Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa
File:                     323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa (raw, json)
Hash identifier:          KmfoJnA+m+lIIb/f7v2HReLl/jpaS6ANmcaCEAuHOLc=
Subject key identifier:   51:E6:75:DB:BF:DD:02:9A:3A:09:23:A4:27:1C:FE:62:03:6A:21:FE
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       5908EB7EC3FBA72E6D02623BEFA6E6E9885B9539
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa
Signing time:             Sun 06 Apr 2025 22:08:52 +0000
ROA not before:           Sun 06 Apr 2025 22:03:52 +0000
ROA not after:            Sun 05 Apr 2026 22:08:52 +0000
asID:                     262393
IP address blocks:        2804:8c8:8000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 17:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:08:eb:7e:c3:fb:a7:2e:6d:02:62:3b:ef:a6:e6:e9:88:5b:95:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Apr  6 22:03:52 2025 GMT
            Not After : Apr  5 22:08:52 2026 GMT
        Subject: CN=51E675DBBFDD029A3A0923A4271CFE62036A21FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:20:9f:26:cf:d3:61:97:b4:26:23:a6:f6:
                    fe:7c:e8:ad:8d:2c:cf:d9:e7:62:7d:ab:9f:3c:0e:
                    9e:eb:1a:4c:09:a6:6c:84:51:fa:c8:de:f0:8b:36:
                    87:32:d4:3a:50:ab:b7:0e:93:f2:34:d8:6d:4b:67:
                    7d:5f:25:0a:e2:de:fd:09:71:06:25:82:d2:8a:61:
                    24:dd:a6:e4:fe:ab:24:93:a1:53:7b:a0:d3:c0:f5:
                    a1:48:64:e4:15:95:40:da:19:55:dd:3e:29:1a:b5:
                    c1:76:b6:ef:83:ab:ee:e0:12:96:89:16:ca:24:78:
                    e4:f4:4a:97:0d:21:4d:1f:2b:c4:51:7f:05:91:d1:
                    f6:a0:a9:a3:4a:80:09:fc:c8:6c:7b:a5:71:d1:f9:
                    53:ce:39:1e:86:5f:75:8f:f4:96:f4:7a:ad:19:bf:
                    dc:ed:2c:f9:3c:ce:e2:c4:7b:a0:b0:4c:44:68:ac:
                    c9:7d:90:f4:07:4e:b9:ea:9d:1a:f9:b8:66:2f:ba:
                    8d:36:00:61:28:65:cd:92:3c:78:30:83:fc:25:66:
                    06:7c:81:4a:10:0f:4a:91:d5:a8:12:f0:e0:a5:be:
                    07:27:4f:e5:b2:fc:e2:8f:bd:f7:07:8f:2c:81:71:
                    a7:b2:f0:c6:9b:ef:9c:ce:17:33:2e:c5:cf:18:40:
                    70:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E6:75:DB:BF:DD:02:9A:3A:09:23:A4:27:1C:FE:62:03:6A:21:FE
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/323830343a3863383a383030303a3a2f33352d3335203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c8:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2f:63:90:f3:7b:aa:fc:f2:a7:95:30:08:4a:5d:6f:a5:57:9b:
         49:68:cd:ab:b7:ba:e4:9c:c5:0a:6d:e3:09:36:17:5c:10:32:
         e8:01:8a:14:c7:36:81:cf:96:b9:46:b7:f0:e8:40:36:a0:c0:
         d0:57:fb:e8:b4:a0:23:5a:9f:c9:45:16:4e:65:0c:75:3c:21:
         15:bd:d8:76:76:3c:c5:e0:c9:c1:49:1c:9e:46:7e:52:a7:a5:
         9a:b0:c8:0d:8a:86:28:70:dd:30:7a:61:75:ea:fa:89:da:ee:
         9b:34:8f:61:2f:40:91:a3:91:8c:5f:eb:9a:e1:4b:99:fd:11:
         45:4b:4a:19:08:e6:26:74:dc:b5:34:38:8e:53:37:f9:21:02:
         bc:42:01:36:83:7e:da:b0:f2:c8:34:e1:5d:22:4d:4b:a3:de:
         7d:18:94:7d:be:56:a7:93:7a:9c:d4:a6:b4:84:ad:0a:03:24:
         c5:f5:76:a0:fd:3d:ec:bf:6b:f9:ae:41:35:72:7f:95:aa:2b:
         58:69:fe:36:92:79:0b:c8:7a:71:86:57:33:65:7d:1b:8b:e6:
         e4:72:52:36:30:b7:91:bb:32:a0:45:87:9c:b3:e5:49:c3:85:
         93:f1:1e:ba:e2:44:d6:ee:98:9f:15:d5:97:c2:cd:79:1e:fc:
         11:51:22:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 01:14:50 2025 by rpki-client