Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/323830343a373930343a3a2f33322d313238203d3e20323731323830.roa
File:                     323830343a373930343a3a2f33322d313238203d3e20323731323830.roa (raw, json)
Hash identifier:          G4HqvjLzGlsleXp/GPy956zm2WBkWjMe4FuszXgEMMs=
Subject key identifier:   85:96:E1:58:95:48:1E:98:07:C0:86:22:7A:F4:CD:A3:49:1B:83:07
Certificate issuer:       /CN=5FDFD5CFACDE02A05292754CE448CF5635D00482
Certificate serial:       66095F81FCAC90BEDA4A1E883FADEA674A2AD338
Authority key identifier: 5F:DF:D5:CF:AC:DE:02:A0:52:92:75:4C:E4:48:CF:56:35:D0:04:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FDFD5CFACDE02A05292754CE448CF5635D00482.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/323830343a373930343a3a2f33322d313238203d3e20323731323830.roa
Signing time:             Sat 29 Mar 2025 14:26:39 +0000
ROA not before:           Sat 29 Mar 2025 14:21:39 +0000
ROA not after:            Sat 28 Mar 2026 14:26:39 +0000
asID:                     271280
IP address blocks:        2804:7904::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/5FDFD5CFACDE02A05292754CE448CF5635D00482.crl
                          rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/5FDFD5CFACDE02A05292754CE448CF5635D00482.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FDFD5CFACDE02A05292754CE448CF5635D00482.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 15:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:09:5f:81:fc:ac:90:be:da:4a:1e:88:3f:ad:ea:67:4a:2a:d3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FDFD5CFACDE02A05292754CE448CF5635D00482
        Validity
            Not Before: Mar 29 14:21:39 2025 GMT
            Not After : Mar 28 14:26:39 2026 GMT
        Subject: CN=8596E15895481E9807C086227AF4CDA3491B8307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:85:63:19:13:e8:91:1a:45:b7:22:99:f7:
                    43:8e:86:15:48:04:fb:dd:24:0b:cd:1c:c8:6d:2c:
                    d6:34:23:e3:ff:27:38:82:be:9f:27:c1:2e:4c:56:
                    a5:e5:a6:b4:0b:b4:07:d6:b5:f4:41:a1:8a:25:da:
                    e6:f9:61:21:b8:0a:7d:54:08:1f:bf:5b:9b:a2:ed:
                    ea:a1:c1:57:5e:54:8c:5e:70:e0:17:53:e9:29:06:
                    71:66:84:8b:bc:2a:a2:af:78:56:2e:c6:77:cd:21:
                    7a:f5:ee:52:e7:43:26:1d:33:12:60:3c:9d:c5:6b:
                    80:47:fb:77:36:95:c9:6c:fc:a9:05:bb:4a:8f:68:
                    9d:c0:21:a5:0d:10:2d:8b:d1:ee:e8:e9:22:25:3b:
                    11:f3:d9:29:23:de:c5:d7:09:2e:79:75:9a:9c:58:
                    0d:39:21:f0:e0:80:58:89:e9:18:1c:23:52:7d:b4:
                    2f:df:05:ac:6c:7c:c7:98:f4:97:7d:59:48:33:a6:
                    67:17:b6:af:de:c4:54:08:9f:99:79:59:91:f4:5b:
                    96:f5:46:af:8c:e2:a2:43:ca:0e:ec:9d:b0:f6:16:
                    58:8f:fd:61:5f:9b:4a:a7:f6:82:f4:a6:d8:52:dc:
                    89:1b:6f:c1:7f:be:8f:13:5d:b0:f6:34:73:96:a2:
                    20:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:96:E1:58:95:48:1E:98:07:C0:86:22:7A:F4:CD:A3:49:1B:83:07
            X509v3 Authority Key Identifier:
                keyid:5F:DF:D5:CF:AC:DE:02:A0:52:92:75:4C:E4:48:CF:56:35:D0:04:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/5FDFD5CFACDE02A05292754CE448CF5635D00482.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FDFD5CFACDE02A05292754CE448CF5635D00482.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/323830343a373930343a3a2f33322d313238203d3e20323731323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7904::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:21:d1:59:fb:6e:4f:7d:88:ce:d8:03:30:99:f4:98:4f:
         91:0d:aa:7d:db:d1:72:3c:38:12:34:24:d6:50:cd:87:4a:39:
         40:d9:2f:ab:40:0c:f7:2e:a8:f2:a8:56:91:d6:ab:22:a3:1d:
         dd:ee:05:94:17:69:ed:29:cb:cb:32:1f:85:24:ae:d7:d0:22:
         e2:53:fe:3f:af:22:27:28:8b:7f:72:7c:ef:fd:00:55:6a:5a:
         b6:70:3a:57:8d:3b:30:db:27:8f:0b:90:d4:06:65:78:8c:da:
         53:fd:09:75:f7:fb:29:86:7c:9b:cc:e8:33:d2:13:a2:37:62:
         2f:48:94:24:54:02:65:72:79:26:c9:3b:f1:f1:25:1d:60:b4:
         a6:d1:62:ad:de:ab:fb:1e:fd:d4:84:eb:48:41:cf:0c:5a:44:
         7e:56:58:4a:d4:3d:0a:aa:1d:09:a7:a9:34:83:8a:65:80:98:
         64:f7:82:e6:1f:a8:38:d9:39:2d:17:c6:b8:93:1a:59:fa:35:
         e3:fe:ea:38:7d:4c:ff:78:25:8b:d4:bc:e8:5f:61:3a:35:0d:
         d6:4b:f6:31:66:12:5e:bd:47:f6:8a:07:8a:ba:14:42:ba:fc:
         66:d8:f7:5b:8a:74:2d:20:a4:7b:31:6c:bf:b8:c0:8c:03:f9:
         9b:e6:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:25:10 2025 by rpki-client