Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa
File:                     323830343a323536343a3a2f33322d3438203d3e20323634323738.roa (raw, json)
Hash identifier:          05gWsIe1pMsdW47OlOwcp0vXdcMuDXYzSPh7SCFMDuQ=
Subject key identifier:   F9:8C:96:55:46:E8:72:2D:DB:4F:4C:E9:1D:99:9F:5D:49:4B:90:F8
Certificate issuer:       /CN=F976CD824C8D193A1DDC32222B9CE1F619152F24
Certificate serial:       71906F5C5E75F97E68AE5F5BA2D1D6A0DA887274
Authority key identifier: F9:76:CD:82:4C:8D:19:3A:1D:DC:32:22:2B:9C:E1:F6:19:15:2F:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F976CD824C8D193A1DDC32222B9CE1F619152F24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa
Signing time:             Wed 30 Apr 2025 20:41:59 +0000
ROA not before:           Wed 30 Apr 2025 20:36:59 +0000
ROA not after:            Wed 29 Apr 2026 20:41:59 +0000
asID:                     264278
IP address blocks:        2804:2564::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.crl
                          rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F976CD824C8D193A1DDC32222B9CE1F619152F24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 15:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:90:6f:5c:5e:75:f9:7e:68:ae:5f:5b:a2:d1:d6:a0:da:88:72:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F976CD824C8D193A1DDC32222B9CE1F619152F24
        Validity
            Not Before: Apr 30 20:36:59 2025 GMT
            Not After : Apr 29 20:41:59 2026 GMT
        Subject: CN=F98C965546E8722DDB4F4CE91D999F5D494B90F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:63:ee:1b:12:aa:3d:bf:60:83:03:5a:e0:
                    e9:4f:9a:37:a3:38:bd:33:66:a2:8d:21:e9:d5:d0:
                    bc:08:9d:ee:7b:f8:72:a2:1d:dd:02:44:63:9e:31:
                    65:0b:c7:36:e7:95:80:1a:cd:7e:16:6c:79:90:96:
                    8b:30:85:07:8a:6e:95:62:56:2d:4f:89:af:5e:cb:
                    8e:89:89:d1:1f:2c:4b:28:53:60:59:b3:06:69:28:
                    2c:2d:36:d7:6b:e7:e2:4d:8b:06:9f:33:1c:6e:2f:
                    d1:5f:b4:40:db:e1:0c:6c:a2:3f:47:ff:62:f4:83:
                    c3:ca:e1:4a:93:66:0a:d7:d4:7d:50:8d:ea:d7:45:
                    36:aa:47:24:3c:cb:27:f2:2b:f1:5b:63:08:16:2b:
                    ce:c8:53:4f:5e:4b:74:3f:f9:2f:88:da:c8:df:af:
                    ed:f6:c6:bc:71:04:b5:37:88:c8:bd:40:4f:ab:4f:
                    34:a8:15:57:01:5d:a4:0b:2f:54:85:c5:a7:6d:44:
                    0e:ae:b9:5d:35:a3:5b:d2:cc:bb:3f:30:9d:e3:32:
                    56:61:2c:ab:9b:4b:24:92:2b:a6:66:20:2d:cf:ea:
                    cd:83:25:c3:b0:c3:b8:5f:11:9f:5e:50:74:73:f7:
                    67:1f:04:2b:d7:99:30:16:e8:f2:58:dd:22:0f:95:
                    44:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8C:96:55:46:E8:72:2D:DB:4F:4C:E9:1D:99:9F:5D:49:4B:90:F8
            X509v3 Authority Key Identifier:
                keyid:F9:76:CD:82:4C:8D:19:3A:1D:DC:32:22:2B:9C:E1:F6:19:15:2F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/F976CD824C8D193A1DDC32222B9CE1F619152F24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F976CD824C8D193A1DDC32222B9CE1F619152F24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/323830343a323536343a3a2f33322d3438203d3e20323634323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2564::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:27:9c:7a:f1:4c:21:e7:da:be:7b:ed:db:23:c8:c8:15:7e:
         f0:10:63:ff:8e:76:8a:65:5f:5f:4d:ba:32:81:32:f4:21:97:
         85:b3:83:c2:ca:01:91:f0:66:71:3c:be:44:3c:ce:c2:db:74:
         2b:de:20:7d:7e:76:b1:dd:1f:c3:e9:ff:9c:aa:5b:a0:3f:50:
         d8:b4:ff:74:c9:33:e7:cd:fc:76:5f:04:46:e9:af:f3:8d:44:
         d5:1d:51:6f:65:87:9b:b8:c4:a5:7d:f7:68:94:05:55:19:ff:
         26:fa:f8:cf:af:fc:e5:cd:91:99:c6:dc:50:e8:5a:11:08:97:
         9b:4c:64:05:b8:28:36:22:1b:a4:90:f7:d1:a9:d2:8c:d4:9b:
         79:f4:a3:21:ba:3e:95:fc:34:ed:d6:7d:78:77:8e:ec:73:bf:
         44:16:b0:ef:80:44:c2:68:a1:7c:36:6d:20:4b:fa:31:aa:d7:
         ed:fd:78:27:a4:ed:dc:24:ff:fe:b5:98:77:f1:b4:64:cc:af:
         55:55:9d:58:de:8b:4f:8d:88:c2:8b:a5:47:3b:f9:28:a0:83:
         48:fc:13:ab:b9:c1:09:5b:22:4b:49:fd:a2:52:63:88:78:a5:
         80:02:31:a3:12:66:88:42:38:ad:af:85:5a:bf:26:cd:1e:35:
         85:79:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:48:00 2025 by rpki-client