Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/323830343a333531633a3a2f33322d3438203d3e20323636323639.roa
File:                     323830343a333531633a3a2f33322d3438203d3e20323636323639.roa (raw, json)
Hash identifier:          0RAwiE1uQZC4AnhcHcz8NAlKcFd2Q+l+WGtwVHrZPlg=
Subject key identifier:   D5:B1:5F:E0:5A:D8:1B:B7:B2:42:39:4C:C6:92:DD:7D:84:49:5B:55
Certificate issuer:       /CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
Certificate serial:       67D20EF9B2E2B4AE60898C4A7BB10FCE5B1CB5DA
Authority key identifier: CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/323830343a333531633a3a2f33322d3438203d3e20323636323639.roa
Signing time:             Fri 07 Mar 2025 00:28:10 +0000
ROA not before:           Fri 07 Mar 2025 00:23:10 +0000
ROA not after:            Fri 06 Mar 2026 00:28:10 +0000
asID:                     266269
IP address blocks:        2804:351c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl
                          rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d2:0e:f9:b2:e2:b4:ae:60:89:8c:4a:7b:b1:0f:ce:5b:1c:b5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227
        Validity
            Not Before: Mar  7 00:23:10 2025 GMT
            Not After : Mar  6 00:28:10 2026 GMT
        Subject: CN=D5B15FE05AD81BB7B242394CC692DD7D84495B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:06:31:8b:cc:6e:af:2c:41:20:3b:da:79:
                    74:a9:82:71:18:ad:ca:66:e0:ec:f5:a5:1f:b5:76:
                    1c:12:1d:f9:48:2b:f3:11:51:15:2c:9f:48:81:cb:
                    a3:a4:a0:ef:a5:12:de:6e:3a:ec:91:ad:45:75:dd:
                    09:f6:10:82:c9:f1:68:1a:2e:6e:48:10:32:83:a7:
                    65:5c:e9:14:65:4c:a6:54:76:9b:0f:ac:ad:93:e4:
                    de:86:d0:90:c3:6d:6e:1f:da:0d:f5:8e:b9:5a:82:
                    5c:dc:11:08:53:3f:21:0c:cb:0b:3a:e9:47:e4:66:
                    5e:ec:9b:73:27:04:80:5f:9f:45:18:19:73:3d:e7:
                    bb:0c:12:69:aa:d5:56:c5:70:38:0b:15:51:c9:b1:
                    1d:76:ab:76:5c:a2:2e:87:5d:9a:30:84:ce:35:ad:
                    83:47:39:60:32:ff:8c:fe:51:a6:e3:ee:5f:26:22:
                    cf:93:ef:f8:e1:b2:bb:0b:60:93:01:68:49:4f:f7:
                    67:9e:c3:ac:ec:30:cf:92:b0:e9:e0:af:cd:cd:05:
                    65:88:1a:4e:e2:5e:6d:6f:f8:7e:1d:26:2e:fd:91:
                    58:95:a8:98:f9:22:87:8e:cb:02:09:7a:0e:13:9c:
                    04:c0:8a:c2:5b:86:62:c7:b9:9c:5f:2b:d3:33:c7:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B1:5F:E0:5A:D8:1B:B7:B2:42:39:4C:C6:92:DD:7D:84:49:5B:55
            X509v3 Authority Key Identifier:
                keyid:CB:0E:C6:B7:F7:40:56:65:C6:58:4B:5D:B7:F3:C8:75:5A:A6:D2:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB0EC6B7F7405665C6584B5DB7F3C8755AA6D227.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/274raA4rPEdbGkxc3qraNTLHmmiy3QBakRUwEUDumKbP/1/323830343a333531633a3a2f33322d3438203d3e20323636323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:351c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:4a:f5:71:96:98:d5:37:95:7f:21:76:0f:9e:29:ae:78:62:
         5e:10:3a:43:4e:51:46:56:b7:96:fd:89:d8:be:e8:b9:d5:b2:
         d0:7a:cd:db:a7:d3:98:f3:fd:22:f1:45:c2:60:9d:2a:53:3e:
         3a:74:39:c7:ce:fd:a7:1b:0a:e2:10:91:2e:25:df:fd:d1:c2:
         f4:34:27:3d:23:e6:95:87:44:a4:52:6e:47:6c:91:d0:59:4f:
         93:6c:90:8c:be:ec:79:7c:78:1d:ba:0a:fa:f9:06:c3:43:10:
         39:a8:70:33:fd:0f:24:9b:d4:1e:0d:1d:da:d3:56:ba:a3:1c:
         c0:5f:7f:33:96:99:97:8c:21:7e:e5:a5:78:79:34:5e:cc:c3:
         89:ad:16:27:33:16:9f:fb:b3:23:75:a6:5e:99:fe:43:c7:ad:
         2d:da:fd:11:73:39:74:c9:e2:8f:f0:f6:94:7c:98:fb:cd:95:
         c8:d0:4b:58:66:dc:f1:fb:d6:b5:3c:bf:d5:12:18:80:1c:f7:
         c3:48:d5:b7:50:8d:af:a0:c1:c4:87:06:62:4c:bf:ee:d4:8d:
         8e:e3:2b:07:a2:0e:c4:98:4d:91:98:4a:b1:53:6b:65:d5:5a:
         45:12:aa:89:60:5a:4a:35:c0:9f:bc:15:98:20:5a:f8:e3:a5:
         bb:35:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:45:28 2025 by rpki-client