Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/323830343a366166633a323a3a2f34372d3437203d3e20323730333730.roa
File:                     323830343a366166633a323a3a2f34372d3437203d3e20323730333730.roa (raw, json)
Hash identifier:          GaknIdLjhRyMuM+KZjIfMiI2+3fKWm8ALqR2m5gvgfg=
Subject key identifier:   39:30:76:E7:5E:9D:29:BB:5C:44:1A:27:35:60:20:BF:BF:22:52:17
Certificate issuer:       /CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
Certificate serial:       521C2B09AABAEF681A0762FF6ABEE01800933581
Authority key identifier: C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/323830343a366166633a323a3a2f34372d3437203d3e20323730333730.roa
Signing time:             Thu 06 Mar 2025 10:07:43 +0000
ROA not before:           Thu 06 Mar 2025 10:02:43 +0000
ROA not after:            Thu 05 Mar 2026 10:07:43 +0000
asID:                     270370
IP address blocks:        2804:6afc:2::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl
                          rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 23:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1c:2b:09:aa:ba:ef:68:1a:07:62:ff:6a:be:e0:18:00:93:35:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53FFF72C11B3649D5A047FD42D3DD312B1842CF
        Validity
            Not Before: Mar  6 10:02:43 2025 GMT
            Not After : Mar  5 10:07:43 2026 GMT
        Subject: CN=393076E75E9D29BB5C441A27356020BFBF225217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:36:b0:8a:1d:2d:fa:7a:9f:66:6a:87:fd:c0:
                    bf:48:29:79:0b:4d:c3:93:3e:a5:a7:02:48:70:99:
                    3c:89:1c:8c:8b:9e:ae:bc:9f:09:f7:ea:46:60:b1:
                    97:37:23:c5:ee:da:75:bf:7a:40:ac:a8:5b:bb:aa:
                    46:7d:53:85:5c:57:a4:09:52:8c:a1:46:bc:b2:eb:
                    92:c4:af:38:37:f8:fe:a1:8f:bf:1b:d7:4c:f9:53:
                    83:0c:27:f4:12:b2:5e:2b:d4:cf:77:d9:07:37:92:
                    25:04:9a:2e:1a:b1:8b:ae:c5:2d:f1:36:d6:11:52:
                    dc:f7:4a:50:66:ae:57:3d:39:0a:ef:36:6f:43:b7:
                    de:38:57:29:7d:7b:ea:75:47:58:c1:fa:61:4c:7d:
                    e2:a1:93:84:fa:5a:fa:40:86:5e:9e:79:59:26:d6:
                    4a:fa:27:3a:c0:ec:77:2a:32:a1:aa:c9:b9:17:22:
                    c1:02:fb:6d:e4:67:93:d9:9e:43:5d:f0:fd:82:ec:
                    2a:64:cf:27:37:a2:0c:df:91:15:0c:65:db:bd:1c:
                    9e:0f:05:91:e7:f4:55:f3:cf:70:c9:3c:2d:de:40:
                    c2:38:6e:ee:6b:b5:53:46:16:00:3d:9d:20:84:a5:
                    33:3b:5b:42:11:61:15:7f:43:32:2b:f2:ba:66:b2:
                    16:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:76:E7:5E:9D:29:BB:5C:44:1A:27:35:60:20:BF:BF:22:52:17
            X509v3 Authority Key Identifier:
                keyid:C5:3F:FF:72:C1:1B:36:49:D5:A0:47:FD:42:D3:DD:31:2B:18:42:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53FFF72C11B3649D5A047FD42D3DD312B1842CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2t3bGZXz8mJDrDdmZ6NDc2xZDsbjfgErhrjWe7Hv8oQM/1/323830343a366166633a323a3a2f34372d3437203d3e20323730333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6afc:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         a4:0a:91:4e:18:cd:a3:32:fd:da:1f:b9:eb:92:07:4a:a1:bd:
         ef:e1:7f:30:e9:8a:5e:1d:79:ad:39:86:d8:e6:97:bd:db:06:
         c3:e5:29:0b:3e:f2:83:95:86:d0:a7:97:1e:31:b9:5c:80:96:
         b5:96:38:d6:03:08:af:47:84:03:a1:8a:da:01:b3:92:89:d1:
         ac:ac:c9:2b:5f:78:61:4a:7a:36:6f:77:23:a3:7b:2d:1f:9b:
         cc:28:4f:05:03:f3:c0:09:c1:81:fa:3f:de:81:26:47:29:7e:
         66:26:f2:e5:75:21:73:f3:d8:1c:13:41:ad:e3:b5:49:ae:53:
         ce:c6:70:0c:7b:5b:a3:27:66:b0:f5:db:53:d8:99:a0:c8:c4:
         e2:0a:13:67:77:2d:a9:24:b0:8e:22:c9:7b:8b:3c:e8:2c:c5:
         54:f8:0b:d8:6a:58:57:4b:2f:e2:97:4b:6e:74:b5:eb:4b:59:
         da:58:14:10:73:51:47:04:e2:d4:97:fa:5a:68:53:24:22:36:
         9b:b6:b3:43:31:ce:e4:a2:f3:9b:5f:78:51:1b:9f:59:6e:ce:
         4d:d1:a2:7f:5e:7f:9e:3e:2d:30:36:01:9b:12:b6:15:3f:a5:
         d7:f4:65:ce:7f:9b:27:a1:8a:73:be:ff:e3:d3:80:15:0b:07:
         a4:55:a8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:04 2025 by rpki-client