Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/323830343a356261343a3a2f34382d3438203d3e20323638383630.roa
File:                     323830343a356261343a3a2f34382d3438203d3e20323638383630.roa (raw, json)
Hash identifier:          +oROQWQv/jXz1lhhgxlK3hNcalh7KS+bcboKf4V6z5o=
Subject key identifier:   E5:44:20:F0:7D:E7:4A:12:9C:D4:49:F9:3A:6A:F9:2A:E6:C8:E2:CC
Certificate issuer:       /CN=5805426DE711726257B6F6F478D3A3E7F932F7C4
Certificate serial:       3F1066466AA20BA623E36858B64A1E569AA4CA8F
Authority key identifier: 58:05:42:6D:E7:11:72:62:57:B6:F6:F4:78:D3:A3:E7:F9:32:F7:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5805426DE711726257B6F6F478D3A3E7F932F7C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/323830343a356261343a3a2f34382d3438203d3e20323638383630.roa
Signing time:             Fri 02 May 2025 13:19:19 +0000
ROA not before:           Fri 02 May 2025 13:14:19 +0000
ROA not after:            Fri 01 May 2026 13:19:19 +0000
asID:                     268860
IP address blocks:        2804:5ba4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/5805426DE711726257B6F6F478D3A3E7F932F7C4.crl
                          rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/5805426DE711726257B6F6F478D3A3E7F932F7C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5805426DE711726257B6F6F478D3A3E7F932F7C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 May 2025 20:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:10:66:46:6a:a2:0b:a6:23:e3:68:58:b6:4a:1e:56:9a:a4:ca:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5805426DE711726257B6F6F478D3A3E7F932F7C4
        Validity
            Not Before: May  2 13:14:19 2025 GMT
            Not After : May  1 13:19:19 2026 GMT
        Subject: CN=E54420F07DE74A129CD449F93A6AF92AE6C8E2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:9b:8d:60:87:f8:42:da:78:a7:2b:88:f7:
                    ba:12:cc:7c:97:cc:08:80:f9:a1:67:f2:82:af:4c:
                    c5:51:02:ce:9d:d4:c9:4b:c4:10:75:16:87:42:89:
                    70:8d:83:54:1e:13:a5:c9:4c:09:b3:09:64:1b:6e:
                    ad:6d:43:fa:12:3f:03:11:d3:9d:e9:0d:8d:12:b7:
                    9c:6e:d3:14:46:ac:38:d8:4e:d5:75:92:ed:98:39:
                    c4:51:18:3e:08:eb:0e:d2:65:f1:97:92:3e:e3:c6:
                    e8:53:9d:8e:f9:96:53:1a:41:8d:30:28:87:b7:04:
                    87:41:77:56:de:f1:c3:81:36:fd:4d:3b:a9:50:0a:
                    55:1a:a1:0d:8b:a8:0c:5a:d5:a2:56:79:5c:de:d9:
                    97:2d:7f:01:83:3e:3d:7a:07:12:2c:52:c5:94:3e:
                    cf:52:47:07:f2:e9:80:88:00:21:77:bc:82:e9:06:
                    83:5f:a3:35:65:fd:25:8d:e7:f9:02:ff:ad:c0:9b:
                    67:f1:be:1e:89:8e:c4:e6:b2:92:b6:0d:6b:b4:98:
                    47:9e:12:db:99:f1:09:09:7d:6d:50:58:2b:e4:df:
                    fc:a7:5e:c6:6b:1d:a4:b6:a5:28:61:9c:a5:65:ca:
                    88:35:f9:25:b4:e8:4f:84:d0:4a:2e:58:7f:36:5a:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:44:20:F0:7D:E7:4A:12:9C:D4:49:F9:3A:6A:F9:2A:E6:C8:E2:CC
            X509v3 Authority Key Identifier:
                keyid:58:05:42:6D:E7:11:72:62:57:B6:F6:F4:78:D3:A3:E7:F9:32:F7:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/5805426DE711726257B6F6F478D3A3E7F932F7C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5805426DE711726257B6F6F478D3A3E7F932F7C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/323830343a356261343a3a2f34382d3438203d3e20323638383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ba4::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:a6:cd:24:62:00:79:5d:73:f7:ec:99:03:6e:d9:4e:3d:14:
         bd:8a:fd:7d:be:9b:3b:4c:9b:7e:28:33:1f:ae:af:f6:6a:4e:
         89:37:ab:64:bd:17:8a:c6:32:c3:71:05:b1:da:29:4d:e0:bc:
         62:1d:38:89:a1:38:be:93:8f:91:aa:0b:cf:b9:f1:55:75:1b:
         2d:1c:dd:5b:08:a4:ba:3c:b3:33:1e:61:9d:a9:a2:1c:82:94:
         9d:0f:d0:cb:7a:5b:13:a3:cd:83:ec:9d:c1:fa:dc:f9:ea:d9:
         79:00:39:90:47:19:ed:67:1b:37:1b:cd:5b:0e:a1:49:f4:10:
         cb:5d:e4:58:94:c7:31:10:ff:c3:d9:c6:08:da:7f:ea:79:d4:
         63:5a:83:b3:ca:57:13:65:b3:2a:78:d9:f0:24:f2:ed:77:7d:
         3c:6a:01:09:13:eb:23:29:32:15:0f:44:48:e9:5d:98:06:13:
         93:1f:3f:86:07:b4:96:ce:dc:11:93:c9:74:da:e3:5c:a8:7c:
         42:26:2f:4d:69:ca:31:7e:5c:20:0a:63:bf:75:f7:95:a2:6a:
         92:4c:44:f8:da:f7:1c:af:1b:f1:09:ad:e6:27:1a:15:f8:7c:
         6b:c8:1e:9e:97:a8:38:d9:4e:22:03:f8:5a:a5:cd:08:4f:82:
         72:60:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:52:08 2025 by rpki-client