Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/323830343a353864383a3a2f33322d313238203d3e20323638313533.roa
File:                     323830343a353864383a3a2f33322d313238203d3e20323638313533.roa (raw, json)
Hash identifier:          mx0vkYOQMZWdzbKqGQFkGVwKZqeeZJFSr02Zit/ZTrM=
Subject key identifier:   74:EC:94:30:AD:14:11:9C:14:DC:C3:2D:78:F4:F1:77:23:60:55:61
Certificate issuer:       /CN=5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F
Certificate serial:       06BDE38DCB6A1C6AF23CFFE61277A2232EF9F1C8
Authority key identifier: 5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/323830343a353864383a3a2f33322d313238203d3e20323638313533.roa
Signing time:             Wed 30 Apr 2025 15:58:22 +0000
ROA not before:           Wed 30 Apr 2025 15:53:22 +0000
ROA not after:            Wed 29 Apr 2026 15:58:22 +0000
asID:                     268153
IP address blocks:        2804:58d8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.crl
                          rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 18:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:bd:e3:8d:cb:6a:1c:6a:f2:3c:ff:e6:12:77:a2:23:2e:f9:f1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F
        Validity
            Not Before: Apr 30 15:53:22 2025 GMT
            Not After : Apr 29 15:58:22 2026 GMT
        Subject: CN=74EC9430AD14119C14DCC32D78F4F17723605561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:8a:a9:8a:a0:82:47:d9:ed:5f:20:1d:92:
                    a0:f1:b5:43:f7:5c:b1:6f:ab:8e:e7:3a:b6:46:32:
                    ab:18:58:60:ba:a5:a8:ee:17:63:42:9d:03:3c:98:
                    32:f5:37:3d:73:c8:04:34:e8:c0:34:97:64:b4:b6:
                    05:ac:71:0c:f9:99:13:33:0a:5c:1a:90:a2:93:0b:
                    75:90:2a:69:2b:03:00:e7:40:86:67:b9:51:42:24:
                    60:0d:84:12:81:fb:01:8f:53:bd:33:99:20:9d:4a:
                    b2:d5:31:bb:55:d5:45:02:41:68:62:4c:c8:87:0d:
                    b2:8d:d2:f2:7c:9d:c9:52:89:46:c8:d5:de:45:d8:
                    bd:67:c7:3b:6d:c2:e5:48:a6:c6:db:01:c3:74:c2:
                    57:a0:07:42:82:0a:6a:46:08:6b:03:b9:2a:04:8f:
                    5f:f1:2e:b7:e6:a7:0a:3e:21:ce:fe:f0:46:86:97:
                    87:61:51:3d:2b:bd:3c:77:8d:9a:23:b8:5c:69:9d:
                    f3:2b:6b:f4:d5:5a:2c:ff:0c:58:61:fa:0f:2f:a1:
                    75:36:8b:64:8a:81:d3:69:bd:09:dd:6c:a7:a8:3e:
                    70:73:c9:28:73:b2:9d:85:cb:4e:91:d4:a8:a6:be:
                    3d:2e:a6:04:28:7a:0b:35:65:2c:4f:9e:b8:5b:bf:
                    8a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EC:94:30:AD:14:11:9C:14:DC:C3:2D:78:F4:F1:77:23:60:55:61
            X509v3 Authority Key Identifier:
                keyid:5F:A7:CB:BB:D1:D1:F7:95:13:C2:EF:D5:24:7C:3A:A4:2F:D0:E7:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA7CBBBD1D1F79513C2EFD5247C3AA42FD0E76F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AD68ovQMgKfS85B7T5s6KowYcqL34UdHvEh2cBzk98K1/0/323830343a353864383a3a2f33322d313238203d3e20323638313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:66:bd:d2:54:8a:4f:a8:4d:ac:82:78:f1:b2:59:f1:fe:cf:
         e0:89:0c:84:b1:e7:bf:07:ec:2d:83:79:07:f1:3d:12:bb:31:
         ce:4e:40:58:17:e9:8e:d9:5c:4e:f9:24:84:64:89:54:26:64:
         86:ed:52:5e:e8:e2:b1:86:4a:fa:ff:08:62:ed:8d:52:13:60:
         4d:e2:c1:d6:e4:08:e6:99:ff:91:ac:03:e1:5f:54:36:ff:5c:
         9a:7b:bc:0b:7c:41:3b:ae:12:b8:4c:35:4a:10:d6:3b:f8:f6:
         cc:2a:4f:97:49:d7:29:e6:b1:ff:d9:aa:ca:68:c8:69:2c:9a:
         de:da:45:59:41:9a:92:95:63:f1:05:2d:a6:6f:6f:b5:ac:c5:
         e5:cc:98:ae:5a:6c:b1:93:73:79:11:b7:51:a5:ca:8b:0b:db:
         cc:b3:27:6d:71:f4:d1:ad:b5:bd:0b:c1:1b:c7:53:c7:fc:45:
         99:23:df:2b:d7:ce:8b:19:65:aa:25:04:d2:1a:2b:89:a5:f3:
         2b:e5:57:ee:cd:43:a3:4b:d2:1a:41:3a:ec:b2:ef:0f:30:0c:
         b8:db:8f:ce:8e:b7:b3:aa:c2:ae:15:1e:5a:f9:a8:7c:9d:56:
         da:43:f5:36:7e:e9:d8:b2:0e:24:a3:e9:32:0a:8e:b6:b1:bd:
         3e:b1:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 21:57:48 2025 by rpki-client