Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa
File:                     323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa (raw, json)
Hash identifier:          Hxi8bk28TYZ3PQeWTPuteZeISKBMeQJST8ZwvqN421M=
Subject key identifier:   E3:BD:93:59:2B:43:E0:4D:E4:14:57:27:D8:EB:60:FF:2F:DC:D7:19
Certificate issuer:       /CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
Certificate serial:       27A33EE0E14839D6E526AE33BF7C90332ADDA6EE
Authority key identifier: D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa
Signing time:             Tue 29 Apr 2025 17:45:28 +0000
ROA not before:           Tue 29 Apr 2025 17:40:28 +0000
ROA not after:            Tue 28 Apr 2026 17:45:28 +0000
asID:                     267027
IP address blocks:        2804:4708:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 03:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a3:3e:e0:e1:48:39:d6:e5:26:ae:33:bf:7c:90:33:2a:dd:a6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
        Validity
            Not Before: Apr 29 17:40:28 2025 GMT
            Not After : Apr 28 17:45:28 2026 GMT
        Subject: CN=E3BD93592B43E04DE4145727D8EB60FF2FDCD719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:45:a8:01:1a:6e:4e:f5:52:9d:8a:73:08:af:
                    37:e0:48:3e:82:b3:f0:c9:7d:18:cd:52:69:60:08:
                    ad:22:32:73:81:2f:92:9d:80:53:6f:12:70:a2:0e:
                    9d:dc:1a:8d:55:b8:d1:6e:a8:53:bf:2a:ae:72:ee:
                    e2:50:25:23:df:18:58:86:24:81:a5:9a:67:02:64:
                    21:40:2e:4d:a6:ad:f1:0c:82:37:75:14:06:7d:63:
                    d1:5a:87:5d:e9:65:00:37:b9:63:f5:e1:74:10:a4:
                    66:ac:5a:12:5d:c3:08:3d:e3:ab:2e:60:02:3c:59:
                    cc:0f:ba:b6:9e:30:8e:af:a8:4f:c4:b0:71:53:fe:
                    b4:01:58:c0:53:a6:1c:46:1d:7c:05:5b:78:e6:55:
                    24:17:cf:0b:01:4c:dc:de:10:0f:82:36:13:f3:20:
                    c1:c3:14:2e:08:60:60:94:c3:53:57:97:f9:53:0d:
                    a3:1d:f3:f5:a0:5e:a9:45:9a:f8:83:34:7f:d5:2e:
                    14:6b:34:0d:14:bc:33:41:77:a3:b4:d8:7d:8e:fb:
                    2e:44:2c:b2:52:5b:c0:11:7c:be:b2:a9:17:bb:b3:
                    ad:fa:93:c1:ab:fa:49:2c:f8:bf:0c:d5:ea:63:7b:
                    f2:48:92:ea:f8:37:d6:9a:ff:51:0a:7a:c8:9d:c0:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BD:93:59:2B:43:E0:4D:E4:14:57:27:D8:EB:60:FF:2F:DC:D7:19
            X509v3 Authority Key Identifier:
                keyid:D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a383030303a3a2f33342d3334203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:d7:f8:e1:be:4e:48:96:bd:9d:f0:85:43:91:e6:b5:94:73:
         26:50:3e:12:88:f0:5c:da:ed:05:4e:55:ed:ae:7c:2e:cc:34:
         59:1c:3e:2f:4b:0f:a8:02:44:0d:cc:57:e9:65:02:ec:83:2c:
         a3:0f:4e:38:d7:20:97:5b:11:99:a6:29:23:24:42:b1:8e:56:
         c2:36:0f:45:14:b8:b1:4c:46:7c:61:bf:f6:fb:b0:23:8b:88:
         96:e2:75:1f:2c:02:63:5e:38:83:7c:49:f1:60:ac:ff:22:c6:
         36:b3:52:85:c0:ce:75:4b:0e:00:4a:2b:79:a9:1e:38:f7:70:
         54:52:fa:14:d5:28:02:45:cd:54:65:bf:80:7b:ec:c2:09:46:
         6d:b7:9d:58:90:76:23:ea:22:65:94:f2:1a:1d:3d:17:07:79:
         fe:d1:f0:57:f0:0f:de:b4:4c:4a:50:00:29:c1:87:2b:5a:f1:
         7e:a2:93:75:98:af:73:5c:47:2b:5c:a9:45:0b:6b:6a:f7:90:
         3a:8e:e1:73:92:a6:f3:27:de:8a:0a:5b:37:d7:77:53:a4:af:
         f5:c6:17:e1:de:90:d3:13:0e:0e:8f:26:33:9c:d9:7d:8b:13:
         34:22:2a:33:b2:2b:fd:0c:75:3d:d3:c2:8b:53:78:12:b4:f1:
         f2:0e:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:43:17 2025 by rpki-client