Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030323a3a2f34382d3438203d3e203238323532.roa
File:                     323830343a313534343a323030323a3a2f34382d3438203d3e203238323532.roa (raw, json)
Hash identifier:          fXq0ZrU3AqsErW+JJ1kdGpwmg+PUoryO0eBGTBgnRNA=
Subject key identifier:   58:1A:AA:4C:22:AE:AF:1C:42:25:EF:93:29:07:E4:2B:EB:E3:E5:42
Certificate issuer:       /CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
Certificate serial:       0E072CEAA9499D1C9C48CA2EA6283814A88A41D2
Authority key identifier: 16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030323a3a2f34382d3438203d3e203238323532.roa
Signing time:             Wed 09 Apr 2025 18:47:21 +0000
ROA not before:           Wed 09 Apr 2025 18:42:21 +0000
ROA not after:            Wed 08 Apr 2026 18:47:21 +0000
asID:                     28252
IP address blocks:        2804:1544:2002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl
                          rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 08:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:07:2c:ea:a9:49:9d:1c:9c:48:ca:2e:a6:28:38:14:a8:8a:41:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34
        Validity
            Not Before: Apr  9 18:42:21 2025 GMT
            Not After : Apr  8 18:47:21 2026 GMT
        Subject: CN=581AAA4C22AEAF1C4225EF932907E42BEBE3E542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:94:07:8e:45:17:4f:35:88:85:00:83:b7:1e:
                    c1:b4:ce:be:64:6a:85:46:4e:51:72:c1:09:8f:d3:
                    1b:c8:80:6c:de:df:64:74:bb:74:22:69:d5:70:b3:
                    65:43:88:80:80:9a:28:c7:6e:67:2f:b9:96:c2:2d:
                    3b:ff:c9:e1:dc:52:aa:89:6d:8a:71:1d:2e:0a:51:
                    dc:30:cb:57:7d:c1:af:19:87:bb:25:f9:14:f7:b2:
                    3d:97:a8:a6:8d:ca:66:be:f2:ee:76:50:c6:d5:12:
                    1a:4d:23:fe:0d:2d:c0:28:98:67:97:ed:9b:6f:16:
                    c4:d8:33:bc:ad:4f:eb:de:19:a5:6a:95:81:73:dd:
                    62:37:3e:b6:8d:1d:19:44:95:fb:6b:40:14:2c:41:
                    d6:83:12:ed:5b:bc:34:20:89:93:1d:2b:4c:5a:d2:
                    8a:65:88:7d:e5:f7:06:05:65:68:cf:67:5e:c5:df:
                    20:a6:4f:d5:11:50:2e:f3:52:d9:f1:04:6c:d8:d8:
                    4f:04:37:82:de:9f:75:3e:4f:f5:3d:a9:3e:68:ef:
                    59:9f:e6:04:d5:24:08:a9:b3:a7:29:d4:10:a8:fd:
                    3e:90:c8:1c:8e:77:fd:3c:74:f5:a7:7d:eb:c8:9d:
                    76:dc:9a:55:cb:70:b8:fe:04:bc:ee:2d:23:20:82:
                    0f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1A:AA:4C:22:AE:AF:1C:42:25:EF:93:29:07:E4:2B:EB:E3:E5:42
            X509v3 Authority Key Identifier:
                keyid:16:8E:2C:73:AA:7E:C9:DA:B3:06:D8:0B:5B:AA:4D:BE:C3:DC:AB:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/168E2C73AA7EC9DAB306D80B5BAA4DBEC3DCAB34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7xSoA4JGCxw4QQHxD2JCWYqAinnqB3eEFvqU4n3nvum3/0/323830343a313534343a323030323a3a2f34382d3438203d3e203238323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1544:2002::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:56:75:8a:3d:3b:8e:76:a1:69:3b:53:da:5b:0f:e3:81:0a:
         f9:bb:6f:89:4a:50:10:02:95:b0:f0:3c:4e:ca:d8:d1:e8:b6:
         16:e8:e5:99:8f:19:7a:94:e1:57:2b:c7:6f:b0:57:95:c5:09:
         73:a8:57:85:1c:dd:93:24:e1:e7:83:3c:61:b3:ee:91:8b:02:
         c7:f8:48:1b:d9:48:a8:57:dd:1b:e9:b9:36:64:42:ca:15:f1:
         2e:a7:79:ef:17:ee:1f:5d:37:38:fd:49:a5:b9:66:ea:cf:da:
         1c:18:4e:66:f9:7d:c5:30:af:41:a1:ea:d8:7a:7c:3e:90:a9:
         51:14:61:94:35:ca:c6:42:3e:7d:d4:e3:4f:32:2e:48:41:68:
         18:6e:2f:66:12:97:c2:a6:98:b6:ed:a8:f3:3c:1f:3e:06:25:
         64:fb:06:61:9b:a7:2b:a8:27:08:20:f2:79:a3:9d:ff:4d:fa:
         7a:ed:16:7a:fe:51:f3:a7:5c:65:ce:00:30:db:d2:12:c6:53:
         f4:c5:68:f1:03:80:9f:e4:bf:a3:d3:7b:dc:37:61:c0:b3:9d:
         1e:78:a2:a6:08:fd:ad:21:27:f2:b7:d9:d4:03:bb:a6:f0:9d:
         71:ce:df:fb:8a:e6:a5:ce:ce:8a:12:72:80:98:f4:9a:30:5b:
         1d:d0:70:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:30:25 2025 by rpki-client