Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3332203d3e20323732373037.roa
File:                     323830343a383736383a3a2f33322d3332203d3e20323732373037.roa (raw, json)
Hash identifier:          T13altrHbrESkdcVSuUtCKcepxS/dv2XVwEvls0kiz4=
Subject key identifier:   B4:D8:65:25:54:08:BE:37:C9:CE:74:9D:9B:10:45:1F:15:FE:26:42
Certificate issuer:       /CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
Certificate serial:       3C5B2E3B9EA49F41565CA2D1AD4EE630E75155D1
Authority key identifier: 7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3332203d3e20323732373037.roa
Signing time:             Tue 25 Mar 2025 17:23:41 +0000
ROA not before:           Tue 25 Mar 2025 17:18:41 +0000
ROA not after:            Tue 24 Mar 2026 17:23:41 +0000
asID:                     272707
IP address blocks:        2804:8768::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl
                          rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5b:2e:3b:9e:a4:9f:41:56:5c:a2:d1:ad:4e:e6:30:e7:51:55:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
        Validity
            Not Before: Mar 25 17:18:41 2025 GMT
            Not After : Mar 24 17:23:41 2026 GMT
        Subject: CN=B4D865255408BE37C9CE749D9B10451F15FE2642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:c7:27:ba:a9:37:fe:18:de:4b:e2:8f:b3:
                    39:4c:55:b6:9e:d8:4f:b8:27:67:ac:1d:91:1a:71:
                    98:39:20:9f:90:71:39:56:1c:91:25:6d:b0:e0:7c:
                    dd:19:32:a3:ef:25:a4:2e:d2:0a:89:36:7f:fa:0c:
                    39:79:2f:e8:c1:bb:9e:bb:aa:fe:8a:34:f3:56:54:
                    28:27:9f:8b:c4:8a:66:11:2c:18:7b:dd:e9:66:69:
                    22:a4:c4:f4:ca:75:c4:36:f7:ff:6c:69:60:45:49:
                    ee:05:b3:50:36:b0:ba:f7:9e:4b:41:ed:68:18:38:
                    37:8e:b1:47:bf:84:fe:75:eb:c9:68:0e:8a:5a:61:
                    d3:26:97:f1:cd:df:98:63:c7:26:fb:f4:18:80:9a:
                    d8:34:bc:95:e8:b2:a3:bf:c4:a6:0f:5f:4b:ed:da:
                    96:a6:de:9b:11:ce:3a:0b:33:b4:37:ef:f8:6e:a2:
                    4a:89:72:ed:dd:a7:44:54:71:16:f9:98:27:45:b0:
                    cd:00:bb:06:c2:86:ad:80:b4:5c:69:6a:39:d3:c8:
                    3c:c5:70:30:53:5b:82:9b:bc:db:ae:89:a7:83:b8:
                    4d:4e:f3:cf:4b:3f:71:4d:13:19:e2:3c:71:cf:3f:
                    04:b9:45:cf:df:08:4c:01:7d:e5:ed:bf:99:f0:e0:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D8:65:25:54:08:BE:37:C9:CE:74:9D:9B:10:45:1F:15:FE:26:42
            X509v3 Authority Key Identifier:
                keyid:7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33322d3332203d3e20323732373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8768::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:87:ef:5a:72:fd:27:73:a4:78:42:a6:95:e5:a1:42:82:9f:
         41:da:0a:8e:24:87:45:68:c1:ef:4b:50:67:2c:c9:d3:9d:69:
         8a:85:39:d5:d3:8c:66:73:02:01:55:52:91:16:9a:64:d3:8e:
         b5:08:ab:d0:67:6f:ee:a9:0d:7d:ad:91:ff:c9:1c:96:9a:86:
         5d:4a:05:c7:c0:0f:79:11:8e:1b:d2:64:4e:c1:f2:d2:9c:9e:
         d9:2f:b9:e6:02:77:fa:4b:5f:89:d6:87:c5:f8:19:16:06:12:
         ba:31:27:46:81:8f:f6:5a:9f:64:34:e6:ab:dc:e2:df:08:f8:
         0b:0c:d1:49:19:3f:62:2e:26:a7:4d:a9:05:b3:a8:a2:91:86:
         64:ac:2e:06:a8:82:e3:23:ad:3a:57:75:a4:8f:79:1c:cc:22:
         cf:fc:da:b1:f1:e6:a2:3a:0b:95:27:02:d2:a5:b1:22:5d:4a:
         75:2f:0e:5c:fb:83:48:e6:4c:9e:84:5c:4f:0d:be:15:d0:ae:
         35:84:00:b8:b3:38:62:a1:b3:bf:ff:b5:76:9b:f9:75:b3:79:
         fd:a7:ba:36:ca:70:44:81:86:eb:03:db:00:4f:b7:cc:0f:49:
         e2:1b:37:56:16:5b:d7:3f:cb:e6:11:bd:be:92:c5:5e:f4:f5:
         ef:95:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:08:18 2025 by rpki-client