Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a383030303a3a2f33342d3334203d3e20323636313239.roa
File:                     323830343a336231383a383030303a3a2f33342d3334203d3e20323636313239.roa (raw, json)
Hash identifier:          DaW3yi1TJtsJx/peBzixuGADHkeHAnQvEzQRbtmyG5U=
Subject key identifier:   26:25:89:9A:EC:44:A5:0A:4E:93:B9:7A:61:30:42:B8:55:E7:E7:3F
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       73A5871755F3D0F5B6B3AC567971EF236A89C6E1
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a383030303a3a2f33342d3334203d3e20323636313239.roa
Signing time:             Wed 05 Mar 2025 19:00:15 +0000
ROA not before:           Wed 05 Mar 2025 18:55:15 +0000
ROA not after:            Wed 04 Mar 2026 19:00:15 +0000
asID:                     266129
IP address blocks:        2804:3b18:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a5:87:17:55:f3:d0:f5:b6:b3:ac:56:79:71:ef:23:6a:89:c6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Mar  5 18:55:15 2025 GMT
            Not After : Mar  4 19:00:15 2026 GMT
        Subject: CN=2625899AEC44A50A4E93B97A613042B855E7E73F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:77:6a:90:8c:26:cf:e2:bc:77:db:03:a6:
                    45:af:87:10:7b:95:f0:bc:50:1c:10:f0:35:f2:f9:
                    fe:5d:da:c5:fc:2b:f8:da:03:67:05:08:03:c1:44:
                    34:7d:f0:76:b2:01:f8:f0:9d:e0:c7:e8:62:56:5e:
                    fd:5f:c6:83:10:e4:d7:d9:3b:44:0c:32:88:0d:68:
                    2d:69:41:29:ea:97:2e:cf:83:af:ce:2f:f6:37:da:
                    c1:37:0a:5b:45:55:fb:d3:39:d0:2a:e4:e7:73:47:
                    f8:43:fe:1d:27:d1:10:50:8e:1b:1f:29:2c:ce:e2:
                    30:10:7e:a7:0e:ff:d1:a3:6c:a4:7c:7f:c0:0b:3b:
                    99:25:0b:97:10:fb:9e:3b:fa:2b:4d:cd:1a:e0:cb:
                    8d:99:6b:d8:bb:5a:17:5b:9c:a7:fb:18:ef:d9:e0:
                    e0:04:9e:37:6f:dc:28:22:ea:4c:7d:13:d5:7a:fb:
                    77:07:a3:b3:c9:23:15:0a:f3:de:b8:d4:0c:61:60:
                    53:c7:49:5d:b3:f4:eb:b2:88:21:26:f2:32:c1:cb:
                    2f:0b:40:4b:c3:84:93:13:31:46:01:8f:92:51:42:
                    62:a2:ff:98:03:88:d4:9e:fb:8c:50:30:ce:d9:c0:
                    10:7f:1b:2d:d3:a3:86:39:a0:b1:82:1a:e0:c4:b4:
                    4d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:25:89:9A:EC:44:A5:0A:4E:93:B9:7A:61:30:42:B8:55:E7:E7:3F
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a383030303a3a2f33342d3334203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         49:1f:f9:4f:d2:ff:21:0d:86:96:c8:0f:2b:40:28:b5:9d:ff:
         5f:ea:38:a7:f7:2c:dc:56:fd:5b:8c:00:91:81:c8:bb:7b:ea:
         41:a3:c0:79:20:45:bf:82:cb:89:5e:91:56:13:84:5b:e6:38:
         74:b6:ab:c3:d4:c0:c3:30:9e:de:bf:9f:c7:be:5c:b7:69:00:
         88:a5:83:02:4e:6b:e3:02:d5:58:a0:33:1d:e2:59:7b:28:f7:
         fe:c8:10:8e:f0:a4:b3:93:f5:d0:82:d8:b8:d8:7c:6a:90:64:
         fc:f6:87:54:fc:b5:94:3d:dc:81:85:92:39:a9:6e:bc:ae:f6:
         99:48:a2:0a:67:ba:05:bb:a5:c2:81:01:1d:93:73:29:6d:6e:
         f8:81:db:bd:3d:ff:8e:6e:48:19:8f:22:3e:cf:94:e1:2c:d9:
         e3:88:e3:ae:e5:85:6f:cc:be:d9:7a:39:f0:ae:ac:36:08:ed:
         c1:9d:d1:c9:f9:39:0f:31:ec:5a:da:4d:f2:12:ef:91:0a:09:
         52:3a:2b:0c:e4:cd:cf:76:fd:54:46:3e:a3:c0:8f:19:2f:e2:
         09:9d:f1:9b:84:c9:89:2d:1d:8f:2e:91:d5:8d:b6:eb:56:ba:
         d5:7b:78:dd:51:68:8f:62:b2:b7:30:b4:0b:5e:0a:8a:39:70:
         c8:b1:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:32:25 2025 by rpki-client