Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/323830343a376562633a3a2f33322d313238203d3e20323731363434.roa
File:                     323830343a376562633a3a2f33322d313238203d3e20323731363434.roa (raw, json)
Hash identifier:          awKApxcU3/DtnCBqdvCgmgO9MlwvI40k5WzdBQDk/NE=
Subject key identifier:   36:C1:F9:39:26:57:4B:0F:77:A9:27:14:42:FB:1F:DC:28:EF:DD:1E
Certificate issuer:       /CN=2BD48FEDF99502AA90CEB1258214DB7F00A373AB
Certificate serial:       5463275A3253A6CB76406D758F9FDFEA50FDA289
Authority key identifier: 2B:D4:8F:ED:F9:95:02:AA:90:CE:B1:25:82:14:DB:7F:00:A3:73:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/323830343a376562633a3a2f33322d313238203d3e20323731363434.roa
Signing time:             Tue 27 May 2025 20:57:12 +0000
ROA not before:           Tue 27 May 2025 20:52:12 +0000
ROA not after:            Tue 26 May 2026 20:57:12 +0000
asID:                     271644
IP address blocks:        2804:7ebc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.crl
                          rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 20:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:63:27:5a:32:53:a6:cb:76:40:6d:75:8f:9f:df:ea:50:fd:a2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD48FEDF99502AA90CEB1258214DB7F00A373AB
        Validity
            Not Before: May 27 20:52:12 2025 GMT
            Not After : May 26 20:57:12 2026 GMT
        Subject: CN=36C1F93926574B0F77A9271442FB1FDC28EFDD1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:14:7a:b4:47:bd:66:6e:e8:33:2d:46:2b:
                    f3:fd:74:36:5e:a1:2e:0a:e7:5f:bb:d2:b5:b8:53:
                    ed:2b:18:16:8c:e0:d0:50:85:f7:eb:97:8f:1a:35:
                    2f:18:22:07:4d:80:05:fc:21:95:2a:4a:a2:10:38:
                    5e:96:5b:76:67:72:c6:db:46:30:f9:e8:9c:ad:e8:
                    eb:29:de:df:38:80:c6:54:c8:a5:87:fe:3d:19:ea:
                    0a:45:42:61:c8:7b:17:85:79:37:52:29:fc:06:7d:
                    21:9b:08:73:dd:e7:56:f5:7d:d5:b8:7c:70:b2:80:
                    fe:80:15:66:81:99:af:69:01:bf:98:4a:00:68:2e:
                    3d:c4:15:a3:3d:1c:49:96:dc:ad:ca:e2:d0:1c:27:
                    f3:00:87:df:73:93:fa:1e:24:ac:c0:3a:85:bb:67:
                    9c:a1:09:65:82:88:21:80:b9:e0:98:3e:f5:69:fc:
                    ac:a3:21:12:75:a2:eb:0a:57:94:c0:f4:89:e2:8a:
                    56:54:1a:39:4d:ce:52:79:0e:7b:6d:49:e6:55:5c:
                    34:a2:5b:d8:a7:8b:f9:ba:2c:04:91:e1:22:da:ff:
                    f4:ce:18:fa:cb:43:f5:33:09:16:6a:18:ff:ff:a0:
                    98:14:fe:e6:05:7c:ca:a5:14:52:62:ea:c8:c0:15:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C1:F9:39:26:57:4B:0F:77:A9:27:14:42:FB:1F:DC:28:EF:DD:1E
            X509v3 Authority Key Identifier:
                keyid:2B:D4:8F:ED:F9:95:02:AA:90:CE:B1:25:82:14:DB:7F:00:A3:73:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD48FEDF99502AA90CEB1258214DB7F00A373AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7T51mrW3foQi5vJibr1zhiseizBULjN8YKXomHczvbdL/0/323830343a376562633a3a2f33322d313238203d3e20323731363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ebc::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:93:81:30:ce:fe:fc:8b:34:07:14:3d:21:30:79:c9:36:f9:
         a6:d6:9a:2d:b3:80:52:ce:35:cd:21:b6:13:e2:45:aa:c5:23:
         9c:43:cb:be:0e:3f:2f:0f:8a:8c:60:d4:d5:6f:7a:95:b1:b4:
         19:80:8d:a3:5c:e8:ce:58:2e:b7:e2:9d:64:2f:2a:bc:18:1d:
         19:ec:47:df:b7:0f:b8:10:63:f3:4f:14:38:ea:1a:a3:a2:ed:
         81:15:fd:82:8e:24:e8:6d:e5:c4:c0:32:1a:1d:b9:4f:35:94:
         19:44:41:59:a4:92:4f:02:bb:aa:dd:f9:cc:b9:88:8e:b9:84:
         83:c0:4d:3f:f5:96:5e:c5:ae:e6:fc:94:bc:e2:d5:88:71:8c:
         75:7b:ff:b6:01:1d:57:f8:41:56:89:e8:97:bc:11:64:c3:4b:
         5e:16:e6:b0:b5:87:37:02:6d:73:db:b2:e8:d7:d6:84:7d:62:
         ad:e2:47:ed:7b:3a:74:20:5b:42:22:f8:64:a2:57:ba:02:2c:
         0a:86:77:df:b0:0c:39:0a:c5:c9:85:81:58:d9:4b:bf:d7:3b:
         80:0a:a7:eb:71:22:1c:73:3a:8b:20:3c:d2:ef:19:f7:81:f5:
         80:db:98:72:07:02:46:4c:5c:c5:b0:d7:3e:74:31:3a:fa:0e:
         7a:56:0e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:49:17 2025 by rpki-client