                    93:7c:f2:e7:00:8e:73:f0:2f:1d:85:e7:fd:38:ab:
                    8c:af:a4:54:a1:61:cf:47:fe:73:20:3d:0e:01:a9:
                    70:ce:5d:f8:11:83:8a:34:cb:43:06:bf:e1:1e:81:
                    38:2e:2a:95:36:6e:e1:30:45:28:9d:28:9f:0c:db:
                    b8:b9:fc:d7:6a:e5:cd:5e:b0:9a:ba:9e:b1:2d:54:
                    87:a5:5d:12:ef:1a:ee:34:68:c6:ac:5b:72:04:47:
                    1f:58:0f:dc:de:de:67:d8:1f:79:d4:0e:d1:19:28:
                    1f:b6:2a:a2:89:e4:fa:2e:c5:5b:d5:8c:65:be:50:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:52:17:1C:F9:71:D9:94:F1:CE:30:AC:F2:4A:47:19:EC:52:1B:93
            X509v3 Authority Key Identifier:
                keyid:47:C9:D3:4A:C5:FB:11:82:8E:AE:43:26:8E:CB:50:24:51:B9:BA:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/47C9D34AC5FB11828EAE43268ECB502451B9BA72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9D34AC5FB11828EAE43268ECB502451B9BA72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/323830343a353763343a3a2f33322d3438203d3e20323638303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:7f:ca:f9:74:cc:5f:b2:b4:cd:cd:df:38:96:2f:a8:07:2a:
         43:02:0a:69:bc:39:c1:a6:10:36:4e:e7:e9:01:c0:0d:35:99:
         72:e8:27:3f:fe:41:0f:03:79:88:9a:10:ed:ed:25:11:81:f2:
         51:3a:d9:14:2c:25:d0:23:7e:b0:5a:84:96:ca:4d:f4:5e:d1:
         aa:75:29:90:9e:00:93:82:b5:10:14:09:24:04:25:46:a4:6e:
         75:54:8c:0f:43:54:ec:6f:cf:6f:6e:da:1b:2f:62:70:c1:e3:
         ea:78:7a:0b:66:17:c1:32:2f:20:74:d2:e1:8c:0d:39:2d:aa:
         fd:71:62:ca:06:0b:65:b9:37:78:82:c2:bf:32:84:15:49:e9:
         c7:75:51:ad:4e:4a:2f:15:ec:ba:4a:67:6b:85:f4:63:41:07:
         69:37:76:46:e4:22:e6:22:b1:94:8a:4d:b4:3f:ba:ce:f9:56:
         d5:20:33:4e:6c:26:f3:aa:e8:44:35:85:83:ed:af:c2:9f:3f:
         07:bb:11:10:28:51:6f:19:e1:e7:7d:72:94:e2:45:6f:30:5c:
         91:99:8c:c4:36:7b:21:a7:d5:0c:fd:2b:db:91:70:49:a8:dc:
         4f:b4:da:2b:b6:f5:54:43:cb:51:c2:0a:14:2a:65:c4:aa:a7:
         30:b3:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:09:41 2025 by rpki-client