Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/323830343a313830633a3a2f33322d3438203d3e203631393234.roa
File:                     323830343a313830633a3a2f33322d3438203d3e203631393234.roa (raw, json)
Hash identifier:          cRbifccVAj1tIwAEj6C1pqaZDqW9/G4FbJyKw7Bo4D4=
Subject key identifier:   57:22:89:B5:2A:57:A9:AD:C2:ED:7E:26:6F:8B:ED:C2:2F:4C:9D:76
Certificate issuer:       /CN=D00CC509AF17310BD082A9DE6401DA345FE17442
Certificate serial:       29A781093D634B9809303376014A7E8AE5B6E12A
Authority key identifier: D0:0C:C5:09:AF:17:31:0B:D0:82:A9:DE:64:01:DA:34:5F:E1:74:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D00CC509AF17310BD082A9DE6401DA345FE17442.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/323830343a313830633a3a2f33322d3438203d3e203631393234.roa
Signing time:             Fri 09 May 2025 15:14:08 +0000
ROA not before:           Fri 09 May 2025 15:09:08 +0000
ROA not after:            Fri 08 May 2026 15:14:08 +0000
asID:                     61924
IP address blocks:        2804:180c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.crl
                          rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D00CC509AF17310BD082A9DE6401DA345FE17442.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 15:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a7:81:09:3d:63:4b:98:09:30:33:76:01:4a:7e:8a:e5:b6:e1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00CC509AF17310BD082A9DE6401DA345FE17442
        Validity
            Not Before: May  9 15:09:08 2025 GMT
            Not After : May  8 15:14:08 2026 GMT
        Subject: CN=572289B52A57A9ADC2ED7E266F8BEDC22F4C9D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:28:79:03:03:d1:dc:d8:6d:98:b8:c5:9d:
                    06:7f:49:fe:fa:38:d5:5a:12:a2:3d:11:35:1f:ea:
                    c8:0d:f8:b5:b5:3e:64:21:6f:40:99:ad:d6:ea:4f:
                    34:e9:24:fd:ee:b0:cf:ed:24:e1:8a:86:79:e1:6d:
                    cb:6a:be:6b:76:15:5f:b8:45:f7:80:f4:b9:69:e0:
                    43:36:25:78:a7:97:85:6a:57:92:83:e2:99:e4:48:
                    99:c6:90:52:34:a9:18:79:51:53:f7:04:9c:fb:41:
                    bb:77:73:34:0c:6c:86:ad:c5:aa:3d:46:41:98:15:
                    fb:47:d6:57:90:26:43:8c:58:9e:8c:4e:ef:65:87:
                    b9:31:fe:74:2b:2a:9c:de:b4:ce:58:de:a5:97:33:
                    f6:b2:c4:6e:38:09:a5:f0:71:39:ac:5e:85:84:99:
                    69:e8:81:74:22:89:55:21:d6:62:d8:19:82:d8:95:
                    33:e2:33:4b:00:d8:bd:db:e1:a8:7e:6c:72:d2:8f:
                    0d:ba:5b:45:cd:2d:ac:9e:4e:c6:ae:24:d2:f4:e8:
                    f4:5e:44:23:2c:39:5e:fd:df:ad:bf:6d:f8:9a:77:
                    bd:d5:f8:20:3b:d9:25:18:c8:ae:c8:fd:4d:9c:29:
                    df:8c:76:ea:6c:63:06:bd:68:ef:26:6a:2f:d9:72:
                    03:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:22:89:B5:2A:57:A9:AD:C2:ED:7E:26:6F:8B:ED:C2:2F:4C:9D:76
            X509v3 Authority Key Identifier:
                keyid:D0:0C:C5:09:AF:17:31:0B:D0:82:A9:DE:64:01:DA:34:5F:E1:74:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/D00CC509AF17310BD082A9DE6401DA345FE17442.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D00CC509AF17310BD082A9DE6401DA345FE17442.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JAdyexWaHjVRohxdAiGodTC9xjzVJbZHWrzFGLoL16nM/0/323830343a313830633a3a2f33322d3438203d3e203631393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:180c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:37:30:8b:cd:00:2a:12:5a:16:f2:1a:7a:74:d7:50:73:
         68:3a:fc:17:93:43:02:77:b6:40:c8:8f:b8:d0:a4:4b:a1:80:
         3f:b9:7b:0b:75:3a:54:bb:59:fb:04:06:a1:80:70:be:2c:a0:
         18:27:57:fc:53:17:fe:b9:dc:78:9a:b7:6f:b2:46:dd:ca:86:
         d9:99:44:0e:9f:7a:93:b0:b6:83:26:64:d7:df:60:de:dd:70:
         d5:5b:c7:0a:14:c0:21:18:c7:7f:08:71:02:83:62:12:b5:ae:
         4e:06:2f:2a:3d:9b:2a:ee:37:aa:e8:82:20:68:9d:66:f6:ee:
         80:ac:6e:e9:49:80:c4:af:2b:62:b6:bf:29:42:05:8f:10:84:
         56:bb:6c:a6:b6:28:34:c2:30:93:26:de:d1:0d:71:51:10:d1:
         09:e4:0b:93:2c:35:34:be:d5:5c:bf:86:f4:57:ce:76:79:75:
         44:28:fa:d7:84:17:42:f8:40:6e:eb:05:fe:51:fa:94:a2:8f:
         46:c5:6d:f4:13:5c:39:63:70:95:0c:95:95:fc:81:54:ab:9f:
         48:f1:a0:f5:6b:60:11:4f:b7:64:0d:78:97:19:1e:1a:f0:55:
         82:7a:cd:c9:b4:11:65:10:1c:eb:fd:9a:e9:31:87:d1:d5:7c:
         9a:69:b5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:20:09 2025 by rpki-client