Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/323830343a373939343a3a2f33322d3438203d3e20323731333134.roa
File:                     323830343a373939343a3a2f33322d3438203d3e20323731333134.roa (raw, json)
Hash identifier:          trSc/Snz4HJiwrwj7ICVdEChHI9Szqse05LvGWpWTpw=
Subject key identifier:   74:B9:67:82:BA:E5:3A:96:CF:10:52:DD:9D:55:63:F5:D3:75:39:17
Certificate issuer:       /CN=88BA7580557AA3113C46B2EE567F5D1F9F9C8197
Certificate serial:       706E5CC3929C7EAAC99DCA5F32FD10273011747F
Authority key identifier: 88:BA:75:80:55:7A:A3:11:3C:46:B2:EE:56:7F:5D:1F:9F:9C:81:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/323830343a373939343a3a2f33322d3438203d3e20323731333134.roa
Signing time:             Wed 05 Mar 2025 19:13:57 +0000
ROA not before:           Wed 05 Mar 2025 19:08:57 +0000
ROA not after:            Wed 04 Mar 2026 19:13:57 +0000
asID:                     271314
IP address blocks:        2804:7994::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.crl
                          rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 23:50:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6e:5c:c3:92:9c:7e:aa:c9:9d:ca:5f:32:fd:10:27:30:11:74:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88BA7580557AA3113C46B2EE567F5D1F9F9C8197
        Validity
            Not Before: Mar  5 19:08:57 2025 GMT
            Not After : Mar  4 19:13:57 2026 GMT
        Subject: CN=74B96782BAE53A96CF1052DD9D5563F5D3753917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fa:22:f5:83:72:de:b6:f6:af:22:c2:c6:f7:
                    ae:98:d6:39:58:41:08:cf:2e:81:20:09:3c:78:f5:
                    92:a2:93:54:d1:8c:18:e2:f9:4d:73:a9:0d:71:c5:
                    0c:49:a0:4c:49:6a:12:87:e0:3d:33:43:fc:3d:b3:
                    d8:20:63:71:ae:63:46:ab:76:7e:d5:08:9a:9d:72:
                    4a:00:cb:9e:ad:e3:58:4b:6f:a6:86:ab:cd:50:bb:
                    a0:c6:fe:49:f7:cc:75:9e:46:b3:52:2d:43:25:71:
                    5b:72:50:a5:98:0c:2f:48:be:cc:88:2d:94:2d:7c:
                    2b:ba:80:69:e9:49:c0:9b:96:d6:23:7b:70:44:d1:
                    87:62:eb:ac:6d:d9:18:fc:0c:bd:5e:2f:0e:26:50:
                    27:4c:13:00:0e:78:28:6e:a9:a2:c7:fc:7f:5a:05:
                    13:fc:c6:e4:48:aa:6d:a3:f0:dc:ed:6b:60:9a:58:
                    f6:cd:5f:8b:27:83:09:74:99:2d:c0:e0:b6:a8:4f:
                    2f:73:ee:ce:89:42:42:f5:ed:06:0b:67:24:68:0e:
                    95:49:f7:45:64:c0:91:d4:32:18:93:c5:8f:f2:29:
                    9e:67:a9:8e:09:6c:2c:c1:15:c2:fc:5b:fe:6d:3b:
                    e4:f8:f6:59:38:b1:65:7c:3b:db:a4:a2:46:61:f5:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B9:67:82:BA:E5:3A:96:CF:10:52:DD:9D:55:63:F5:D3:75:39:17
            X509v3 Authority Key Identifier:
                keyid:88:BA:75:80:55:7A:A3:11:3C:46:B2:EE:56:7F:5D:1F:9F:9C:81:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88BA7580557AA3113C46B2EE567F5D1F9F9C8197.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9NobCjzpJjYaq7dxygh7rB31Wn5jyF3ybc4uQc9dWe65/1/323830343a373939343a3a2f33322d3438203d3e20323731333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7994::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:56:c6:b3:71:6b:07:5c:b1:d2:61:24:65:ff:b4:fb:5f:1f:
         d9:a8:c5:d2:77:e4:72:38:0a:0d:b8:f8:72:4e:79:6b:1a:45:
         90:c7:fd:9b:6a:0f:53:3c:f8:1c:18:57:c2:d0:09:8e:53:25:
         2e:63:f6:37:0c:cb:1e:40:7c:31:80:90:28:8f:0a:3e:58:16:
         86:5b:36:a9:15:40:ed:5d:cb:bd:bb:49:40:0f:0a:dc:23:77:
         06:fa:be:d4:7a:c9:de:dd:14:76:de:67:e0:a3:dd:05:12:1d:
         71:b8:9b:b1:b3:a7:a1:a4:0c:c0:16:5c:dd:70:68:a2:a1:4b:
         b8:b1:0f:6f:72:5d:1f:ea:15:7e:5a:e8:e0:a2:8f:66:15:13:
         58:a6:58:fc:27:e7:db:d3:59:be:95:d7:77:17:a7:0f:75:a5:
         5f:db:72:a8:2f:7b:34:14:fd:5d:18:e3:74:21:b2:50:f2:3f:
         64:1e:e6:0e:a2:2d:ea:29:d4:04:e1:60:90:42:e2:6e:e0:ec:
         79:f7:12:41:54:fa:ad:95:38:09:24:6e:d2:04:40:14:16:0d:
         42:e9:fa:2e:bc:17:02:2f:45:a5:56:56:82:3b:05:39:47:c2:
         6e:6c:db:9e:57:99:c9:18:2a:72:eb:f1:d2:80:c9:23:05:f2:
         6d:5a:ba:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:16:47 2025 by rpki-client