Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/323830343a353832303a3a2f33322d3634203d3e20323638313038.roa
File:                     323830343a353832303a3a2f33322d3634203d3e20323638313038.roa (raw, json)
Hash identifier:          1/hL21AnYzEv9XCYu4e2dntqsjBsyNnumanmojhuPck=
Subject key identifier:   85:C1:6A:7D:2D:E8:0C:F7:4D:8C:A6:5F:E2:AC:33:EC:06:65:9B:69
Certificate issuer:       /CN=1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7
Certificate serial:       3925FBAF999A05A8D55689CA0264E7763800FABE
Authority key identifier: 1C:7D:F0:C4:6B:39:4E:8D:79:C9:D3:1B:A2:F0:1A:E6:76:17:82:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/323830343a353832303a3a2f33322d3634203d3e20323638313038.roa
Signing time:             Thu 06 Mar 2025 08:45:48 +0000
ROA not before:           Thu 06 Mar 2025 08:40:48 +0000
ROA not after:            Thu 05 Mar 2026 08:45:48 +0000
asID:                     268108
IP address blocks:        2804:5820::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl
                          rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:25:fb:af:99:9a:05:a8:d5:56:89:ca:02:64:e7:76:38:00:fa:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7
        Validity
            Not Before: Mar  6 08:40:48 2025 GMT
            Not After : Mar  5 08:45:48 2026 GMT
        Subject: CN=85C16A7D2DE80CF74D8CA65FE2AC33EC06659B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:8b:76:3a:4d:81:d9:11:a5:61:39:43:5c:
                    de:0e:21:d9:29:3b:00:ee:20:b2:05:22:02:f9:75:
                    eb:a1:a2:1a:6a:a6:cc:ce:a1:d2:75:25:aa:f9:d0:
                    fa:18:f5:1e:cd:d6:6e:cf:38:43:c4:14:00:eb:6a:
                    1e:96:3c:62:e1:36:6b:45:63:38:62:5c:46:6d:17:
                    c2:23:96:13:e2:48:73:38:94:8d:5e:90:1c:0d:f0:
                    e9:c8:44:31:69:19:08:27:08:dc:e5:f5:14:8d:ee:
                    e0:fa:33:cd:2f:af:c6:82:e6:c4:25:5b:80:89:96:
                    43:d2:60:18:48:5c:0f:1a:2c:04:38:bf:b7:c1:24:
                    49:d1:2d:2e:db:03:9e:ba:cf:c1:b3:65:cf:d5:77:
                    36:83:46:f8:91:6f:c4:0f:f0:70:58:2d:73:f7:93:
                    c1:cf:6a:29:58:ad:1a:1e:99:ac:cf:e1:ca:90:78:
                    81:cf:fa:db:54:9a:46:c0:f4:6a:5d:9d:76:18:8d:
                    be:ca:4d:59:c9:ab:29:a9:5c:75:81:ab:0c:50:00:
                    b1:41:23:0d:f2:af:ce:19:e2:84:4b:6d:49:3c:d2:
                    4d:9e:93:95:4f:6c:0a:fb:96:f0:e7:72:33:69:53:
                    57:cc:26:24:b2:76:cd:1f:af:aa:d0:e2:f5:d8:57:
                    d8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C1:6A:7D:2D:E8:0C:F7:4D:8C:A6:5F:E2:AC:33:EC:06:65:9B:69
            X509v3 Authority Key Identifier:
                keyid:1C:7D:F0:C4:6B:39:4E:8D:79:C9:D3:1B:A2:F0:1A:E6:76:17:82:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7DF0C46B394E8D79C9D31BA2F01AE6761782C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2evpU4jeSkgqCmXfsZvYY8DxcH7RXdKmTJSg7sSsowWP/1/323830343a353832303a3a2f33322d3634203d3e20323638313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5820::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:10:d5:86:4b:12:a5:b7:44:6f:a3:b1:9d:47:76:71:cb:31:
         6b:93:b4:a1:03:9b:7e:8d:88:19:19:8d:17:7e:79:14:7a:81:
         4f:2d:ea:b4:07:3e:8c:4a:35:66:21:43:65:03:16:23:c0:64:
         70:ea:4a:ea:e5:e8:fa:8a:da:41:2c:91:53:d3:7e:43:0a:3f:
         9a:86:82:d8:6e:83:6a:ae:0b:68:b8:66:d2:3a:4b:45:2c:1b:
         c8:4c:cb:9b:2a:23:0a:24:8d:be:1a:8e:90:3e:c7:eb:4c:ec:
         b4:95:25:4a:fa:40:ab:48:9b:4a:84:d2:26:22:66:e1:a8:7a:
         13:81:fe:44:75:7c:d3:09:f1:a1:45:ac:9a:db:66:97:3e:97:
         12:58:3e:36:44:b5:a1:64:88:b7:38:27:7c:f4:4a:f7:cc:8b:
         8b:6e:c4:6c:49:d5:6e:f8:91:f3:8d:d3:a6:bb:0b:0f:1f:98:
         17:9a:7f:2d:44:6e:94:44:f5:94:27:33:6f:fb:54:22:a3:43:
         31:56:0b:59:2e:2d:74:3e:26:47:3b:b4:2a:95:6a:3f:c4:2c:
         7a:5b:e3:0a:9d:72:bc:65:38:6e:f0:44:3e:85:f4:4a:85:3b:
         c1:53:f9:82:b5:1b:a8:e4:d2:e7:5e:f8:bf:86:c9:43:9d:e4:
         a9:86:6d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:45:31 2025 by rpki-client