Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31353a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31353a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          HSN/hXu6jYgYzXHqxogES9Fagjznvisro8JU+sYAo9Q=
Subject key identifier:   77:52:8F:44:58:89:3C:27:F2:C3:2A:41:D8:7E:5C:64:BE:3A:9C:04
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       775B6B49B3338690AFF2FF36BC4DE6DC24C0A810
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31353a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:46:21 +0000
ROA not before:           Wed 30 Apr 2025 18:41:21 +0000
ROA not after:            Wed 29 Apr 2026 18:46:21 +0000
asID:                     52580
IP address blocks:        2804:cf8:15::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 06:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5b:6b:49:b3:33:86:90:af:f2:ff:36:bc:4d:e6:dc:24:c0:a8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:41:21 2025 GMT
            Not After : Apr 29 18:46:21 2026 GMT
        Subject: CN=77528F4458893C27F2C32A41D87E5C64BE3A9C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c9:a0:b5:6e:15:b6:05:bd:93:62:c3:4f:c6:
                    c2:9a:15:2b:fb:d4:a6:a6:99:21:d5:ea:14:56:de:
                    c8:f2:ff:52:58:3f:e6:bf:3a:56:83:d4:8b:4a:ae:
                    75:47:c2:3f:04:c4:37:57:c8:88:eb:16:e8:16:02:
                    21:2f:21:b5:e4:ed:7f:02:b1:08:bd:6c:46:7c:91:
                    b0:17:ff:92:de:1f:52:5a:a3:4a:45:c2:19:b0:f7:
                    9c:b2:18:5d:ac:6b:91:3d:71:30:50:15:99:7b:16:
                    40:b6:1b:7c:5e:4f:05:33:76:d9:8d:3f:c9:ae:ff:
                    c2:70:a7:44:3e:5c:59:aa:85:6d:4b:d3:56:a2:93:
                    17:94:60:49:94:c5:4f:ef:1f:41:a0:8d:a0:e8:d3:
                    55:4b:6a:e1:95:bf:71:22:96:4e:1c:31:32:c2:c6:
                    06:88:4d:0d:a1:8b:37:27:93:c4:48:d8:a7:00:a8:
                    4d:27:25:a6:67:af:45:c6:d6:e8:cd:9b:c8:e3:6c:
                    6d:b2:5e:3d:ab:8a:a2:a9:80:a1:39:bd:48:39:cd:
                    8d:13:56:05:91:79:e3:5e:e8:7b:b8:5a:16:be:11:
                    10:d7:1c:08:2a:17:ba:67:a0:fc:c5:c3:ab:2e:30:
                    2e:38:04:67:e2:f2:fe:4d:57:96:91:a4:b6:7c:d5:
                    7e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:52:8F:44:58:89:3C:27:F2:C3:2A:41:D8:7E:5C:64:BE:3A:9C:04
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31353a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:a6:0a:59:56:97:ae:60:ed:af:d2:97:30:34:81:ba:f9:2f:
         9f:db:94:61:85:37:c9:68:55:34:b3:b7:cb:1a:74:4b:7e:bc:
         e6:00:ac:fb:33:d0:ce:ab:00:e4:e8:72:c1:82:90:d5:c1:8a:
         bd:2f:bd:16:7e:ae:89:28:b6:51:78:8d:4e:19:4f:d9:6d:34:
         13:82:8a:56:7b:59:c7:0b:23:75:e0:97:be:af:a2:c2:fd:19:
         2a:a1:1f:a0:4d:3e:09:09:58:8e:8e:a9:85:95:c3:fb:63:87:
         3f:e6:c5:cc:a8:bb:2d:23:99:18:ea:5b:e3:7a:52:73:b4:5f:
         52:0a:db:4c:de:f1:66:70:89:91:69:72:32:5c:21:96:a3:0b:
         92:b8:27:6f:1f:c0:9a:39:4f:ae:2b:c5:8a:ae:ea:40:2d:22:
         53:c0:6a:c8:09:ad:bc:50:c3:44:8f:b0:51:97:85:d9:fe:dc:
         92:8a:4b:52:69:ff:22:a2:d5:87:0f:c2:f2:ad:1f:5f:b5:9d:
         42:d1:4c:a5:e8:97:72:d5:95:48:1e:c1:99:a6:62:79:a5:7e:
         c1:59:13:7c:88:5e:80:b1:1a:9c:82:8f:f4:30:d6:7c:1a:ec:
         cb:5b:70:41:94:61:52:52:37:44:75:12:56:37:2b:83:45:b1:
         03:e7:df:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:20:33 2025 by rpki-client