Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/323830343a353035633a3a2f33322d313238203d3e20323638333834.roa
File:                     323830343a353035633a3a2f33322d313238203d3e20323638333834.roa (raw, json)
Hash identifier:          gCXcqtMMkTXLN6GWx/JQJbcRolTLyuFv3xrP8wIJQMk=
Subject key identifier:   DA:B1:4E:69:71:38:E1:EE:13:9C:FD:7F:23:11:8E:B4:8F:0E:DE:E4
Certificate issuer:       /CN=AB86F4E4258678DFA2BFCB281FF578C029DF9563
Certificate serial:       516450F07B73C86A9778CC3642A20CFB1BC1F1DF
Authority key identifier: AB:86:F4:E4:25:86:78:DF:A2:BF:CB:28:1F:F5:78:C0:29:DF:95:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/323830343a353035633a3a2f33322d313238203d3e20323638333834.roa
Signing time:             Mon 26 May 2025 20:01:11 +0000
ROA not before:           Mon 26 May 2025 19:56:11 +0000
ROA not after:            Mon 25 May 2026 20:01:11 +0000
asID:                     268384
IP address blocks:        2804:505c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.crl
                          rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 05:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:64:50:f0:7b:73:c8:6a:97:78:cc:36:42:a2:0c:fb:1b:c1:f1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB86F4E4258678DFA2BFCB281FF578C029DF9563
        Validity
            Not Before: May 26 19:56:11 2025 GMT
            Not After : May 25 20:01:11 2026 GMT
        Subject: CN=DAB14E697138E1EE139CFD7F23118EB48F0EDEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:71:c1:76:be:3b:4e:c0:27:8c:aa:85:d8:
                    98:54:7a:60:14:04:04:52:38:a1:e8:99:1d:5c:93:
                    ce:96:7e:0b:78:9c:a8:84:a3:2f:ef:36:0c:9b:35:
                    ef:85:bc:52:68:80:51:20:a6:a9:cc:95:a3:86:cd:
                    cf:eb:9a:2c:e9:5a:84:d8:f3:15:02:1b:b0:06:4d:
                    4b:7b:50:c9:11:ea:8a:34:9d:de:85:97:33:57:f8:
                    96:97:d2:ef:e6:a6:a3:19:2c:33:2e:b1:81:44:ee:
                    8f:9f:68:ff:cb:c1:2f:93:53:98:1d:c7:b5:67:b7:
                    d6:bb:c2:67:dd:c8:d6:16:87:eb:cb:e0:72:df:f4:
                    16:7c:ff:2a:34:48:2b:3f:86:e6:36:36:ae:91:8e:
                    39:67:09:7a:f0:de:56:66:e7:39:6e:bb:60:91:39:
                    f3:1f:f2:13:39:4c:55:6a:04:ed:73:9e:de:f5:68:
                    f7:aa:21:bb:f3:42:1a:1c:55:68:33:1f:ea:46:74:
                    54:7c:ce:a1:7d:df:3c:37:c0:64:de:77:f7:3b:fb:
                    fb:34:d0:17:c4:da:90:7d:8a:f1:b0:b3:5a:c0:53:
                    e6:aa:4c:18:71:e1:4d:a3:bf:12:52:65:27:51:ef:
                    9f:c5:b9:42:02:fe:7f:ee:bd:bd:69:a2:ce:2f:bf:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B1:4E:69:71:38:E1:EE:13:9C:FD:7F:23:11:8E:B4:8F:0E:DE:E4
            X509v3 Authority Key Identifier:
                keyid:AB:86:F4:E4:25:86:78:DF:A2:BF:CB:28:1F:F5:78:C0:29:DF:95:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/AB86F4E4258678DFA2BFCB281FF578C029DF9563.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB86F4E4258678DFA2BFCB281FF578C029DF9563.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Fe9kWcNp1ST8mGUcffAXBpaFuqLELDHX9U4W1MaKH3f/0/323830343a353035633a3a2f33322d313238203d3e20323638333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:505c::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:50:f8:ad:8b:36:f7:63:96:e7:56:6c:5c:a3:6f:63:4c:92:
         44:c7:57:d4:b5:99:71:56:8e:5d:21:ea:fc:2d:46:d1:c7:d6:
         49:4a:da:66:11:4e:1e:3c:39:e3:78:78:2d:03:46:87:bc:84:
         af:89:fc:2f:4f:52:19:5b:2c:bb:31:4b:80:fd:30:03:ce:dc:
         f3:8f:5d:59:29:67:12:70:9f:97:46:f1:46:b4:2c:f3:9d:8b:
         7a:83:94:bf:31:d9:03:ce:f0:74:23:23:b9:f0:90:64:00:3c:
         d4:5f:16:2d:4b:61:63:2f:87:f1:d0:63:0b:b3:85:66:ad:39:
         97:83:9b:b4:64:b7:85:6b:82:84:3a:e2:52:5a:6f:a1:96:6f:
         6c:7a:bb:0c:17:38:8b:05:9a:a1:73:d7:60:3b:e7:82:e2:16:
         7e:f8:ee:ef:95:dc:92:6e:81:59:f7:1c:c4:46:02:8c:71:6d:
         78:6d:78:4b:9b:ba:fc:bd:61:9c:9b:dc:aa:e1:b3:2e:d5:8a:
         b4:62:a9:3d:ca:64:a5:ed:d7:63:3d:a0:bc:81:76:e6:bf:ab:
         64:f5:05:92:98:6f:8f:8c:8c:32:86:8d:06:0b:81:e2:4f:98:
         d5:e4:1f:ec:21:a9:95:56:d0:cd:bc:fb:e5:44:ab:fb:6c:fe:
         c8:65:27:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:04:48 2025 by rpki-client