Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33332d3333203d3e20323638343633.roa
File:                     323830343a353139343a3a2f33332d3333203d3e20323638343633.roa (raw, json)
Hash identifier:          7SUBqqrVm5azEwyqGIz3dzcX58Q09jNpKoXWLiyg0s0=
Subject key identifier:   A4:54:A7:07:DA:A1:57:B0:06:B7:5E:3C:90:AA:85:33:23:47:55:74
Certificate issuer:       /CN=4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C
Certificate serial:       5D61ACB751AF20CCD5A5A8F9A664B458A20EA948
Authority key identifier: 4A:B7:DF:BD:96:BC:DC:3F:59:F2:BB:26:0A:F8:4F:EF:8D:41:2C:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33332d3333203d3e20323638343633.roa
Signing time:             Fri 02 May 2025 18:22:14 +0000
ROA not before:           Fri 02 May 2025 18:17:14 +0000
ROA not after:            Fri 01 May 2026 18:22:14 +0000
asID:                     268463
IP address blocks:        2804:5194::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.crl
                          rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 20:43:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:61:ac:b7:51:af:20:cc:d5:a5:a8:f9:a6:64:b4:58:a2:0e:a9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C
        Validity
            Not Before: May  2 18:17:14 2025 GMT
            Not After : May  1 18:22:14 2026 GMT
        Subject: CN=A454A707DAA157B006B75E3C90AA853323475574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:4d:52:63:5d:3c:3f:77:f2:a0:3c:80:45:
                    0c:12:32:49:91:1e:2c:69:31:66:c5:e3:78:8d:97:
                    b7:16:08:61:71:d8:86:fa:46:68:55:59:f6:5c:65:
                    89:7e:a8:dd:c1:76:52:79:22:91:03:f8:35:25:55:
                    c2:8a:d8:2c:7e:42:88:0e:a9:e4:a9:a0:7e:2f:4f:
                    6d:cf:f9:c0:2d:17:4f:05:6c:7b:6d:a2:02:4a:08:
                    7c:81:60:2d:c6:c9:2d:a9:15:99:26:55:8a:04:5f:
                    de:f2:48:26:3e:66:2d:c6:eb:5d:d5:72:57:9c:8c:
                    2a:73:94:74:bc:e9:0f:97:44:3c:05:1f:7b:c8:de:
                    24:12:bc:8b:aa:a3:9e:47:f1:f9:41:54:21:a3:4d:
                    98:25:c4:dd:4c:92:bc:44:ba:3e:53:82:db:4d:ce:
                    91:7a:b3:e8:f3:b4:38:13:94:24:41:d1:27:25:e5:
                    91:05:e3:a7:04:05:a9:f0:d8:f2:57:0e:93:39:2b:
                    51:f2:3b:5d:4c:08:e4:97:32:b6:c4:3d:d9:46:bc:
                    c0:fb:e2:f2:cb:af:95:7f:05:c8:e0:6f:89:1d:2f:
                    ac:3e:24:44:b7:dc:d3:8b:f9:d7:d2:fb:0a:d6:7f:
                    07:92:b7:7e:56:b2:31:c7:a4:1e:24:5b:21:4b:77:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:54:A7:07:DA:A1:57:B0:06:B7:5E:3C:90:AA:85:33:23:47:55:74
            X509v3 Authority Key Identifier:
                keyid:4A:B7:DF:BD:96:BC:DC:3F:59:F2:BB:26:0A:F8:4F:EF:8D:41:2C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB7DFBD96BCDC3F59F2BB260AF84FEF8D412C1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FsMwpoWQDE9Q2Q4aTFGHqv6jdg2m7YFcD69NqK6e2fKs/0/323830343a353139343a3a2f33332d3333203d3e20323638343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5194::/33

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:de:c0:79:2b:17:9d:f7:40:00:61:ee:1f:14:f9:79:91:
         e8:37:71:3d:6a:b3:0a:cf:9a:81:2d:ef:00:1b:5d:ea:00:3d:
         95:ad:e6:f0:83:b6:2b:75:64:4a:0a:eb:3a:56:c4:83:3f:2d:
         01:bb:0f:34:23:b2:98:ef:f6:c6:69:80:ab:3a:83:60:9e:01:
         c2:9d:79:32:f1:89:e3:81:d0:9c:fc:ae:e4:8d:d7:4f:e5:bc:
         41:5a:df:5f:01:aa:7f:3c:28:93:f3:38:73:2b:a0:db:93:6b:
         83:c8:91:49:19:c4:58:25:e9:9d:84:a8:29:7f:34:60:71:45:
         53:ba:f0:09:b1:39:ad:b4:cd:3c:8b:c4:3f:31:a9:2d:2d:3d:
         ff:89:69:6b:fe:77:8e:4c:3a:28:2e:60:47:e4:8c:17:d3:2b:
         c7:2f:14:17:cc:95:e0:ea:39:c1:75:7c:30:93:c6:b1:40:49:
         07:24:6c:aa:7c:83:dc:8e:98:22:3d:bc:8a:02:12:df:42:50:
         57:ce:80:39:c9:89:01:5e:7d:2d:55:c1:37:b0:d6:52:ab:e9:
         f1:b8:f0:91:31:b8:65:42:87:db:5f:56:0e:5a:2b:1b:6c:1b:
         51:69:64:1a:ff:56:70:8f:79:f7:05:61:d8:10:c5:65:e0:cc:
         b8:57:77:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:13:21 2025 by rpki-client