Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3438203d3e20323635343832.roa
File:                     323830343a333464303a3a2f33322d3438203d3e20323635343832.roa (raw, json)
Hash identifier:          pRXv/6Qg5IKV5Uxz4T4haL9HrbHkuVuKm2uxr+EKNEM=
Subject key identifier:   A7:CC:54:6C:6E:5C:5D:03:0D:D2:0C:5F:77:87:FD:DE:4D:A5:59:BD
Certificate issuer:       /CN=AB0A9EADB83F739FC241A002FB1C2A394EECBF50
Certificate serial:       66E8278C70FF33DAF57F689EB4F2FB059B494790
Authority key identifier: AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3438203d3e20323635343832.roa
Signing time:             Wed 07 May 2025 19:31:20 +0000
ROA not before:           Wed 07 May 2025 19:26:20 +0000
ROA not after:            Wed 06 May 2026 19:31:20 +0000
asID:                     265482
IP address blocks:        2804:34d0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.crl
                          rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 06:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e8:27:8c:70:ff:33:da:f5:7f:68:9e:b4:f2:fb:05:9b:49:47:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB0A9EADB83F739FC241A002FB1C2A394EECBF50
        Validity
            Not Before: May  7 19:26:20 2025 GMT
            Not After : May  6 19:31:20 2026 GMT
        Subject: CN=A7CC546C6E5C5D030DD20C5F7787FDDE4DA559BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:87:6f:3d:21:c8:2c:b5:3e:98:7f:7d:59:eb:
                    d7:23:bf:2b:1a:4e:db:dc:c6:c2:74:b4:ca:dc:fb:
                    d0:16:4b:9a:bb:77:69:8e:6e:f2:a2:67:5f:c2:aa:
                    14:48:a9:7c:17:75:db:4e:43:f4:c5:86:2f:cd:3d:
                    d3:a9:8f:ff:2f:cf:59:90:e1:ce:14:d6:d8:b5:e8:
                    04:52:7f:7d:3f:9e:c0:af:58:7d:b6:7c:49:35:30:
                    59:af:3e:08:03:ab:0b:6a:10:58:2c:73:27:dc:f5:
                    10:32:50:25:43:8f:15:db:12:99:4f:65:ee:db:ce:
                    7c:04:dd:b8:b2:bb:d8:a1:ad:03:83:2f:ad:8f:6c:
                    bf:46:48:c2:57:b4:d1:f3:3d:7c:62:5a:8a:e5:22:
                    37:8c:36:33:25:61:a9:79:69:39:f7:66:b5:75:6a:
                    f4:1f:c9:c1:76:7b:a2:9a:50:f1:d6:da:b4:07:b0:
                    c9:94:b5:f9:4d:3b:e3:99:9a:a1:98:c3:d8:00:75:
                    d1:d6:82:0e:f1:38:3c:d7:02:64:81:94:79:cd:cd:
                    9f:13:ff:7e:7f:16:53:ff:35:51:37:20:08:c0:52:
                    1c:2f:04:9d:d1:6b:0d:dc:24:72:a3:49:82:47:7e:
                    2d:94:4a:c2:06:df:49:ad:a8:22:33:80:9e:7c:7d:
                    57:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CC:54:6C:6E:5C:5D:03:0D:D2:0C:5F:77:87:FD:DE:4D:A5:59:BD
            X509v3 Authority Key Identifier:
                keyid:AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/323830343a333464303a3a2f33322d3438203d3e20323635343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:3c:f5:b3:ff:71:c5:23:02:76:78:fa:27:b4:8e:16:b7:3f:
         57:d8:9f:35:40:1b:5d:81:9c:07:33:16:59:3e:ee:0e:e0:9a:
         16:c3:fd:a2:44:66:fa:17:18:14:8e:5b:24:ca:94:ea:5c:69:
         34:ef:b8:75:d0:a6:45:bd:ca:18:22:65:52:82:4b:b6:59:90:
         c1:c4:87:fe:ae:2f:95:ef:14:8a:58:31:f2:77:fa:96:a4:46:
         39:45:1b:9d:24:e2:89:6d:64:5a:39:7f:d3:1d:a9:e6:83:d4:
         8f:1f:81:74:a2:68:f1:e0:af:bc:7b:bc:12:77:60:06:87:69:
         c4:02:ed:56:b3:eb:85:53:4f:ec:b4:7f:3c:e9:73:b0:f8:c1:
         3a:ce:f6:4b:5f:60:08:0c:88:b5:8a:62:52:92:e5:3e:5a:cf:
         5a:ce:95:da:b4:65:e9:43:de:d2:b4:5c:a1:98:97:f3:85:be:
         d9:dc:43:c5:5e:0e:d8:94:fd:98:b5:97:f4:3d:31:3e:fc:eb:
         36:ad:ff:2b:dd:44:17:99:fc:d5:15:7d:d2:e9:c4:c7:24:7b:
         9e:93:98:b4:9a:8d:66:af:cd:fb:27:88:71:27:cc:ae:40:0e:
         c2:68:7c:8f:44:62:fb:3a:90:bb:f1:3f:0e:7f:49:00:32:5d:
         71:5b:bb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:08:18 2025 by rpki-client