Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33342d3334203d3e20323638343439.roa
File:                     323830343a353136343a3a2f33342d3334203d3e20323638343439.roa (raw, json)
Hash identifier:          47kMw0n/UxRcH30I3DPJKfeyYgmG0drCHwI8ptwKAQw=
Subject key identifier:   5B:2A:89:9D:80:74:A1:BC:C1:84:20:6A:66:B4:B1:D9:23:6B:0B:2B
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       0C8C01CAFA7CDF61D1DE16CF4E3D240677BF9F1D
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33342d3334203d3e20323638343439.roa
Signing time:             Fri 11 Apr 2025 18:17:46 +0000
ROA not before:           Fri 11 Apr 2025 18:12:46 +0000
ROA not after:            Fri 10 Apr 2026 18:17:46 +0000
asID:                     268449
IP address blocks:        2804:5164::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl
                          rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 14:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8c:01:ca:fa:7c:df:61:d1:de:16:cf:4e:3d:24:06:77:bf:9f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Apr 11 18:12:46 2025 GMT
            Not After : Apr 10 18:17:46 2026 GMT
        Subject: CN=5B2A899D8074A1BCC184206A66B4B1D9236B0B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:10:51:7b:a8:28:27:20:41:56:cf:c7:9f:
                    3c:13:22:9b:21:83:49:48:e3:44:8f:d4:d6:dc:55:
                    e7:98:5a:ae:30:08:ec:77:12:19:32:ef:36:32:c1:
                    8b:94:90:df:8e:75:d8:6e:73:8b:27:8c:a1:e7:f0:
                    04:64:2f:58:2a:e1:80:96:ef:9c:96:3d:2a:9f:3a:
                    cd:bf:9e:1a:a9:3e:1d:59:3e:94:e6:57:f7:51:24:
                    ae:41:5a:f0:4e:05:24:dc:ce:0a:9e:e9:78:d3:9b:
                    e4:1e:b4:f5:65:fa:f4:74:73:92:f7:69:d3:56:d5:
                    35:86:7c:b0:80:07:68:eb:b0:57:31:3e:f7:43:ed:
                    67:a9:11:c0:39:02:7b:3f:db:29:60:81:cd:8b:b1:
                    46:0b:6f:6e:bb:c8:0b:2f:d0:29:3e:97:6b:08:0d:
                    98:9b:36:78:c0:c2:2b:ce:62:ae:cf:91:c0:87:8a:
                    6a:25:6d:d4:e5:5e:e7:fd:68:a4:f4:a3:76:1d:3d:
                    9e:8b:af:d8:b3:4f:1b:50:d9:2f:9d:06:8b:4e:95:
                    e6:44:5d:b8:67:63:f9:53:6e:80:00:6e:a3:0d:14:
                    c9:09:5d:f6:9f:5d:08:3f:f6:98:07:25:87:7f:b7:
                    11:b6:90:f8:86:e8:c9:3e:85:17:0f:e1:1b:f9:cd:
                    e6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2A:89:9D:80:74:A1:BC:C1:84:20:6A:66:B4:B1:D9:23:6B:0B:2B
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33342d3334203d3e20323638343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5164::/34

    Signature Algorithm: sha256WithRSAEncryption
         49:d1:0b:03:66:e6:f5:19:ed:e4:84:ce:cc:ac:f8:2c:3e:01:
         f5:3f:c6:12:eb:c3:d9:f5:52:7d:ab:21:c3:66:50:20:b9:ee:
         58:37:f0:6a:49:19:7c:4c:19:08:98:c1:2c:91:c3:9c:76:25:
         55:25:a4:6d:69:c3:8f:d0:55:bf:9e:81:5d:95:07:e1:3c:01:
         c0:9b:1d:d2:70:44:f2:05:02:9f:75:1c:99:68:f9:d1:1e:7f:
         50:2a:49:72:8f:bb:7c:e5:b5:4f:2a:c5:ca:0d:e2:1b:63:b0:
         77:d7:12:07:59:04:81:41:a6:8f:2a:77:8a:d1:39:e3:84:58:
         dd:86:83:a2:a8:20:2f:3d:e0:0f:09:8c:06:ae:eb:75:62:2b:
         78:28:87:ab:e8:95:4b:c3:a0:12:28:7b:d2:8f:f9:a7:6a:14:
         bd:a3:5f:6d:22:35:4c:df:f6:84:36:96:f5:2f:52:5f:9d:9f:
         d7:cb:f7:bf:cd:de:a2:bf:72:bf:ec:b2:f6:ac:6a:7f:af:b2:
         01:25:55:e4:82:1d:cf:b4:63:5b:a6:87:9c:f4:9e:49:86:aa:
         b0:d1:58:1e:d9:09:22:89:b9:72:c6:64:b3:c9:20:c0:86:b9:
         8a:1f:3a:da:11:da:80:ce:36:8e:62:3b:36:b0:d6:b8:87:99:
         f1:a4:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:34:13 2025 by rpki-client