Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/323830343a313035633a3a2f33322d3336203d3e20323633363331.roa
File:                     323830343a313035633a3a2f33322d3336203d3e20323633363331.roa (raw, json)
Hash identifier:          KUklU/Fkw42VLk79u/UG7CZMWw/zWF+gTw0NK582zUI=
Subject key identifier:   91:C4:01:66:C9:51:3B:97:26:18:93:57:6C:B2:CC:A4:EA:19:08:49
Certificate issuer:       /CN=0E877B9FC3D57790790B0D857A7A2A890319B3FA
Certificate serial:       6242D0EFBD1DA0BE30EF248D50834F2FF82C1C3A
Authority key identifier: 0E:87:7B:9F:C3:D5:77:90:79:0B:0D:85:7A:7A:2A:89:03:19:B3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/323830343a313035633a3a2f33322d3336203d3e20323633363331.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     263631
IP address blocks:        2804:105c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.crl
                          rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:42:d0:ef:bd:1d:a0:be:30:ef:24:8d:50:83:4f:2f:f8:2c:1c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E877B9FC3D57790790B0D857A7A2A890319B3FA
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject: CN=3082010A0282010100B9C8DCA2D80BF3494AC1F9010603678966A8EA602AC530A578CA277B24003D467C7B81D5C0EE54B599196A0062CCF5DB099DB29FB383C07BFB91230C79889E5DB77305964442D7C49DA00740B4A7D25F7531C77CE4BA940F4DA985D004F2EAE878A44D575F9F6894E6C9A345352F5EFAA029DF1F1348F568EBC522607272C9315A2291BD5F253AA0268905A5FD2047F151A66157BB458B7EB9224E396E0FFE0A721C1BB7E6F393B05A80A4F40BE7BC535EC7F0CDD225940763AB48CE22B80271E3F18BA2664A9E7EDAC13FE112ADA68647E7106D9FD75013DC69C9C6D3609D10EF775D8C9ADE93652F73BB99A38DBBB38C7086F5EC2DB44DA12F8CD0DAFF55BB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:dc:a2:d8:0b:f3:49:4a:c1:f9:01:06:03:
                    67:89:66:a8:ea:60:2a:c5:30:a5:78:ca:27:7b:24:
                    00:3d:46:7c:7b:81:d5:c0:ee:54:b5:99:19:6a:00:
                    62:cc:f5:db:09:9d:b2:9f:b3:83:c0:7b:fb:91:23:
                    0c:79:88:9e:5d:b7:73:05:96:44:42:d7:c4:9d:a0:
                    07:40:b4:a7:d2:5f:75:31:c7:7c:e4:ba:94:0f:4d:
                    a9:85:d0:04:f2:ea:e8:78:a4:4d:57:5f:9f:68:94:
                    e6:c9:a3:45:35:2f:5e:fa:a0:29:df:1f:13:48:f5:
                    68:eb:c5:22:60:72:72:c9:31:5a:22:91:bd:5f:25:
                    3a:a0:26:89:05:a5:fd:20:47:f1:51:a6:61:57:bb:
                    45:8b:7e:b9:22:4e:39:6e:0f:fe:0a:72:1c:1b:b7:
                    e6:f3:93:b0:5a:80:a4:f4:0b:e7:bc:53:5e:c7:f0:
                    cd:d2:25:94:07:63:ab:48:ce:22:b8:02:71:e3:f1:
                    8b:a2:66:4a:9e:7e:da:c1:3f:e1:12:ad:a6:86:47:
                    e7:10:6d:9f:d7:50:13:dc:69:c9:c6:d3:60:9d:10:
                    ef:77:5d:8c:9a:de:93:65:2f:73:bb:99:a3:8d:bb:
                    b3:8c:70:86:f5:ec:2d:b4:4d:a1:2f:8c:d0:da:ff:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C4:01:66:C9:51:3B:97:26:18:93:57:6C:B2:CC:A4:EA:19:08:49
            X509v3 Authority Key Identifier:
                keyid:0E:87:7B:9F:C3:D5:77:90:79:0B:0D:85:7A:7A:2A:89:03:19:B3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E877B9FC3D57790790B0D857A7A2A890319B3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr8ywjKegDKL73fQUX569U11mJ4pJFDp5vXxyk5w6eaw/1/323830343a313035633a3a2f33322d3336203d3e20323633363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:105c::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:ef:66:88:cb:39:22:2b:da:bf:ce:60:0b:d4:2d:7c:50:79:
         1a:92:1c:8a:fd:81:86:8b:10:03:b5:66:c0:61:22:e4:1e:e5:
         39:76:fa:90:3a:77:2a:38:e5:ab:cb:57:c8:8d:c6:ef:93:c2:
         b6:28:89:b3:a8:8b:23:2b:97:57:b4:41:bc:38:d6:8f:24:f7:
         aa:b2:1f:0d:c8:21:cb:78:10:34:3a:d8:80:65:36:78:c1:92:
         c1:97:a2:40:38:51:17:3d:52:df:0e:40:4d:da:40:3c:45:1b:
         0e:86:d8:6d:64:8e:0b:e7:be:1b:04:45:6d:be:4c:01:29:16:
         79:fd:07:35:89:24:5b:63:b9:34:f0:f4:13:45:4c:e1:14:b3:
         e4:72:30:2f:81:95:35:bc:03:ca:ae:9c:c8:cd:88:e1:7b:1c:
         4e:c6:b8:bc:13:aa:64:b6:89:75:b6:35:d8:9c:9c:a6:13:ac:
         5d:20:9f:44:9e:40:7e:b4:b2:34:dc:19:72:35:6e:68:85:23:
         e8:cc:57:dd:1a:a1:ab:99:5f:fc:e4:ca:ce:20:70:ec:b7:82:
         d3:6a:27:04:b1:ca:70:16:34:ea:1b:a4:3b:c9:87:cd:81:7e:
         22:57:7c:f7:e9:32:87:2a:b6:4f:12:49:04:9e:6d:d3:d0:8d:
         fe:70:b9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:35:30 2025 by rpki-client