Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d313238203d3e20323636303439.roa
File:                     323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (raw, json)
Hash identifier:          lBH1FxH8bvnjW6ICwqPaSRr6hN77mRplln45Y3jcQt0=
Subject key identifier:   6B:D0:B9:FE:49:45:52:A8:F0:A3:07:BB:C1:59:2B:C9:3E:0F:53:79
Certificate issuer:       /CN=E4B9E904C3F25D4723B3E8679E422C8F20C7117B
Certificate serial:       52626752380E4F39F383F58E0768EAF0A23A74BD
Authority key identifier: E4:B9:E9:04:C3:F2:5D:47:23:B3:E8:67:9E:42:2C:8F:20:C7:11:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d313238203d3e20323636303439.roa
Signing time:             Thu 13 Mar 2025 03:45:20 +0000
ROA not before:           Thu 13 Mar 2025 03:40:20 +0000
ROA not after:            Thu 12 Mar 2026 03:45:20 +0000
asID:                     266049
IP address blocks:        2804:39c4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.crl
                          rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 17:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:62:67:52:38:0e:4f:39:f3:83:f5:8e:07:68:ea:f0:a2:3a:74:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B9E904C3F25D4723B3E8679E422C8F20C7117B
        Validity
            Not Before: Mar 13 03:40:20 2025 GMT
            Not After : Mar 12 03:45:20 2026 GMT
        Subject: CN=6BD0B9FE494552A8F0A307BBC1592BC93E0F5379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:8c:41:e8:2d:cd:c2:0d:0a:cc:c7:8b:9e:
                    0c:aa:ab:a2:6f:d0:f8:4d:0d:3b:bc:f8:3b:c0:43:
                    07:4d:a5:18:8e:aa:92:5a:4c:d5:ee:d2:b5:d2:6e:
                    20:74:6b:af:5b:6b:64:1d:d0:25:88:6e:59:ba:da:
                    83:8d:a5:61:52:f9:65:af:e0:f6:32:b5:28:aa:09:
                    eb:99:71:09:01:2d:9c:b4:ea:04:0d:be:22:de:29:
                    3a:aa:5e:ee:33:57:d9:1c:f2:5a:a9:ad:41:a9:7f:
                    41:eb:b6:30:70:54:60:b4:e5:4b:cc:17:9e:a8:81:
                    35:8d:2b:5d:2a:46:dd:5e:34:11:a6:2f:1f:0d:2d:
                    12:59:c2:27:b8:42:cf:56:52:f9:40:01:ee:7a:31:
                    44:01:b4:1f:50:5f:fa:86:6f:6b:9a:cf:a7:63:3b:
                    47:8a:7f:ab:e5:72:97:db:e1:39:18:18:30:14:b1:
                    cb:33:be:96:61:cf:e1:a8:70:b2:0f:b8:b8:75:e4:
                    a2:21:71:47:16:7b:1c:fd:12:dc:36:a2:b0:5f:7d:
                    95:46:91:94:b0:63:26:29:0c:cf:fb:fb:6d:14:24:
                    47:e3:88:53:ce:9d:72:bb:77:4c:f4:bf:b3:3f:be:
                    79:93:f5:16:b2:2b:3e:01:e0:14:1c:dc:75:95:5d:
                    ce:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D0:B9:FE:49:45:52:A8:F0:A3:07:BB:C1:59:2B:C9:3E:0F:53:79
            X509v3 Authority Key Identifier:
                keyid:E4:B9:E9:04:C3:F2:5D:47:23:B3:E8:67:9E:42:2C:8F:20:C7:11:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B9E904C3F25D4723B3E8679E422C8F20C7117B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d313238203d3e20323636303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:33:f6:ec:d0:4b:e0:e3:8b:b5:38:c7:28:20:fd:b3:91:a7:
         96:d3:d5:7d:d3:2f:5e:23:ab:ee:db:93:de:62:06:bd:d5:03:
         c3:ce:50:3a:ee:17:bb:a7:24:4e:7e:b8:3a:7d:db:6d:06:c6:
         8f:d2:38:ee:b0:73:7c:38:04:f5:66:92:8b:19:72:50:4f:1b:
         d4:b8:79:9e:43:bb:a0:a9:f9:43:90:c8:d7:7d:d6:14:5f:50:
         13:f5:df:ee:04:1f:3a:8d:f0:fd:e1:58:56:7d:4d:19:0b:7f:
         fb:31:7e:7a:86:68:42:a8:e5:04:a1:4e:28:48:3a:ac:82:3d:
         2f:2e:96:60:c1:db:7a:a9:73:43:7f:1c:b5:92:ea:c3:16:7d:
         c6:93:94:48:09:45:41:f2:7b:68:3b:db:aa:b1:45:00:44:5c:
         72:50:4f:19:1d:06:0e:42:f7:83:13:43:14:19:ab:3c:b7:74:
         39:50:30:bd:30:ec:73:99:47:a3:c4:b7:9c:50:e4:4a:70:b0:
         06:4c:1c:83:1a:b0:b0:85:ff:84:d0:a3:b0:1e:ae:12:21:1b:
         0c:5b:88:9d:1e:8b:12:c8:1d:f7:65:9d:de:9a:c4:3c:8e:09:
         17:95:ea:1e:bd:5e:54:7c:60:7e:76:0e:55:0c:62:6d:0f:69:
         af:9a:74:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:19:49 2025 by rpki-client