Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33322d3334203d3e20323635303338.roa
File:                     323830343a333163633a3a2f33322d3334203d3e20323635303338.roa (raw, json)
Hash identifier:          Hf5yARcahJxd2qwBIlcKhy0tIV/SIDbTzFn9LXhXI0Y=
Subject key identifier:   A0:9D:33:FB:D9:8E:9A:EC:78:62:EA:D2:48:36:A8:E9:A2:AB:95:F9
Certificate issuer:       /CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
Certificate serial:       14D9041BAE12D7B94E90AABC7A4B92DAAAD27211
Authority key identifier: DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33322d3334203d3e20323635303338.roa
Signing time:             Sat 17 May 2025 02:36:19 +0000
ROA not before:           Sat 17 May 2025 02:31:19 +0000
ROA not after:            Sat 16 May 2026 02:36:19 +0000
asID:                     265038
IP address blocks:        2804:31cc::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl
                          rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 09:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d9:04:1b:ae:12:d7:b9:4e:90:aa:bc:7a:4b:92:da:aa:d2:72:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4
        Validity
            Not Before: May 17 02:31:19 2025 GMT
            Not After : May 16 02:36:19 2026 GMT
        Subject: CN=A09D33FBD98E9AEC7862EAD24836A8E9A2AB95F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ec:1d:fd:22:31:b8:21:d8:a5:df:44:f6:8c:
                    c4:32:b0:dd:7c:c5:c9:69:ea:8d:82:43:4b:2a:05:
                    ff:0f:c2:d9:84:9a:c5:c1:84:e2:a2:d0:5e:a0:bf:
                    76:77:55:30:04:91:b1:60:ba:53:0c:11:46:40:af:
                    7b:7a:d3:6f:88:d1:e8:f1:11:d7:92:0c:14:7c:9d:
                    07:c6:6f:0b:a6:47:cc:af:df:d2:0b:32:e1:f8:a5:
                    06:f3:86:95:8a:79:95:16:d6:df:05:02:c7:82:c3:
                    3c:46:df:8e:f1:58:39:c8:41:8a:c1:12:bd:8d:17:
                    66:8c:bb:72:9c:e5:ec:47:b2:f8:7f:30:88:bb:9a:
                    c4:22:8c:19:ee:e9:6c:53:34:0b:ce:d5:d1:45:7c:
                    8d:68:07:81:ea:89:f2:bf:ed:fb:07:2d:ba:e7:d4:
                    65:4e:c1:ea:f6:2a:ac:f6:28:18:6a:5d:33:7f:fe:
                    b2:59:4b:ce:0a:ba:d3:e2:aa:e0:12:9f:ee:cc:d0:
                    47:15:e2:9b:0a:89:a6:70:ef:2a:d7:8a:38:09:cb:
                    6e:87:1f:bb:2c:75:6d:a8:81:32:de:d9:f6:db:a0:
                    1a:65:40:09:2e:ee:ab:3c:1b:17:53:33:a9:ae:66:
                    9e:2f:04:39:4b:71:70:39:43:22:06:4a:11:8a:e3:
                    88:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9D:33:FB:D9:8E:9A:EC:78:62:EA:D2:48:36:A8:E9:A2:AB:95:F9
            X509v3 Authority Key Identifier:
                keyid:DD:D2:FE:CE:1A:49:F1:54:6C:35:5A:F0:8B:4A:32:02:AC:6B:4C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDD2FECE1A49F1546C355AF08B4A3202AC6B4CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjgrFQ9NWB76tgnKawYUj5P2A6GsvhZp9mkrx23SRupA/0/323830343a333163633a3a2f33322d3334203d3e20323635303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:f7:6b:e9:15:a7:0a:6b:02:61:47:40:85:d5:9d:0f:e1:07:
         75:01:51:5f:61:7d:1c:df:92:2d:39:4a:ee:0f:8c:78:0b:52:
         60:74:49:df:43:f0:1b:b4:ac:0f:9b:cb:aa:78:3e:86:1d:08:
         af:08:4e:5c:0a:e0:81:ce:75:77:6e:a4:50:43:da:29:25:de:
         1b:f3:63:39:4d:43:c7:fe:01:10:55:18:d5:92:f6:e8:49:be:
         6c:e7:ad:37:cc:b1:4c:03:c2:8c:ce:10:55:4e:2b:7a:8a:f9:
         a9:bc:09:86:0d:af:80:5a:1b:0f:d6:2b:ab:11:4e:e7:5b:c6:
         36:fa:86:13:c6:92:a3:9d:6e:9f:6f:25:a4:e6:90:af:f1:04:
         24:71:62:43:60:8e:d1:09:a3:ee:b7:a0:7e:77:a5:22:81:ff:
         dc:01:24:de:f6:c7:f6:8f:00:44:82:02:95:80:dd:8b:ec:cc:
         df:88:14:36:74:e2:03:79:af:0f:b6:9e:e8:b2:1b:62:9a:75:
         3e:2a:74:39:03:75:df:2b:75:f2:12:6c:a2:d3:3a:04:94:65:
         e8:0d:8e:b3:55:d2:77:72:5f:91:f8:a6:4b:69:79:db:4b:dc:
         d6:20:40:57:32:47:8d:b1:90:6a:56:39:c2:26:31:5d:72:61:
         31:18:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:57:10 2025 by rpki-client