Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a3a2f33322d3438203d3e20323638383039.roa
File:                     323830343a356166343a3a2f33322d3438203d3e20323638383039.roa (raw, json)
Hash identifier:          2Ie0Qt8s7U97uqkw8hO8ihS3AhL+T5mOrG5YQiOqSHY=
Subject key identifier:   A1:F8:4B:5D:9B:A0:74:79:64:A0:30:85:51:23:45:58:03:7C:BE:8E
Certificate issuer:       /CN=36DA718022D54A30E93B3878E7B41A3BBAD1BAEB
Certificate serial:       2D4E97F1EE1FBB00F85550EA7EAA8648B52EB900
Authority key identifier: 36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a3a2f33322d3438203d3e20323638383039.roa
Signing time:             Tue 28 Jan 2025 17:42:36 +0000
ROA not before:           Tue 28 Jan 2025 17:37:36 +0000
ROA not after:            Tue 27 Jan 2026 17:42:36 +0000
asID:                     268809
IP address blocks:        2804:5af4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.crl
                          rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 11:23:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4e:97:f1:ee:1f:bb:00:f8:55:50:ea:7e:aa:86:48:b5:2e:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DA718022D54A30E93B3878E7B41A3BBAD1BAEB
        Validity
            Not Before: Jan 28 17:37:36 2025 GMT
            Not After : Jan 27 17:42:36 2026 GMT
        Subject: CN=A1F84B5D9BA0747964A0308551234558037CBE8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:64:39:a2:96:d0:10:cc:46:eb:9c:f4:12:9d:
                    94:27:fc:06:3b:3a:7b:dd:36:51:b5:3f:13:0d:83:
                    f9:0d:9d:29:4a:94:6b:6c:55:f1:4c:6d:07:56:f9:
                    f4:e0:d1:2d:84:66:8b:57:ad:a5:6f:16:4b:85:71:
                    f9:ae:c5:b0:6f:97:ae:a8:21:0c:5f:5c:6d:bb:6c:
                    68:c5:5a:14:59:3d:48:50:e0:53:1d:c6:f9:f2:b8:
                    09:af:65:ad:0e:a0:11:3d:e1:70:33:1f:1c:74:5b:
                    9e:95:06:05:2f:eb:33:6e:f3:93:5d:5e:b8:55:e0:
                    2e:c7:25:1f:4d:2a:a2:75:3c:cc:18:1d:4f:64:e6:
                    a5:4b:a9:19:ad:9a:07:50:b6:4d:ea:6a:c8:87:da:
                    64:7d:ad:65:9e:17:10:f8:1b:85:ee:26:50:18:3a:
                    83:11:78:61:c3:17:b6:85:a5:a7:0f:66:eb:c4:0b:
                    b5:6d:85:79:11:20:27:21:94:d3:cf:c4:33:6c:08:
                    e4:89:06:e2:3c:dd:0e:00:c0:c5:38:34:8e:89:22:
                    f4:56:e9:dd:ee:d7:29:78:c9:94:1b:c9:92:50:c6:
                    73:69:ab:c5:0f:aa:d5:9e:93:4b:0b:21:61:21:2e:
                    0b:0e:4d:b6:ea:8d:6e:82:2a:80:8d:50:5f:8e:9b:
                    02:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F8:4B:5D:9B:A0:74:79:64:A0:30:85:51:23:45:58:03:7C:BE:8E
            X509v3 Authority Key Identifier:
                keyid:36:DA:71:80:22:D5:4A:30:E9:3B:38:78:E7:B4:1A:3B:BA:D1:BA:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36DA718022D54A30E93B3878E7B41A3BBAD1BAEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/323830343a356166343a3a2f33322d3438203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5af4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:a1:99:59:eb:09:5c:94:77:73:20:89:cb:bc:d9:ca:53:78:
         1e:ca:82:8d:59:4e:5c:da:00:2b:ac:52:1a:3c:50:fe:e6:a4:
         55:f4:f2:13:d9:fa:33:81:ff:8e:54:4a:3c:39:f1:0b:fc:98:
         29:88:8b:68:94:92:66:27:af:fe:d2:fa:8c:c5:08:7c:61:27:
         24:07:45:03:db:14:0a:5c:4b:43:c8:c1:fd:32:93:2d:fb:e9:
         b0:7a:32:7c:c5:09:ef:5e:d3:bd:5d:56:16:62:24:5a:a1:ac:
         17:c3:1d:33:d0:7f:32:18:6e:d7:95:34:e9:92:3a:16:c7:70:
         32:66:89:af:8e:15:a1:7a:4c:40:00:87:38:da:49:d7:47:19:
         84:59:5e:7a:de:80:44:4f:37:3b:98:44:eb:b0:92:31:02:96:
         7d:f7:27:3e:69:72:58:7d:da:99:ea:f9:a2:70:bd:46:4e:6c:
         31:c9:73:de:54:4c:c6:e0:07:4e:2b:87:0a:16:5a:47:a3:47:
         fe:a6:77:19:10:ff:c5:57:c8:95:89:d2:22:14:c6:f0:e7:0a:
         6d:ac:47:b5:ef:bc:c3:34:9c:e6:96:8a:51:82:16:74:22:c4:
         9a:1a:e9:28:83:3a:da:a7:3c:7d:64:d4:5c:a5:ef:26:0c:7f:
         14:c1:71:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 23:30:08 2025 by rpki-client