Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33342d3334203d3e20323637303237.roa
File:                     323830343a343730383a3a2f33342d3334203d3e20323637303237.roa (raw, json)
Hash identifier:          /hPGaGgULd88vJ0pIVA7BTQvIRv6dsWSY7rbP6KDh1I=
Subject key identifier:   50:DC:46:BE:CD:E9:0C:24:CF:86:AC:8E:F7:4C:14:A0:9E:DD:02:75
Certificate issuer:       /CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
Certificate serial:       5FEA61850221A1AB3B0512E5C046BF56B767298A
Authority key identifier: D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33342d3334203d3e20323637303237.roa
Signing time:             Tue 29 Apr 2025 17:45:26 +0000
ROA not before:           Tue 29 Apr 2025 17:40:26 +0000
ROA not after:            Tue 28 Apr 2026 17:45:26 +0000
asID:                     267027
IP address blocks:        2804:4708::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl
                          rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 06 May 2025 03:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ea:61:85:02:21:a1:ab:3b:05:12:e5:c0:46:bf:56:b7:67:29:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
        Validity
            Not Before: Apr 29 17:40:26 2025 GMT
            Not After : Apr 28 17:45:26 2026 GMT
        Subject: CN=50DC46BECDE90C24CF86AC8EF74C14A09EDD0275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:70:76:bb:f5:cb:8c:fb:4a:b8:0b:32:d2:c4:
                    67:b1:ff:c8:7d:82:26:10:86:fd:d6:b2:71:ea:9f:
                    b5:4a:79:58:b2:59:aa:c1:0a:59:b9:41:68:64:a5:
                    0a:6e:5b:c6:2c:b3:7e:bb:b6:10:33:15:d2:7a:67:
                    09:65:9e:18:f1:8e:c4:d3:86:94:e6:3f:05:68:bd:
                    fa:ea:02:c2:8e:eb:3b:95:bb:68:c6:51:3e:92:e4:
                    df:cb:ff:28:45:83:56:c1:13:cb:e1:dd:6f:dc:78:
                    76:f8:43:3d:a4:21:d2:c7:5b:d3:d3:26:e3:32:3b:
                    8c:4d:fb:f7:b0:17:5f:e7:b8:b2:4b:69:ed:93:a8:
                    03:e9:70:62:13:6b:25:12:61:c1:b1:c8:50:8a:59:
                    6e:db:7c:a0:5b:8a:2b:6f:b7:1c:21:39:0e:35:df:
                    b1:dc:6f:ac:86:df:e4:f2:68:ba:67:72:b8:67:45:
                    b7:fd:5a:41:c7:80:6e:9a:05:51:e9:20:e7:62:18:
                    8e:60:f9:d3:b2:63:90:48:78:19:c2:34:01:fc:b4:
                    2c:8f:39:2e:b2:9e:fb:56:d4:5c:01:13:3b:02:47:
                    62:c4:88:00:dd:c4:61:70:43:34:a8:cf:fe:44:da:
                    bb:fe:31:8f:83:d2:5d:60:53:55:25:af:4e:73:06:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DC:46:BE:CD:E9:0C:24:CF:86:AC:8E:F7:4C:14:A0:9E:DD:02:75
            X509v3 Authority Key Identifier:
                keyid:D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33342d3334203d3e20323637303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4708::/34

    Signature Algorithm: sha256WithRSAEncryption
         be:39:12:34:73:23:b5:b7:e3:c8:f8:57:03:ca:f3:73:75:dd:
         7f:41:ad:17:a0:f5:80:f9:fe:f7:99:b3:35:06:a6:18:81:f4:
         a6:ff:e4:80:59:fd:84:30:8f:cc:60:56:ab:1a:d9:67:0c:48:
         c4:54:b2:9d:3e:30:17:7e:21:a9:08:30:15:e1:30:ae:4c:c9:
         f8:57:6e:79:51:e0:f4:f2:7b:36:fa:30:13:f4:17:ed:7a:65:
         e8:10:b1:36:ed:48:b2:6e:3a:ca:76:20:91:5f:4d:20:ac:3c:
         64:fe:77:c6:47:40:90:da:91:49:f3:96:4e:26:d4:20:c6:ad:
         35:ca:dc:c7:44:f3:66:f1:04:3d:ce:05:16:70:33:4b:37:10:
         db:58:55:b9:7f:01:c2:ff:7b:01:5f:c6:0c:b1:91:d4:6c:22:
         c1:72:cd:1b:f1:6f:68:8c:30:56:3a:db:ad:44:47:23:ed:be:
         06:eb:0e:48:c4:a4:9b:d9:f7:1b:2a:00:00:cb:5c:c3:5e:0c:
         a6:7b:d6:49:a8:26:14:d1:1d:5b:56:f9:c9:c1:dc:33:f7:dd:
         69:9e:98:a8:0d:67:57:ad:c4:2e:00:94:3c:47:6d:74:90:3c:
         fc:1b:fb:4d:86:06:f3:b2:6d:cf:17:a6:d8:d6:20:74:a8:e9:
         a9:6e:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:05:30 2025 by rpki-client