Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa
File:                     323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa (raw, json)
Hash identifier:          zXzQ9RPenoGOzNHvQOh7ET0jsRgEOCSCut1vrt04kKs=
Subject key identifier:   3D:35:E3:B8:B8:47:26:3D:0B:BD:E6:9B:13:F1:64:2E:84:5D:1C:81
Certificate issuer:       /CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
Certificate serial:       5755BA119E369ACB826CA2C4BB5A6F36CE135FDA
Authority key identifier: E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa
Signing time:             Sat 03 May 2025 00:20:44 +0000
ROA not before:           Sat 03 May 2025 00:15:44 +0000
ROA not after:            Sat 02 May 2026 00:20:44 +0000
asID:                     263612
IP address blocks:        2804:ffc:e300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl
                          rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 09:27:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:55:ba:11:9e:36:9a:cb:82:6c:a2:c4:bb:5a:6f:36:ce:13:5f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1
        Validity
            Not Before: May  3 00:15:44 2025 GMT
            Not After : May  2 00:20:44 2026 GMT
        Subject: CN=3D35E3B8B847263D0BBDE69B13F1642E845D1C81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:20:77:c7:b4:3a:20:41:1e:d2:23:ae:d3:
                    78:1b:fe:1d:c1:16:04:50:94:0f:53:7c:24:c7:27:
                    2f:14:87:c1:37:16:eb:a9:77:40:1c:64:05:12:c5:
                    9f:3a:b5:21:ff:2b:38:77:5d:ab:28:41:3b:b5:f3:
                    d4:88:38:06:31:f5:45:34:9f:95:0e:44:60:13:4a:
                    b4:0f:a8:5c:0d:65:34:ce:41:7e:88:7a:0f:e9:d8:
                    3e:96:f0:b4:e7:22:36:3e:33:a7:f7:7a:0c:65:e4:
                    10:6f:03:5a:3b:b8:05:ed:9a:49:23:7f:e9:8f:73:
                    fc:b4:f9:80:59:da:bb:79:2b:07:ed:9b:3b:4f:ba:
                    9e:0a:05:2e:62:52:d9:08:3c:00:1e:dc:11:59:ea:
                    e5:e4:56:98:fe:c6:7a:16:df:8b:74:1e:c5:b2:89:
                    d5:22:a9:42:6e:a4:c1:b8:fa:d4:9b:ec:e2:a3:f3:
                    05:bb:89:d6:88:82:d6:74:8c:64:f8:3a:fc:17:62:
                    6b:10:bf:9f:90:ce:c7:90:02:8d:d3:08:05:86:ba:
                    72:1d:89:e1:5c:14:a3:a4:7e:2c:41:d0:4e:34:f4:
                    39:cf:da:81:a7:c5:4f:dc:86:48:68:fd:e4:66:5d:
                    98:50:78:e0:93:95:53:e5:f6:f4:2a:8f:d3:3b:fd:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:35:E3:B8:B8:47:26:3D:0B:BD:E6:9B:13:F1:64:2E:84:5D:1C:81
            X509v3 Authority Key Identifier:
                keyid:E7:8B:E3:DC:AE:2E:EB:48:95:CF:16:4E:1D:C3:BB:A3:60:23:A9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78BE3DCAE2EEB4895CF164E1DC3BBA36023A9A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqxeaXwxmvTdrBw2FUh25M798GS2GsEV6gRHc6Qd24XC/0/323830343a6666633a653330303a3a2f34302d3430203d3e20323633363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ffc:e300::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:07:06:68:95:53:e5:e5:0a:b4:07:21:ff:90:ec:98:85:09:
         b2:78:6d:b9:3c:a7:b0:6d:c9:0a:01:39:90:5f:dc:8e:c6:1f:
         c9:28:06:51:58:37:00:24:5a:2e:b3:00:2d:68:4e:a6:9f:b2:
         04:bd:76:84:9e:6f:07:78:07:24:77:c6:64:5b:3f:55:7d:bb:
         19:a3:7f:de:03:ba:e8:28:c2:98:ba:30:da:1a:3a:6d:ae:7e:
         1d:73:e9:89:9c:8d:be:68:2c:f4:8e:2d:5a:32:8b:2a:86:e0:
         46:f8:77:fd:c9:60:f3:9f:8f:53:0e:49:99:cb:69:22:d8:30:
         85:f8:9d:27:2e:00:44:f1:6a:98:ab:fd:25:b3:54:bb:fd:d8:
         56:40:a2:ab:ef:f7:67:33:99:c8:0e:a2:cb:a3:7b:48:0a:76:
         4d:e3:df:6b:df:e2:0f:f2:94:aa:a6:05:fc:7d:31:8b:91:35:
         83:af:dd:81:76:2a:c2:08:63:a0:95:53:5c:55:1e:1d:ff:e3:
         81:8e:58:aa:4b:63:e2:74:e4:8d:d9:c4:f1:ba:ea:b4:1e:73:
         87:54:fe:f9:14:95:b7:de:fa:83:8f:6e:76:70:a1:a6:72:4a:
         d6:d3:84:df:3e:98:68:2f:25:93:9d:43:75:90:c0:c6:77:37:
         0b:b5:8f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:46:22 2025 by rpki-client