Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa
File:                     323830343a3264383a3a2f33322d3634203d3e203532353332.roa (raw, json)
Hash identifier:          hquyzVbM75F6bKtCJOJTg791Ve8oMeVO6CJr3ezhW28=
Subject key identifier:   FB:B9:5C:21:8E:50:5E:36:69:22:A9:B5:EC:73:00:FA:66:1C:D1:C0
Certificate issuer:       /CN=B58A535DFA3CC3409F5D6F92075412F203C29CE7
Certificate serial:       7A1EC2E7C10A79AB8F38E24B3196256CD4CB7DAC
Authority key identifier: B5:8A:53:5D:FA:3C:C3:40:9F:5D:6F:92:07:54:12:F2:03:C2:9C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa
Signing time:             Tue 03 Jun 2025 18:01:34 +0000
ROA not before:           Tue 03 Jun 2025 17:56:34 +0000
ROA not after:            Tue 02 Jun 2026 18:01:34 +0000
asID:                     52532
IP address blocks:        2804:2d8::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.crl
                          rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 15:21:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1e:c2:e7:c1:0a:79:ab:8f:38:e2:4b:31:96:25:6c:d4:cb:7d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B58A535DFA3CC3409F5D6F92075412F203C29CE7
        Validity
            Not Before: Jun  3 17:56:34 2025 GMT
            Not After : Jun  2 18:01:34 2026 GMT
        Subject: CN=FBB95C218E505E366922A9B5EC7300FA661CD1C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:84:e9:d6:22:ae:22:d4:ff:1e:45:be:01:0a:
                    8f:5f:68:70:83:e4:af:e6:e7:90:e9:80:81:07:dc:
                    10:b4:1b:b4:88:ef:f7:e5:f0:8f:dc:59:57:62:84:
                    d8:4f:00:2b:6d:da:5b:eb:1d:75:29:4f:f2:11:78:
                    3b:f9:22:71:33:3b:01:2e:89:6a:7b:2b:49:f2:1f:
                    da:b5:25:ff:7c:40:f3:e6:70:23:b1:0e:30:91:b1:
                    bc:de:08:5e:e3:30:36:ec:49:3c:10:1a:bc:87:ca:
                    e0:b5:41:ca:cf:4a:08:0c:75:5e:6b:38:df:18:6d:
                    88:8b:bb:52:51:91:44:6b:d7:9a:3c:fd:bb:29:b6:
                    f8:2b:0d:7c:3f:4a:c2:9d:7e:d8:57:97:c2:b3:b7:
                    e1:e0:c7:d6:dc:5e:82:b8:0a:66:75:cc:fb:17:8f:
                    e5:36:85:c2:1c:67:86:10:3e:e4:b3:b0:8e:f2:e4:
                    14:39:f9:66:9d:15:f3:c7:fe:5b:17:16:3f:b4:3f:
                    da:3f:99:84:15:bc:3f:3e:ee:7f:4b:c5:8e:5a:03:
                    ab:6f:4d:35:aa:a8:99:0c:bf:fd:04:73:4e:21:78:
                    d1:2d:ae:5d:fd:30:d0:19:c6:c6:9d:bb:51:22:14:
                    ab:da:46:1c:57:36:fb:56:d4:a6:c9:51:43:4d:4a:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B9:5C:21:8E:50:5E:36:69:22:A9:B5:EC:73:00:FA:66:1C:D1:C0
            X509v3 Authority Key Identifier:
                keyid:B5:8A:53:5D:FA:3C:C3:40:9F:5D:6F:92:07:54:12:F2:03:C2:9C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/B58A535DFA3CC3409F5D6F92075412F203C29CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B58A535DFA3CC3409F5D6F92075412F203C29CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/323830343a3264383a3a2f33322d3634203d3e203532353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:a1:a8:54:79:25:7c:fc:74:93:33:cb:6b:32:bf:d9:51:7b:
         27:9e:2a:bc:38:8f:a6:af:54:46:ee:2e:9c:14:da:73:9e:70:
         cd:01:e6:d8:35:fb:77:5d:c4:22:ef:f4:7a:4e:15:db:ae:fc:
         d2:41:49:a2:a4:b3:c5:aa:61:a0:f1:f2:c4:79:4b:8e:15:07:
         ab:8f:41:bc:74:69:6d:55:44:c4:a4:e9:c8:36:1e:9a:2f:10:
         f3:a5:16:46:ab:3a:e2:67:a8:68:23:b8:9c:8f:a4:29:d5:e7:
         de:b8:8a:ad:2c:7e:d3:c8:4c:be:13:20:0a:32:2b:c3:5e:2e:
         e3:ea:87:3c:25:2b:29:40:35:44:9c:79:94:85:7c:99:55:6e:
         1a:3c:8b:48:ed:10:93:99:65:39:a6:b2:22:0d:2c:d7:0a:cf:
         25:07:94:cf:a9:ab:bc:2f:8b:3d:f1:71:b4:c0:65:ed:48:35:
         56:54:53:68:29:51:cd:c5:bc:3d:05:a1:6a:77:05:26:97:5e:
         78:36:c8:95:62:72:b6:8b:69:df:10:b3:2a:0c:54:9a:73:be:
         06:49:ae:9a:b9:22:4c:17:ad:5c:a0:4b:9a:0f:3d:b5:f3:80:
         a5:09:14:97:46:d6:7d:f2:c1:3d:1e:28:ae:e4:26:8c:2d:84:
         a3:54:26:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 17:34:46 2025 by rpki-client