Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31373a3a2f34382d313238203d3e203532353830.roa
File:                     323830343a6366383a31373a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier:          9G073HAY0SmyXzQfYEONGrg98Bl+4uOa3TjLg59X6hM=
Subject key identifier:   A6:1E:00:27:05:07:41:3E:5C:2F:F1:37:80:41:97:2C:EE:B3:A8:7A
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       6BC25A869A3802D4C293637BF97BD39A6DD9324B
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31373a3a2f34382d313238203d3e203532353830.roa
Signing time:             Wed 30 Apr 2025 18:46:44 +0000
ROA not before:           Wed 30 Apr 2025 18:41:44 +0000
ROA not after:            Wed 29 Apr 2026 18:46:44 +0000
asID:                     52580
IP address blocks:        2804:cf8:17::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 19:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c2:5a:86:9a:38:02:d4:c2:93:63:7b:f9:7b:d3:9a:6d:d9:32:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr 30 18:41:44 2025 GMT
            Not After : Apr 29 18:46:44 2026 GMT
        Subject: CN=A61E00270507413E5C2FF1378041972CEEB3A87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:73:6f:31:0f:1b:7a:9f:7a:77:39:71:ac:
                    11:20:a3:b2:27:5f:16:d7:0a:1e:ad:70:b7:41:86:
                    f3:a8:4c:a5:56:03:2d:bd:d0:09:47:8a:25:e2:ec:
                    b8:0a:30:d3:2f:a0:18:2a:c6:cd:2a:d7:25:97:69:
                    27:ea:7c:68:5a:e3:d9:0d:77:79:99:c8:35:a2:76:
                    42:bc:7e:ca:87:81:d1:cc:7d:d8:43:79:bd:d1:68:
                    11:a7:2b:66:52:db:70:dd:1f:dc:3e:55:75:13:e9:
                    76:22:32:90:27:d1:69:a7:03:cf:1e:22:1d:9f:1a:
                    bf:e8:2d:ee:33:08:31:85:ad:7a:11:34:fa:31:6b:
                    b7:af:ac:c1:1d:58:9f:d0:b1:04:70:58:4e:1c:c8:
                    b5:04:ef:48:81:a4:0c:62:b4:85:62:24:53:dd:e0:
                    f7:f9:9c:c6:ff:d5:40:64:b3:e8:c1:e0:41:05:91:
                    21:cf:c4:a1:09:7c:c7:a8:0c:58:0e:41:b8:35:c7:
                    63:7a:6f:f0:31:f7:af:76:a5:5a:e8:be:a4:f5:a9:
                    77:f9:b7:ab:6b:50:0c:6d:05:46:47:a4:15:8d:47:
                    55:ee:59:13:56:36:67:5c:83:9e:c3:3e:c4:2e:0d:
                    b2:7b:c8:6a:12:5b:8d:b8:40:dc:ff:66:53:30:a2:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1E:00:27:05:07:41:3E:5C:2F:F1:37:80:41:97:2C:EE:B3:A8:7A
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a31373a3a2f34382d313238203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:cf8:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:e7:88:cb:ec:0d:5d:96:60:6b:cc:da:91:85:23:53:57:e2:
         19:30:7c:08:df:de:52:dc:34:cc:21:7d:6d:4d:a3:7d:e3:5c:
         19:16:4a:94:51:95:f8:51:cd:1d:21:24:d6:9b:1b:9e:d2:d8:
         8c:d2:cb:b4:35:b7:80:01:ec:81:3b:b7:90:34:9b:19:9f:30:
         2e:a1:85:d5:22:5f:fd:d8:62:ab:6b:ff:93:04:4b:95:de:71:
         c9:62:cd:cc:bd:58:bd:ef:c0:c7:a3:e5:d2:0a:07:f0:e9:47:
         74:17:2c:19:8b:7d:4d:22:39:fd:4d:38:b1:2f:b7:81:9e:4d:
         f4:ce:1f:95:7b:cd:77:a3:d1:3e:5a:7b:86:a2:bf:5d:9f:d2:
         63:1d:78:5b:1d:a8:28:59:c6:07:6e:ef:84:99:c0:45:07:73:
         f5:68:1e:ee:3e:2a:c9:16:27:81:65:eb:43:f4:ed:16:f6:54:
         67:49:9d:45:d9:a4:51:86:34:9b:01:9e:5f:5c:d0:29:81:b5:
         05:d6:3e:1d:21:ab:97:fa:49:12:c9:7a:ca:5b:fd:80:0a:fc:
         86:9d:d9:79:e4:13:72:6e:fd:6a:02:ed:87:05:8b:65:eb:09:
         45:eb:3d:16:62:67:5a:23:be:9d:31:c6:35:3a:5c:2a:6f:f7:
         3c:1b:68:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:05:23 2025 by rpki-client