Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33332d3333203d3e20323732373037.roa
File:                     323830343a383736383a3a2f33332d3333203d3e20323732373037.roa (raw, json)
Hash identifier:          9wMNbn35iPV6Z5nn+z2zkRzsgLy4KOOeNbcF1dZyZGc=
Subject key identifier:   A4:FE:D4:2A:E2:73:74:0D:7C:C1:27:DE:D1:93:18:A5:2B:21:D9:9D
Certificate issuer:       /CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
Certificate serial:       1963964B73C54CEDD102FA39F56D8885D00A5A22
Authority key identifier: 7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33332d3333203d3e20323732373037.roa
Signing time:             Tue 25 Mar 2025 17:23:41 +0000
ROA not before:           Tue 25 Mar 2025 17:18:41 +0000
ROA not after:            Tue 24 Mar 2026 17:23:41 +0000
asID:                     272707
IP address blocks:        2804:8768::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl
                          rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:63:96:4b:73:c5:4c:ed:d1:02:fa:39:f5:6d:88:85:d0:0a:5a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD
        Validity
            Not Before: Mar 25 17:18:41 2025 GMT
            Not After : Mar 24 17:23:41 2026 GMT
        Subject: CN=A4FED42AE273740D7CC127DED19318A52B21D99D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:15:ec:b2:af:7c:df:27:88:dd:91:e0:e3:69:
                    ec:44:36:01:44:95:c2:51:8c:ca:cc:01:a3:c6:2b:
                    f9:f3:21:44:83:7a:9a:4a:25:8b:ea:e9:1d:d1:fd:
                    58:83:a9:bb:7e:bd:61:e2:40:6a:ce:8a:27:55:c7:
                    71:c7:cb:a2:6d:6b:08:44:44:26:f8:7e:0c:60:22:
                    e8:5a:ef:c6:0c:33:71:07:99:6a:8a:0a:f3:1f:3e:
                    95:c9:28:06:88:ba:fc:ba:b1:09:1e:26:6b:75:ab:
                    34:43:97:62:ea:41:b3:06:57:7e:d0:34:27:80:45:
                    a2:84:9c:1c:8c:6f:a5:c3:ca:73:6a:9d:6b:58:cd:
                    42:71:7d:5d:23:ac:88:48:b5:91:a6:35:0b:ac:3e:
                    e5:ce:b9:02:bd:8c:24:92:96:9f:e0:08:91:e6:2d:
                    57:30:4d:54:34:a7:6c:b2:ab:dc:61:76:3f:3b:80:
                    00:7f:a3:e0:34:08:f9:b8:41:31:b3:33:aa:a0:09:
                    a8:b8:c7:d0:78:c9:5e:68:22:c2:b5:47:8e:3e:11:
                    59:80:b7:ad:c3:0d:ea:15:8e:01:a7:72:df:c1:5a:
                    13:c0:a8:09:72:66:5d:43:cc:d0:73:b5:bc:d3:ba:
                    75:5a:89:50:16:7b:a7:07:44:ca:24:2b:26:47:d3:
                    07:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FE:D4:2A:E2:73:74:0D:7C:C1:27:DE:D1:93:18:A5:2B:21:D9:9D
            X509v3 Authority Key Identifier:
                keyid:7C:0C:EB:BA:D1:3A:69:AA:7C:9B:AD:74:9E:C4:E6:9A:AE:4D:43:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C0CEBBAD13A69AA7C9BAD749EC4E69AAE4D43CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/323830343a383736383a3a2f33332d3333203d3e20323732373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8768::/33

    Signature Algorithm: sha256WithRSAEncryption
         2f:08:c2:7b:ff:4f:3b:6c:fd:b7:d9:f3:74:fc:4b:12:03:14:
         0f:f9:ce:d4:15:1f:da:57:d8:40:e7:28:46:14:ca:75:78:73:
         2f:9a:3a:df:6d:d6:40:ac:81:ca:9e:4e:09:83:d9:18:b5:91:
         f0:eb:14:69:cf:4b:9f:79:21:6c:2b:60:98:bd:45:c2:57:f0:
         4e:a5:6f:8e:96:ba:2c:00:65:6c:92:fa:3a:a3:76:e0:f0:9e:
         7a:0c:11:bc:01:67:df:5e:f5:7b:1b:db:1e:e1:33:be:65:10:
         f3:cd:c4:0c:f4:20:3b:3b:02:87:a9:d1:1a:2f:7d:76:1f:bf:
         ea:e6:28:93:1f:ff:35:c9:4a:a0:5a:60:1f:3b:75:66:00:e8:
         f7:d8:a8:ca:5e:0f:eb:5c:25:99:dc:e1:52:bb:dd:91:12:5e:
         4a:87:4a:d7:6d:4b:9c:75:d4:9a:6f:99:a0:30:94:4f:b3:15:
         a3:f2:2b:3f:08:6a:0c:8d:29:71:ed:84:70:ff:f9:cb:a3:1d:
         67:e2:be:72:c8:89:7a:90:49:a7:1f:61:33:cb:28:7c:3d:80:
         0a:28:78:31:d6:5c:80:b4:d9:be:b7:f9:40:96:4c:b5:72:d5:
         cc:b8:a2:ec:c9:68:4b:88:5a:74:02:3c:e4:a3:3f:39:c1:97:
         1e:9f:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:08:17 2025 by rpki-client