Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          z1rCjZVK4XI1/QUjE1KTNdInwB/IlMY0LSrAiXzH04o=
Subject key identifier:   20:8B:24:5D:6A:4C:72:50:64:3F:B4:F8:50:E1:2C:21:71:04:48:9A
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       0B31C2E11E14006C45EA04394B8D651EB24BBCA5
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:45:37 +0000
ROA not before:           Wed 30 Apr 2025 18:40:37 +0000
ROA not after:            Wed 29 Apr 2026 18:45:37 +0000
asID:                     52580
IP address blocks:        2804:cf8:12::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:31:c2:e1:1e:14:00:6c:45:ea:04:39:4b:8d:65:1e:b2:4b:bc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:40:37 2025 GMT
            Not After : Apr 29 18:45:37 2026 GMT
        Subject: CN=208B245D6A4C7250643FB4F850E12C217104489A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f6:e8:dd:48:9d:2d:53:9d:40:77:4d:4a:03:
                    ba:82:03:73:81:92:fd:ad:bb:c6:a1:7d:7c:cd:a6:
                    69:96:30:d2:cf:72:05:aa:47:60:40:5b:b3:9a:a8:
                    8c:57:ff:d9:c7:b5:e0:8d:e2:43:e8:91:fd:2b:20:
                    9a:d2:29:46:ca:a1:31:3a:fe:89:43:02:4c:b1:4f:
                    86:9e:b0:ac:9b:52:d1:66:1c:e4:ee:20:36:61:f5:
                    d7:6f:1e:78:df:65:70:75:4b:e7:6a:2e:ef:76:29:
                    37:0c:3b:9f:44:54:2e:e7:f9:34:9a:6f:ba:6f:01:
                    db:7e:f0:34:79:65:aa:cf:e1:a5:84:ff:c7:7b:0f:
                    90:9a:f7:3e:dd:00:5a:15:76:b1:69:c6:af:5d:b4:
                    e3:5f:6d:3e:2e:32:65:47:cd:5e:27:8e:7e:41:44:
                    d7:68:16:6c:18:ed:a5:5f:4c:c9:db:3b:82:90:51:
                    82:f8:62:bf:21:c2:c7:ad:a7:f2:a2:d6:f9:ef:c9:
                    52:e7:db:10:dc:57:7d:3f:1b:83:b4:4c:6a:06:3a:
                    34:8d:85:00:61:97:42:fe:0a:f7:e1:b7:b2:b1:ee:
                    fd:b6:6e:8b:95:78:4c:1c:b8:84:c5:ae:96:ce:8f:
                    91:6e:f5:87:8c:5b:98:ee:50:37:3f:dc:3e:3d:79:
                    a0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8B:24:5D:6A:4C:72:50:64:3F:B4:F8:50:E1:2C:21:71:04:48:9A
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31323a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:57:c7:d8:9a:51:12:bc:1e:5f:3e:68:f3:3f:e9:3c:bd:
         18:0e:55:22:0e:a4:2c:e0:da:81:2c:60:de:09:d6:5a:94:e4:
         9f:2b:87:26:a5:65:b5:08:a7:27:8c:b3:c3:81:06:23:ba:f0:
         49:e3:1d:6b:ed:c1:11:21:1e:e7:96:a4:42:6d:97:76:b4:f8:
         b1:82:7c:be:99:cc:a7:29:d0:b3:38:7d:f4:3f:8d:63:0a:6b:
         d7:30:a3:aa:5c:2b:a9:21:cb:db:46:46:0e:38:44:34:73:61:
         e9:c7:f6:33:4f:ee:fb:35:09:41:52:46:f4:54:67:f6:ea:bc:
         02:4a:de:7d:aa:ee:b8:86:e2:7d:fa:95:05:01:61:04:2b:8f:
         4c:e6:e7:9c:ca:e2:11:d6:c1:14:22:59:40:ca:57:f6:54:02:
         18:03:0d:57:61:b2:1f:d4:d3:31:22:23:10:7c:70:ef:48:87:
         a7:8d:e8:ad:8a:7b:f3:b2:0e:63:d2:56:91:c1:f6:a0:1b:41:
         db:3b:e8:b0:73:d9:bf:01:58:0c:b3:0b:67:94:0e:98:94:fc:
         85:ee:ff:8c:9e:b7:f6:56:97:56:c6:02:03:f6:d9:8c:9b:0e:
         61:84:55:38:38:e2:93:1d:69:49:a7:1d:fa:1c:79:e4:4b:f0:
         f8:07:8d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:36:30 2025 by rpki-client