Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/323830343a343230383a3a2f33322d313238203d3e20323637343733.roa
File:                     323830343a343230383a3a2f33322d313238203d3e20323637343733.roa (raw, json)
Hash identifier:          sau3ZA+uFSmmFUIuKDRztWOtW+waliROsZZFvV4FudU=
Subject key identifier:   05:41:F1:BB:9F:27:A3:35:3D:E9:4D:C4:C3:E9:FE:33:04:80:0A:AE
Certificate issuer:       /CN=0F83E7EB4984A7127F8D91AAEBA5AD0057767C58
Certificate serial:       313B191091B8D4480A6C913BE8227FE3F7C3566A
Authority key identifier: 0F:83:E7:EB:49:84:A7:12:7F:8D:91:AA:EB:A5:AD:00:57:76:7C:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/323830343a343230383a3a2f33322d313238203d3e20323637343733.roa
Signing time:             Wed 30 Apr 2025 18:47:05 +0000
ROA not before:           Wed 30 Apr 2025 18:42:05 +0000
ROA not after:            Wed 29 Apr 2026 18:47:05 +0000
asID:                     267473
IP address blocks:        2804:4208::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.crl
                          rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 08:25:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:3b:19:10:91:b8:d4:48:0a:6c:91:3b:e8:22:7f:e3:f7:c3:56:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F83E7EB4984A7127F8D91AAEBA5AD0057767C58
        Validity
            Not Before: Apr 30 18:42:05 2025 GMT
            Not After : Apr 29 18:47:05 2026 GMT
        Subject: CN=0541F1BB9F27A3353DE94DC4C3E9FE3304800AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:4e:cc:ca:de:88:84:57:3f:f0:9e:8e:6a:
                    d5:b6:93:f0:0b:59:0e:a1:0b:45:10:43:dd:84:c9:
                    76:67:e6:16:40:1e:a5:d0:18:c8:95:12:43:93:9e:
                    17:98:79:6f:64:f7:73:95:7c:63:ec:76:15:ed:12:
                    30:1d:b7:03:1e:f1:e0:e6:47:fa:53:1e:69:ff:03:
                    44:5a:fd:3a:00:08:ac:21:d7:a7:4e:3c:b6:d3:11:
                    63:7b:69:5d:88:b9:81:72:fb:3b:5d:e9:5e:ef:15:
                    0f:21:21:0f:f2:57:a3:0e:71:74:21:98:88:40:19:
                    24:f4:28:12:69:6b:81:4c:be:ee:9e:1f:d5:15:4c:
                    44:ba:47:b4:47:be:da:3f:63:0d:0a:8d:f8:c3:b2:
                    03:fe:11:b4:e3:d5:12:c9:d2:ef:f9:37:c6:6b:a5:
                    c3:fc:5f:a7:2b:4e:d0:c6:bb:73:33:e2:e7:cd:9a:
                    a4:eb:84:19:e4:a2:b6:b1:bc:3e:56:73:c3:ee:74:
                    36:8b:4e:bb:e6:0c:ee:2e:cc:75:cf:df:24:b2:df:
                    c4:d1:59:63:fd:a3:a6:b9:42:85:42:d9:89:83:90:
                    6d:2e:46:83:af:05:c3:53:4d:64:65:f1:ea:7f:f2:
                    90:89:41:cf:98:99:a4:b2:55:75:91:c2:a5:90:cd:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:41:F1:BB:9F:27:A3:35:3D:E9:4D:C4:C3:E9:FE:33:04:80:0A:AE
            X509v3 Authority Key Identifier:
                keyid:0F:83:E7:EB:49:84:A7:12:7F:8D:91:AA:EB:A5:AD:00:57:76:7C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F83E7EB4984A7127F8D91AAEBA5AD0057767C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91SP7iwHK4PbjQHTLjX3JAvJrcKnwvdKeLbtXXVuFcpn/0/323830343a343230383a3a2f33322d313238203d3e20323637343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4208::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:f2:6a:bf:cf:ad:f3:e4:5a:fd:81:e7:af:30:ed:2b:e9:2e:
         0f:3b:fd:ea:c4:c2:bf:08:18:63:ec:0b:b0:f8:cb:43:09:79:
         45:24:10:5f:1e:23:9d:73:75:bd:f4:81:c1:e1:e8:ad:13:5d:
         d2:13:e5:19:d3:07:a2:4d:13:9c:a4:48:2b:c5:84:0c:ec:b2:
         a1:04:97:de:cb:d9:1d:4b:9b:b6:97:33:a1:de:a8:c3:fc:34:
         f3:cc:db:e2:49:86:93:56:26:61:e7:4e:c2:72:05:aa:1e:e1:
         4d:5e:d5:a2:0c:59:ad:67:7f:55:37:5e:f7:88:f9:03:75:77:
         cc:a6:70:c4:3e:49:34:45:7e:36:9f:d2:b7:fa:99:03:88:de:
         ed:ba:16:d9:b1:90:44:b6:dc:f0:3f:4e:58:f6:05:2a:f5:6d:
         10:a0:2d:f1:f7:5a:0e:bb:62:2e:83:83:7c:01:95:e0:29:f0:
         33:04:e1:f5:f8:84:1d:01:f9:f7:0e:d4:85:96:b8:09:cb:10:
         16:37:01:fa:65:c7:b6:15:92:96:e2:2f:bd:d6:55:8d:87:94:
         52:82:6f:af:f2:2b:a2:58:83:91:73:57:df:8c:77:3f:fa:a6:
         a7:35:fe:a3:c5:ee:08:14:c3:71:db:e9:b6:a9:22:87:e0:9d:
         35:10:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:49:38 2025 by rpki-client