Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa
File:                     323830343a313131633a3a2f33322d313238203d3e203532383138.roa (raw, json)
Hash identifier:          FnoBKnBFs5cIz8XjJ4mlT8+y4vLgr+jYL7iqCGZ/+Pw=
Subject key identifier:   88:15:96:0A:0C:DA:F0:82:C9:9A:BD:E4:12:12:26:D2:22:C5:FC:7B
Certificate issuer:       /CN=BE13416D307D9E2EC8AA6F508A530189747AC781
Certificate serial:       78E59B1397108AB1F094916BE376874CD959596A
Authority key identifier: BE:13:41:6D:30:7D:9E:2E:C8:AA:6F:50:8A:53:01:89:74:7A:C7:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE13416D307D9E2EC8AA6F508A530189747AC781.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa
Signing time:             Sat 03 May 2025 01:21:20 +0000
ROA not before:           Sat 03 May 2025 01:16:20 +0000
ROA not after:            Sat 02 May 2026 01:21:20 +0000
asID:                     52818
IP address blocks:        2804:111c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/BE13416D307D9E2EC8AA6F508A530189747AC781.crl
                          rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/BE13416D307D9E2EC8AA6F508A530189747AC781.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE13416D307D9E2EC8AA6F508A530189747AC781.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 04 May 2025 03:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e5:9b:13:97:10:8a:b1:f0:94:91:6b:e3:76:87:4c:d9:59:59:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE13416D307D9E2EC8AA6F508A530189747AC781
        Validity
            Not Before: May  3 01:16:20 2025 GMT
            Not After : May  2 01:21:20 2026 GMT
        Subject: CN=8815960A0CDAF082C99ABDE4121226D222C5FC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fd:8e:27:24:e5:50:83:32:fe:9c:e1:eb:ed:
                    a2:41:b2:4f:30:fd:c3:f8:5e:f8:01:99:d8:9d:7e:
                    06:24:ff:a3:a2:67:a0:80:6d:e5:a7:61:94:08:0d:
                    02:f3:d1:bb:ca:e0:91:ee:e4:49:49:9a:42:b2:d0:
                    b0:9f:67:4e:b2:f7:c6:a4:b9:53:e6:78:75:c0:92:
                    21:76:0c:10:08:88:3e:c7:32:25:3e:72:f0:7d:ac:
                    e1:39:11:be:03:dd:b4:52:bd:72:d7:22:aa:41:8b:
                    15:76:a5:d7:18:94:88:de:f3:2e:2d:66:be:f5:2d:
                    c3:da:df:25:3d:90:59:64:60:a3:a4:cd:3a:e0:68:
                    cf:f0:16:37:18:6b:5a:4c:89:78:19:20:c1:a7:ea:
                    87:87:d3:3c:51:da:9a:dd:df:7b:80:de:01:31:37:
                    db:ba:e4:55:e4:37:8f:3c:d2:e5:9e:5e:44:8f:b0:
                    b6:16:07:fd:05:3c:3f:25:35:0e:04:33:a3:41:b6:
                    31:aa:d8:ce:c1:ed:85:e6:cc:df:51:01:d8:5f:e7:
                    04:69:42:17:c2:cc:f3:bb:f9:2e:41:80:cf:f0:62:
                    9c:07:c7:1d:04:e2:c4:3c:4e:c1:f9:fb:fc:89:e5:
                    4c:11:88:bb:75:b9:1b:8f:26:55:b5:c6:5a:4d:fd:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:15:96:0A:0C:DA:F0:82:C9:9A:BD:E4:12:12:26:D2:22:C5:FC:7B
            X509v3 Authority Key Identifier:
                keyid:BE:13:41:6D:30:7D:9E:2E:C8:AA:6F:50:8A:53:01:89:74:7A:C7:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/BE13416D307D9E2EC8AA6F508A530189747AC781.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE13416D307D9E2EC8AA6F508A530189747AC781.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhYM5j7Y8X7XaoQ6sPmrLtFSTZYiZEpPdsz9Ezfca2Mr/0/323830343a313131633a3a2f33322d313238203d3e203532383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:111c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:e0:8a:c7:f9:29:b7:e5:87:08:f0:b4:d1:b0:a4:c9:b2:
         fd:aa:31:72:90:99:6d:03:11:9e:14:3a:fd:c6:ef:fe:f4:26:
         30:69:c9:ac:76:c4:7f:5b:00:df:81:3d:6a:4c:74:60:53:5f:
         7e:21:92:52:29:e2:c4:4a:36:3d:43:23:c1:aa:42:af:33:bf:
         65:59:ad:8e:c4:5e:00:85:ed:15:2d:f1:dc:fb:5b:cc:4e:ba:
         c9:c8:67:e0:17:78:0c:f6:a2:2d:54:d7:ea:86:1f:d6:8d:4d:
         fa:db:a8:74:48:6d:f6:56:c6:d7:a8:74:f5:f2:d1:2a:51:06:
         5e:9e:c7:44:ec:35:76:a2:db:1d:15:92:ba:7a:3e:d8:4c:f1:
         ad:3a:94:a2:ce:cb:58:2d:dd:06:6d:bd:b9:05:8c:01:32:f2:
         6f:27:c8:94:1a:c5:4f:b5:e3:44:92:b6:11:75:9a:c3:3a:22:
         ce:a8:bb:02:38:60:07:25:dc:c4:ac:b1:be:64:5a:b2:22:5e:
         d2:5b:3d:6a:49:ee:6e:bb:88:b1:aa:cf:7a:58:92:5c:e9:73:
         6d:60:0b:96:9b:2f:1c:7d:d8:f5:6f:d5:d5:f3:10:70:16:77:
         5a:53:ad:d3:54:45:60:74:94:0a:41:a5:7c:96:73:d9:07:13:
         e4:ff:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:18:30 2025 by rpki-client