Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030313a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633030313a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          GRyufA5r2vU1Nd0m/d7uAcINoqkjoMMrzMW626FwM6A=
Subject key identifier:   BC:99:4B:A7:39:AF:F5:75:82:54:95:13:F2:0D:CB:CD:39:BC:75:5A
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       34DE0E23086E7602AD23C4DEB0B838F0CCE4BF91
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030313a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:47:26 +0000
ROA not before:           Wed 30 Apr 2025 18:42:26 +0000
ROA not after:            Wed 29 Apr 2026 18:47:26 +0000
asID:                     52580
IP address blocks:        2804:cf8:c001::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 15:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:de:0e:23:08:6e:76:02:ad:23:c4:de:b0:b8:38:f0:cc:e4:bf:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:42:26 2025 GMT
            Not After : Apr 29 18:47:26 2026 GMT
        Subject: CN=BC994BA739AFF57582549513F20DCBCD39BC755A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:26:39:92:21:ae:f8:51:d8:ab:07:18:2a:
                    24:b9:9c:e0:ad:c9:12:a6:3d:e4:84:15:60:e9:09:
                    db:33:5e:f0:6c:47:29:10:09:e6:c1:8d:ca:48:d3:
                    14:0b:6f:5f:4b:e3:c6:c4:58:46:89:ad:ed:5c:c6:
                    ef:1b:52:1d:55:d5:3a:9a:70:3c:22:c7:f3:f6:1b:
                    dc:45:45:e4:4b:10:6e:8d:81:00:1b:26:64:e7:05:
                    f9:da:26:0e:8c:c2:74:99:d1:67:84:d5:a0:51:1c:
                    0c:c1:9e:0b:ed:4e:34:41:91:d8:c7:3b:83:f9:52:
                    6d:12:ba:38:ce:c3:91:6d:0a:8e:62:c6:2d:d9:72:
                    b3:55:01:53:70:ae:9c:96:14:59:3c:5b:79:64:6c:
                    64:1b:e7:6e:e8:85:7a:40:9e:4e:49:52:2b:e2:4a:
                    ee:e5:51:3b:32:ae:09:ce:52:ee:ce:68:53:c8:8d:
                    cf:a9:02:0a:f4:f5:6c:44:4a:68:58:11:32:38:b9:
                    56:4a:9b:a7:46:13:84:1c:08:d1:fc:88:e2:42:a0:
                    8c:17:c3:f4:99:25:62:98:fa:53:3f:9a:3a:71:c8:
                    a3:43:cb:c2:be:cf:4d:95:71:1e:c7:c6:d7:a4:03:
                    30:54:04:7d:54:b4:55:0e:8e:9a:aa:7c:e1:96:3c:
                    19:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:99:4B:A7:39:AF:F5:75:82:54:95:13:F2:0D:CB:CD:39:BC:75:5A
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030313a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c001::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:6f:03:a1:d5:6c:96:09:ed:af:a7:f2:4a:16:f8:30:f8:72:
         1f:8a:23:dd:92:c1:2e:73:db:91:3c:39:13:fb:15:73:c9:00:
         2e:8a:b4:81:d0:4d:34:78:fa:72:eb:fd:29:11:54:14:3d:68:
         58:fd:3a:64:19:46:03:59:e9:9a:92:60:0e:5b:6e:45:bf:e6:
         62:ab:d9:22:5e:80:2f:d4:b2:dd:f0:d5:5a:f5:f5:29:90:72:
         56:03:79:2c:4e:7e:07:a5:7b:13:f8:e7:d6:bc:44:79:8f:85:
         f0:6a:c8:bd:8e:8b:71:49:f9:62:5c:5e:d2:6c:01:92:b7:73:
         d0:5a:1a:1f:5b:be:c1:74:da:f1:86:c4:c7:86:fe:4a:03:6d:
         ff:9a:49:2c:ae:d7:ea:30:68:c0:5e:78:e3:12:d1:98:83:53:
         66:7d:f7:ea:6f:f3:79:89:8e:41:dd:1e:77:55:56:d8:4c:14:
         8a:d5:2d:bc:b3:86:e8:43:07:1d:9a:f6:34:b0:e8:1e:8f:1e:
         b9:52:4e:cb:f8:d5:3f:23:55:72:f7:2d:7b:29:31:71:19:28:
         1c:91:e7:cc:34:5d:9e:6d:2b:b3:ec:c5:7c:8e:7d:ba:73:97:
         80:29:46:59:f4:f6:0b:82:83:26:c2:7a:f8:04:05:e9:83:85:
         c0:9f:cb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:36:21 2025 by rpki-client