Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/323830343a353637303a3a2f33322d3438203d3e20323637393938.roa
File:                     323830343a353637303a3a2f33322d3438203d3e20323637393938.roa (raw, json)
Hash identifier:          ZSOWyTFakyqpf+nbOxDPlKkM7Pp+e8/rkY3/9aKUyEk=
Subject key identifier:   F5:C1:0B:65:AA:81:53:AD:82:F5:AB:69:18:13:D0:BA:79:89:EA:4F
Certificate issuer:       /CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0
Certificate serial:       6339B0C53601503446075016EDF9EEECBDB5F8B8
Authority key identifier: E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/323830343a353637303a3a2f33322d3438203d3e20323637393938.roa
Signing time:             Wed 07 May 2025 19:31:22 +0000
ROA not before:           Wed 07 May 2025 19:26:22 +0000
ROA not after:            Wed 06 May 2026 19:31:22 +0000
asID:                     267998
IP address blocks:        2804:5670::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.crl
                          rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 20:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:39:b0:c5:36:01:50:34:46:07:50:16:ed:f9:ee:ec:bd:b5:f8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5FAEBBFBF866B2836F6041BB12ED3B009544CB0
        Validity
            Not Before: May  7 19:26:22 2025 GMT
            Not After : May  6 19:31:22 2026 GMT
        Subject: CN=F5C10B65AA8153AD82F5AB691813D0BA7989EA4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:48:79:65:66:54:07:44:c9:00:45:1a:e0:
                    7f:85:e4:a0:ea:9c:b5:49:2f:36:21:bb:84:e4:d6:
                    1e:92:61:98:e5:15:05:cb:ac:42:07:bb:e5:6b:c2:
                    64:73:91:1b:44:39:d3:26:38:19:0b:f4:95:be:1b:
                    4f:68:2e:8d:70:bb:2d:ba:5f:44:ca:f4:11:41:a6:
                    6d:72:33:6d:27:23:f0:58:7b:e6:2a:11:6c:f6:98:
                    28:c2:3a:4f:35:4a:ff:b0:00:d9:73:f9:53:f0:cb:
                    d0:ad:8e:b2:ca:8d:bd:ea:70:49:fb:12:aa:a0:3f:
                    95:06:40:92:e9:b8:59:3d:e2:a9:da:18:ca:4d:47:
                    a5:71:bb:e2:c2:7d:5b:74:a4:00:d7:70:81:30:7b:
                    7a:f9:e1:ab:c9:59:de:c6:3d:97:d2:8c:fd:cd:60:
                    c4:4b:c8:dd:c1:95:de:5d:2a:de:6f:d3:bb:5e:1d:
                    1e:cb:fa:7b:e3:7c:a4:de:99:ae:c8:15:00:92:e9:
                    49:f9:50:14:df:4e:aa:a3:86:7c:73:e9:41:1e:b7:
                    27:e1:cc:13:ea:9e:ef:8e:40:c3:f2:8f:69:ae:24:
                    b6:f7:a9:b6:75:7e:87:c4:3e:ec:6b:df:15:b4:6b:
                    0b:4f:da:32:7e:d5:14:06:a1:68:3c:aa:5b:31:28:
                    7e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C1:0B:65:AA:81:53:AD:82:F5:AB:69:18:13:D0:BA:79:89:EA:4F
            X509v3 Authority Key Identifier:
                keyid:E5:FA:EB:BF:BF:86:6B:28:36:F6:04:1B:B1:2E:D3:B0:09:54:4C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5FAEBBFBF866B2836F6041BB12ED3B009544CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xzhQYnY7KRdELn5tTJcFESLgUyetupjHyVy2hu2QeJj/0/323830343a353637303a3a2f33322d3438203d3e20323637393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5670::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:99:e4:3e:ba:f1:a6:d2:62:6c:1f:e9:3e:38:d0:86:a5:31:
         1c:d0:53:aa:33:82:20:0d:f3:3f:10:3b:13:7b:d6:be:27:34:
         0e:52:bb:3e:34:95:fa:e0:2c:b4:d9:41:ee:f5:65:8b:a7:09:
         de:6e:7d:c3:73:e8:b7:6b:83:a6:b4:a9:af:6d:63:eb:01:4b:
         c3:04:ff:ca:90:a2:b7:67:fb:b1:81:76:ac:38:54:32:b6:c1:
         a7:15:25:49:44:f6:43:c4:cb:ca:98:04:65:96:04:85:42:5b:
         2b:8e:84:53:61:75:27:39:be:59:eb:86:93:c0:c8:ee:18:89:
         e5:d7:59:6f:98:5e:84:ff:87:e4:59:df:0b:13:c2:be:06:71:
         df:b5:7f:2e:43:6d:28:f4:25:87:c4:9c:68:f3:5f:bb:5e:eb:
         61:7a:d8:f0:99:e9:23:ed:90:e0:5f:c4:1f:d7:31:4c:52:73:
         14:c8:b0:6a:b0:93:cd:d3:48:fc:38:dc:da:a3:4d:68:69:83:
         05:a2:41:1c:e5:7e:45:b1:13:74:3e:d2:6c:08:16:10:7a:fe:
         2e:3d:5e:5a:ad:7e:95:c0:dc:02:c2:2a:de:28:2a:0a:14:4a:
         a7:fc:7b:57:99:6b:73:38:f3:1a:da:f5:9e:6b:7f:96:c1:60:
         4c:52:a5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:19:09 2025 by rpki-client