Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa
File:                     323830343a356161343a3a2f33322d313238203d3e20323638373836.roa (raw, json)
Hash identifier:          7XEW13QW/0ZR8K2lHMWCWLO5uByz+9LZry6MpiWpwCk=
Subject key identifier:   92:E6:65:F9:EF:C6:8D:86:01:88:6D:7B:A5:B0:1B:D0:8D:E0:21:1F
Certificate issuer:       /CN=A8A952B21604B5039520204827A8ABA0842CBF36
Certificate serial:       77729C84F72F4F5E3DB876C81AD2910EF6080854
Authority key identifier: A8:A9:52:B2:16:04:B5:03:95:20:20:48:27:A8:AB:A0:84:2C:BF:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8A952B21604B5039520204827A8ABA0842CBF36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa
Signing time:             Wed 30 Apr 2025 20:15:38 +0000
ROA not before:           Wed 30 Apr 2025 20:10:38 +0000
ROA not after:            Wed 29 Apr 2026 20:15:38 +0000
asID:                     268786
IP address blocks:        2804:5aa4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.crl
                          rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8A952B21604B5039520204827A8ABA0842CBF36.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 13:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:72:9c:84:f7:2f:4f:5e:3d:b8:76:c8:1a:d2:91:0e:f6:08:08:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8A952B21604B5039520204827A8ABA0842CBF36
        Validity
            Not Before: Apr 30 20:10:38 2025 GMT
            Not After : Apr 29 20:15:38 2026 GMT
        Subject: CN=92E665F9EFC68D8601886D7BA5B01BD08DE0211F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9b:05:0c:41:d6:1f:41:d7:ea:fc:e4:1e:14:
                    ad:49:fe:81:78:bb:ae:31:c5:a0:68:e4:b2:ea:ea:
                    50:e9:b9:bd:7f:81:14:08:7d:a0:8b:7b:d6:c5:d8:
                    65:f1:21:9f:46:6c:ba:6e:93:3e:bf:9d:a2:fb:2f:
                    f9:37:c1:26:c0:35:39:57:4a:1e:65:cf:ce:69:58:
                    1c:d8:fb:03:4d:89:d5:10:fc:06:91:53:e9:ff:e4:
                    01:38:66:86:d5:5e:7c:fe:70:44:31:d0:36:39:50:
                    28:96:cf:7c:4f:0a:a5:ec:05:27:b5:d8:1f:5c:50:
                    6c:eb:b5:a3:7e:fb:9e:c8:7f:51:72:2a:cd:96:9b:
                    d8:2f:b6:4f:7d:7b:8f:9a:1a:5b:4f:e6:21:bd:a2:
                    a2:bc:3c:9d:aa:80:db:a7:bf:c2:f4:94:fc:17:b8:
                    41:12:be:0d:f4:ed:e8:60:51:14:fd:de:c4:36:79:
                    64:76:6b:c8:2f:c2:b8:99:b8:e4:1b:91:23:6b:05:
                    53:b2:43:c0:ea:3b:1b:68:a5:96:4c:ea:ad:d4:24:
                    e2:9f:20:1d:1b:02:0a:02:11:59:1b:21:d4:a4:cc:
                    ae:06:ee:3b:a0:93:04:0f:a0:70:46:ea:88:73:fe:
                    d4:cf:0e:3c:36:45:73:b1:5e:71:a5:b6:3f:e8:ed:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E6:65:F9:EF:C6:8D:86:01:88:6D:7B:A5:B0:1B:D0:8D:E0:21:1F
            X509v3 Authority Key Identifier:
                keyid:A8:A9:52:B2:16:04:B5:03:95:20:20:48:27:A8:AB:A0:84:2C:BF:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/A8A952B21604B5039520204827A8ABA0842CBF36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8A952B21604B5039520204827A8ABA0842CBF36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/323830343a356161343a3a2f33322d313238203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5aa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:6d:3e:f8:d8:33:52:d5:ea:03:67:8e:8d:77:ca:2a:0c:e1:
         6f:f8:95:6d:2a:ae:4d:7a:ac:cd:5d:10:78:2c:c7:1e:f9:80:
         06:d7:7c:0a:46:68:db:11:a4:2a:35:f5:7a:4e:bc:bc:c9:ab:
         ed:c7:49:64:19:55:f9:24:f4:81:3e:e4:c7:2d:bf:1a:98:67:
         ff:0c:64:21:d9:7a:f6:14:06:69:d1:74:f5:cc:af:0f:92:e8:
         71:87:3f:09:bd:64:ba:59:8c:57:5e:7d:b7:98:4f:2b:1f:7b:
         13:fb:74:df:eb:10:01:59:5c:54:2d:ef:d1:0e:1b:7c:12:c6:
         da:4a:2b:4e:13:b6:e3:bc:0d:ef:bb:3f:b2:45:f7:8e:9a:58:
         d7:9a:4a:28:22:ed:1d:63:0d:3a:70:12:6c:69:3d:5b:64:3c:
         70:27:a0:25:f4:21:23:8b:77:86:41:fe:b9:a3:30:dd:ab:27:
         07:87:c6:54:be:39:37:5b:c0:0a:d0:e1:b3:2d:91:c5:20:79:
         88:1f:2b:83:82:d9:9c:10:84:07:30:43:76:56:0f:27:74:db:
         2f:e7:c7:fd:38:8e:be:6c:ef:31:30:40:18:78:e9:a3:d2:5b:
         c0:e0:1e:87:d2:c2:72:55:39:81:fc:79:68:4b:84:f4:7e:95:
         b9:f1:3f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:04:05 2025 by rpki-client