Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a3a2f34382d3438203d3e20323633353232.roa
File:                     323830343a313333383a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          f1hwFVrl/mLr+zvGG68K/0Ls/EQGQ9wR9Vj2p638k6o=
Subject key identifier:   44:50:DF:43:18:C3:74:F2:C7:93:7E:C0:B7:FD:06:8C:C4:14:A8:C0
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       195668A55BFFC5715DF02414C7E6375549791A09
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a3a2f34382d3438203d3e20323633353232.roa
Signing time:             Mon 28 Apr 2025 11:08:18 +0000
ROA not before:           Mon 28 Apr 2025 11:03:18 +0000
ROA not after:            Mon 27 Apr 2026 11:08:18 +0000
asID:                     263522
IP address blocks:        2804:1338::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 17:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:56:68:a5:5b:ff:c5:71:5d:f0:24:14:c7:e6:37:55:49:79:1a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Apr 28 11:03:18 2025 GMT
            Not After : Apr 27 11:08:18 2026 GMT
        Subject: CN=4450DF4318C374F2C7937EC0B7FD068CC414A8C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:47:1b:f6:d5:05:34:89:92:55:54:a6:5f:
                    fc:5c:3f:ae:97:01:d0:87:f6:78:45:74:69:db:47:
                    80:cf:5c:e8:70:07:dc:59:75:47:07:b3:03:d4:aa:
                    5a:8c:3c:b2:e9:77:36:33:7c:ed:ff:89:f8:30:70:
                    29:9a:db:49:0f:03:0c:9f:44:31:a3:a1:a8:32:ee:
                    0b:bd:c3:c3:59:e7:3c:3c:e4:b3:d4:aa:46:29:1f:
                    c5:10:7a:12:77:86:3a:d4:73:84:9c:7b:ec:92:83:
                    7e:57:cd:9b:8a:c0:27:53:e1:36:56:c6:65:79:ca:
                    9c:62:d3:ef:b7:a9:4a:12:a1:01:10:88:5d:03:a0:
                    b5:09:4e:30:e4:bf:79:24:23:05:04:ac:aa:55:b0:
                    12:d6:ba:a6:07:76:6c:5a:46:b5:96:3e:7d:90:b9:
                    66:3e:93:58:d1:09:9b:53:70:0e:6c:a6:a3:9f:31:
                    85:2d:33:f9:68:5f:9b:72:2d:af:1c:3b:06:78:32:
                    cf:04:05:ec:59:48:53:cd:94:9e:d2:da:fe:a2:d3:
                    be:b5:bf:8e:6f:b0:07:a9:f5:97:eb:ba:e2:29:de:
                    71:22:3b:cf:28:94:50:b1:2a:da:41:a0:38:ea:17:
                    16:34:83:f4:ec:a9:ad:8a:fe:eb:66:e8:77:eb:a1:
                    b4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:50:DF:43:18:C3:74:F2:C7:93:7E:C0:B7:FD:06:8C:C4:14:A8:C0
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a3a2f34382d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:5f:99:95:b4:62:59:1f:fd:3a:55:33:aa:51:ac:10:77:6f:
         9b:ac:8c:5c:a4:ce:66:da:10:e5:d1:d4:e2:56:5b:50:3d:4a:
         5f:16:05:83:eb:82:6c:5c:67:0d:c8:71:62:1e:50:2b:97:1a:
         1f:d7:b3:10:46:e8:13:a7:74:ab:1d:4d:d7:02:32:90:87:56:
         28:b9:94:3c:57:0c:f1:1c:3d:ce:38:c7:56:6f:1a:eb:dc:f2:
         27:43:9d:d1:63:b8:22:07:2c:8d:27:74:f7:bb:f2:b7:53:df:
         bf:32:7b:c4:1b:7f:12:cc:83:73:01:93:d0:85:e0:e2:e1:00:
         b6:8c:10:de:de:9e:40:9e:10:f9:e8:cc:9a:c7:77:da:1e:77:
         f9:d9:8a:2f:ce:2d:46:32:86:16:24:28:b7:0d:3d:b0:58:70:
         06:fb:f0:84:5f:db:c3:f1:5a:d9:ef:19:14:d1:cf:b7:4f:44:
         15:dd:75:d6:83:50:70:2d:72:36:4a:0e:85:40:18:04:09:d5:
         c8:94:36:3f:cb:33:dd:88:b6:6a:a1:29:4f:57:12:56:97:c7:
         de:3a:a2:d3:aa:9a:26:82:94:2f:7d:31:76:3f:36:99:7c:c1:
         bc:09:3a:b3:e6:f7:15:2f:6b:eb:fb:df:c1:a3:87:ed:43:5d:
         13:4b:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:04:11 2025 by rpki-client