Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030373a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a633030373a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          DXBuGRK1vgBM+3D/4SgzlETJZTivMOkXG6fDzzyiANY=
Subject key identifier:   65:EC:34:F7:DA:B2:D5:26:E9:A9:AD:24:03:6A:DB:DD:A8:E2:B9:C4
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       20AD244AB4FE5BAE2843EB1A2E605E6C6140481D
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030373a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:47:58 +0000
ROA not before:           Wed 30 Apr 2025 18:42:58 +0000
ROA not after:            Wed 29 Apr 2026 18:47:58 +0000
asID:                     52580
IP address blocks:        2804:cf8:c007::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 10:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ad:24:4a:b4:fe:5b:ae:28:43:eb:1a:2e:60:5e:6c:61:40:48:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:42:58 2025 GMT
            Not After : Apr 29 18:47:58 2026 GMT
        Subject: CN=65EC34F7DAB2D526E9A9AD24036ADBDDA8E2B9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:07:8f:b2:bb:45:d8:6d:bd:1c:bb:a4:e8:5c:
                    ab:2c:1a:af:1c:0f:2c:d0:c0:78:e2:18:ad:48:64:
                    ce:a9:a7:d2:2f:b0:e2:68:c5:f4:48:f4:b0:58:99:
                    b1:83:d2:b0:36:71:9d:2e:6a:63:4c:f8:ba:82:99:
                    a1:df:83:0c:22:ad:97:58:aa:22:79:dc:77:e1:01:
                    4b:8e:e6:e9:5f:9a:5e:b9:2a:f1:c4:da:76:cd:e4:
                    e4:5c:d9:f8:eb:84:f3:34:33:fc:36:3d:18:54:fa:
                    85:68:27:7e:e4:97:70:e2:39:8b:ec:49:8a:86:32:
                    73:74:b5:7e:1e:c7:8e:8d:26:22:97:a4:18:57:89:
                    c1:2a:a4:ba:bb:77:6b:e2:c6:eb:4e:db:f1:8a:f5:
                    fc:8a:fb:8b:ed:2f:7c:2e:b3:51:e6:10:cc:9f:75:
                    56:b1:e0:07:7d:c0:a9:16:b1:20:44:c3:18:b4:12:
                    b9:72:5d:d2:32:e0:3f:7e:30:5d:76:81:1c:38:d3:
                    d4:1c:0d:38:49:fd:e6:be:17:82:6c:74:78:00:ff:
                    b1:71:16:f6:08:4f:fd:e8:7f:c4:51:df:f9:e5:de:
                    77:2a:10:13:7c:cc:72:93:46:91:79:5f:16:fb:c8:
                    01:27:cb:33:a2:c6:13:85:ac:83:a7:f1:92:1f:cb:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EC:34:F7:DA:B2:D5:26:E9:A9:AD:24:03:6A:DB:DD:A8:E2:B9:C4
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a633030373a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:c007::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:34:c5:6e:cf:18:68:38:c0:3b:04:b6:cf:db:35:62:d4:48:
         67:e7:06:78:0a:5e:9a:12:c3:9f:5a:c5:96:5f:29:61:4e:50:
         b4:46:8d:e8:73:d8:9f:ff:51:ca:0c:e8:48:bd:9e:40:be:c1:
         92:bf:d1:c2:3f:5c:99:94:af:e0:86:a7:38:70:da:6f:bc:5e:
         0e:63:cd:b2:b5:d9:63:40:c2:0f:4e:5f:0f:ab:47:c1:37:2f:
         f5:f0:fb:fe:86:99:aa:e1:df:37:f5:52:1f:d3:e5:aa:01:b3:
         3a:86:a4:11:c9:5c:0e:0a:17:0a:4d:6d:31:e1:6d:68:0e:dc:
         f7:e9:c5:10:8f:d8:99:16:84:19:16:5f:98:c6:d1:64:7c:5c:
         01:f8:e0:f9:b9:af:89:46:ce:fb:0c:4a:27:83:15:e6:b4:53:
         19:7c:ac:fd:f7:8b:85:44:06:b4:b6:7a:79:d8:66:87:83:ed:
         8e:34:bf:50:ba:ce:8a:24:76:6d:59:1c:e3:7f:3a:a6:2a:bd:
         4f:61:87:3e:f4:b9:52:14:67:3e:e6:7f:ff:dd:b3:87:c3:ec:
         1e:a4:4f:f3:f2:9a:5c:91:72:8c:14:2f:d8:b8:7f:00:89:b5:
         25:d7:10:00:be:d7:79:37:e9:e2:62:e6:e6:1b:2a:5b:20:d8:
         71:dd:fd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:18:19 2025 by rpki-client