Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          Z+gl8mHZDPkty55Q+eMapovpHBvadgF8C6RtmOi3Kjw=
Subject key identifier:   C0:6E:3F:AE:BB:82:32:38:1E:E5:4E:7D:B6:41:80:2A:96:52:FC:03
Certificate issuer:       /CN=5FD5F562B3272E44A51282911986EA038C5D6919
Certificate serial:       3A0043B2B5FF2E549D68945BFD80D321173719AD
Authority key identifier: 5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 22 Apr 2025 21:00:02 +0000
ROA not before:           Tue 22 Apr 2025 20:55:02 +0000
ROA not after:            Tue 21 Apr 2026 21:00:02 +0000
asID:                     262687
IP address blocks:        2804:385c:a200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 08 May 2025 13:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:00:43:b2:b5:ff:2e:54:9d:68:94:5b:fd:80:d3:21:17:37:19:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FD5F562B3272E44A51282911986EA038C5D6919
        Validity
            Not Before: Apr 22 20:55:02 2025 GMT
            Not After : Apr 21 21:00:02 2026 GMT
        Subject: CN=3082010A0282010100E08FF20E661FA1920A5F3BE8A06F7EBCCD13D76210ED9F7648A344CB4D1774BAAD060BAD113C69F0E07C10811F74250A7D889792DA9351DAE7E0BFEB26C8BEED648C9A63B6AFE8E84B411CB94AFFE2CBA13DB392EC11CB53B6085E76D48E13A75689D082B3BEB0D4643F53C2508ABB46C3385216E1A6355BF5A2E1F8C73E7D363C46B734851026FCE2562D8948512C774AEAED9E6993F32776882616859644C6449482657ECAEA37D9A332133BDEEA1B90939848753CF4C03DE03685E93BE6495501CD0B463966538F51DC71AB2D14C2DAD117CB51A635B9B88B20BD113BF2420B608BEBBFD7201B8E622B548289477747F79F262ED0FC641013B10C872E35FB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:f2:0e:66:1f:a1:92:0a:5f:3b:e8:a0:6f:
                    7e:bc:cd:13:d7:62:10:ed:9f:76:48:a3:44:cb:4d:
                    17:74:ba:ad:06:0b:ad:11:3c:69:f0:e0:7c:10:81:
                    1f:74:25:0a:7d:88:97:92:da:93:51:da:e7:e0:bf:
                    eb:26:c8:be:ed:64:8c:9a:63:b6:af:e8:e8:4b:41:
                    1c:b9:4a:ff:e2:cb:a1:3d:b3:92:ec:11:cb:53:b6:
                    08:5e:76:d4:8e:13:a7:56:89:d0:82:b3:be:b0:d4:
                    64:3f:53:c2:50:8a:bb:46:c3:38:52:16:e1:a6:35:
                    5b:f5:a2:e1:f8:c7:3e:7d:36:3c:46:b7:34:85:10:
                    26:fc:e2:56:2d:89:48:51:2c:77:4a:ea:ed:9e:69:
                    93:f3:27:76:88:26:16:85:96:44:c6:44:94:82:65:
                    7e:ca:ea:37:d9:a3:32:13:3b:de:ea:1b:90:93:98:
                    48:75:3c:f4:c0:3d:e0:36:85:e9:3b:e6:49:55:01:
                    cd:0b:46:39:66:53:8f:51:dc:71:ab:2d:14:c2:da:
                    d1:17:cb:51:a6:35:b9:b8:8b:20:bd:11:3b:f2:42:
                    0b:60:8b:eb:bf:d7:20:1b:8e:62:2b:54:82:89:47:
                    77:47:f7:9f:26:2e:d0:fc:64:10:13:b1:0c:87:2e:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6E:3F:AE:BB:82:32:38:1E:E5:4E:7D:B6:41:80:2A:96:52:FC:03
            X509v3 Authority Key Identifier:
                keyid:5F:D5:F5:62:B3:27:2E:44:A5:12:82:91:19:86:EA:03:8C:5D:69:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/5FD5F562B3272E44A51282911986EA038C5D6919.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FD5F562B3272E44A51282911986EA038C5D6919.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/1/323830343a333835633a613230303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:a200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:ed:37:b6:0c:92:31:37:02:30:da:19:68:e5:e5:16:9c:
         8b:a9:7f:79:8a:b7:6d:e4:b2:7a:00:d0:8d:9e:2e:54:c8:aa:
         6e:61:98:b5:83:08:f5:ba:bc:32:39:99:fe:27:1a:8c:d9:f3:
         c6:79:1e:c8:69:2f:7e:ad:a2:45:4e:43:ee:ac:40:68:4a:03:
         ba:d2:4b:e8:eb:4a:20:1c:8c:79:0d:ea:6f:3e:16:a2:98:40:
         d4:de:00:83:76:c5:00:bb:eb:88:95:13:01:4e:ae:17:ed:de:
         39:6f:bc:15:7a:b0:d2:e2:12:17:d5:44:84:c3:1d:ff:1a:ef:
         a6:a0:9b:05:9e:15:52:39:ee:47:d7:5f:26:f8:c9:b5:84:09:
         c8:fc:5f:19:41:6c:8c:70:25:b7:08:25:af:93:3e:87:fe:a8:
         3f:1a:8f:2e:60:96:34:cc:83:96:d9:56:70:9a:7f:6e:ae:37:
         a6:5a:d7:a1:94:4c:33:1f:52:6e:63:19:92:38:b5:5f:f2:0d:
         7c:41:9b:af:f3:56:c8:6e:b3:fa:0b:98:a0:c7:71:dd:db:ce:
         48:96:37:c0:49:8f:ca:91:f6:49:e1:e8:2e:70:ea:db:a5:7e:
         34:1a:a0:40:16:8e:3e:30:f4:eb:6c:05:0b:a4:f7:b9:09:d2:
         83:f4:f6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:57:58 2025 by rpki-client