Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a663a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a663a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          QdnBGNTWageLNfWm2V85TbdkhxOZ1Hpitn4kMHeM+aQ=
Subject key identifier:   4A:25:9D:75:93:5D:D1:B7:0A:1B:0A:F7:34:36:2B:B4:1B:DD:3B:AA
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       754C7AA9CC868465C2A3913F8AA70663C02D43D4
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a663a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:45:24 +0000
ROA not before:           Wed 30 Apr 2025 18:40:24 +0000
ROA not after:            Wed 29 Apr 2026 18:45:24 +0000
asID:                     52580
IP address blocks:        2804:cf8:f::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 15:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4c:7a:a9:cc:86:84:65:c2:a3:91:3f:8a:a7:06:63:c0:2d:43:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:40:24 2025 GMT
            Not After : Apr 29 18:45:24 2026 GMT
        Subject: CN=4A259D75935DD1B70A1B0AF734362BB41BDD3BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:fc:6f:80:0a:42:85:6d:57:8d:58:ae:94:
                    5b:de:1b:2e:fd:92:9f:36:0a:d6:8d:a8:4b:4c:72:
                    dc:c0:24:4b:7a:18:5c:e9:d2:79:33:ee:f6:72:0a:
                    f4:45:6f:f7:cc:19:1b:4f:7b:d6:ae:ee:21:d3:02:
                    49:09:c1:cd:5a:54:ac:c9:98:36:c5:65:70:fa:8b:
                    c5:db:e0:46:0d:00:ea:3b:7c:9c:17:cd:f1:58:50:
                    6a:97:d4:d0:f4:bf:07:1f:3e:ae:63:53:71:a6:63:
                    fb:3b:1b:e1:08:00:db:08:37:01:d3:6d:85:d1:5a:
                    ed:df:96:1a:79:0e:c3:4f:b3:c0:af:02:2c:9f:3b:
                    21:bd:05:7a:d2:87:79:0b:04:05:14:78:3b:ca:07:
                    08:92:6c:bb:aa:a0:82:f0:8c:cf:ea:57:94:33:61:
                    31:3c:52:fa:ab:90:14:d1:aa:39:7c:4b:d8:b6:31:
                    e8:81:e0:cb:9d:a1:05:ee:3e:fb:9b:3b:c2:eb:53:
                    e3:7f:89:23:6d:c7:07:2b:be:23:75:89:ac:e1:ff:
                    ad:5a:54:eb:12:38:3d:88:9d:64:04:b9:15:e5:22:
                    fa:79:42:88:56:f8:06:e5:9f:13:c7:78:44:06:69:
                    8a:f2:0d:d8:01:54:3d:65:c1:26:7e:0c:86:97:62:
                    51:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:25:9D:75:93:5D:D1:B7:0A:1B:0A:F7:34:36:2B:B4:1B:DD:3B:AA
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a663a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:a9:98:54:04:23:92:bf:14:f8:28:62:3a:d7:0e:33:b8:
         81:d8:e4:e9:a3:e5:05:19:0b:07:f5:ee:7a:28:cd:07:87:ea:
         60:15:87:91:b7:c8:70:17:2f:11:8e:0c:e1:30:99:87:3f:53:
         cb:97:32:e5:3a:a0:91:83:da:37:ee:8b:53:13:e8:bd:3a:bf:
         37:bc:03:83:ed:09:04:cd:d7:f2:7d:25:e8:52:bb:ea:6b:b3:
         81:ea:c5:80:f5:06:7a:26:20:62:c0:f5:8a:71:b5:26:91:33:
         51:5b:85:13:2e:e9:37:5a:54:24:2a:a2:f3:d8:6b:bc:c9:32:
         8c:95:41:5b:1a:26:e9:f3:20:5b:a8:09:ec:22:d4:6b:37:eb:
         3b:88:d1:47:e2:4c:a3:6a:83:9e:ed:12:1c:f9:a1:2e:44:0b:
         b8:7c:19:00:41:0e:01:06:12:1b:73:ed:30:c5:4e:83:d6:80:
         d9:bd:34:44:c4:e5:b1:9f:60:7b:62:11:14:d6:57:48:91:58:
         b4:6b:ee:a5:86:89:f3:6a:0f:9b:a2:be:07:9b:68:4b:80:4c:
         cd:21:57:20:64:b5:39:4c:dd:15:21:6c:af:23:d2:68:6b:a5:
         5e:9c:f4:6c:40:08:94:40:b3:c0:a3:f9:4c:7a:9b:be:76:b8:
         2a:cf:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:02:02 2025 by rpki-client