Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33322d3332203d3e20323636313239.roa
File:                     323830343a336231383a3a2f33322d3332203d3e20323636313239.roa (raw, json)
Hash identifier:          GbKjVYWhpFS7gfUp9Fu6k36Ig85QCGLeKU9KK8kD24M=
Subject key identifier:   08:D0:EC:BD:3E:AF:D6:E9:86:BF:DF:8E:59:B7:A3:76:1E:7B:C7:13
Certificate issuer:       /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial:       56861B4F564A4BEA4D4EAB14FBC11321F59DB539
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33322d3332203d3e20323636313239.roa
Signing time:             Wed 05 Mar 2025 19:00:15 +0000
ROA not before:           Wed 05 Mar 2025 18:55:15 +0000
ROA not after:            Wed 04 Mar 2026 19:00:15 +0000
asID:                     266129
IP address blocks:        2804:3b18::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
                          rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:86:1b:4f:56:4a:4b:ea:4d:4e:ab:14:fb:c1:13:21:f5:9d:b5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
        Validity
            Not Before: Mar  5 18:55:15 2025 GMT
            Not After : Mar  4 19:00:15 2026 GMT
        Subject: CN=08D0ECBD3EAFD6E986BFDF8E59B7A3761E7BC713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1c:ce:e6:86:a7:92:b6:c3:51:cc:92:fd:58:
                    45:df:85:b9:ff:e7:69:cd:38:eb:85:b4:a9:09:39:
                    47:49:ab:44:d3:50:dd:1c:dd:07:30:50:ba:82:66:
                    59:70:29:e5:99:1c:8a:58:9f:5b:80:63:81:34:14:
                    df:0a:e8:75:8b:10:73:c1:e4:cf:aa:df:52:b3:f0:
                    38:65:52:f6:a6:9f:81:3f:de:ec:49:56:e7:e5:c6:
                    91:aa:06:c7:50:de:31:b9:6c:1e:23:27:2b:1b:a0:
                    59:76:e5:85:69:c3:18:dd:5f:d6:a8:a4:af:91:aa:
                    de:b8:71:b1:5c:bc:26:13:9b:fe:85:27:4c:85:6d:
                    b4:96:22:3f:0a:70:02:33:49:18:ce:e9:fb:66:30:
                    b0:3f:49:bf:0c:f5:32:d8:4a:89:50:6a:d7:5b:8b:
                    bd:1d:26:57:c8:73:69:b2:80:36:c3:41:21:97:3b:
                    0f:2a:72:96:06:68:92:e2:5d:c3:11:88:b7:58:46:
                    93:0d:83:de:da:bf:53:d3:fc:cd:d1:21:da:c6:7a:
                    98:b6:d2:7d:7a:20:88:54:47:36:6f:8c:b1:d5:96:
                    8f:fe:19:26:42:5f:17:d0:4a:00:bc:ae:c5:88:5f:
                    5a:bc:0e:b1:23:3f:7c:10:47:3b:6f:4f:f6:c3:da:
                    b0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D0:EC:BD:3E:AF:D6:E9:86:BF:DF:8E:59:B7:A3:76:1E:7B:C7:13
            X509v3 Authority Key Identifier:
                keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a3a2f33322d3332203d3e20323636313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b18::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:d2:85:f9:d9:ed:5a:59:d7:39:97:c1:3b:9d:24:d6:2f:
         7a:56:16:9b:73:db:d9:c9:d6:5f:53:b7:ab:5e:47:dc:31:71:
         56:1d:39:b1:de:db:29:0a:b4:3c:28:65:fb:9d:fa:e7:e4:2b:
         80:f1:d9:48:42:9e:24:c7:67:cc:0d:91:84:62:ff:05:40:f7:
         37:9e:49:0a:e2:80:e1:41:0b:68:1d:1f:dc:7c:3f:18:45:1d:
         fa:a2:49:4c:cb:62:3d:e7:f2:83:6d:e7:27:e7:52:2b:c9:fa:
         f2:e5:62:15:8a:71:e5:27:f3:4b:ef:42:df:75:ad:a1:3b:92:
         11:f1:bb:48:0e:62:c6:cf:4e:7b:07:92:00:11:2c:ec:52:d9:
         29:6d:5a:1c:1b:25:60:79:7f:c3:98:84:9c:da:36:ba:7f:19:
         2d:57:ba:12:11:68:76:3d:2f:04:81:a8:f9:39:c2:41:c7:b2:
         32:a1:ec:76:f4:4a:94:a0:63:2d:10:2e:1d:9a:00:ae:c2:47:
         51:25:19:f7:d3:1c:0d:d0:f3:e6:44:6b:2e:15:ab:94:51:fb:
         c1:97:e7:a4:97:6e:bf:b4:3d:2c:00:6a:dc:1e:67:de:b8:1d:
         ae:af:2e:6e:41:e8:47:44:b8:4d:d3:fb:49:58:d0:7f:fd:3a:
         56:34:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:48:22 2025 by rpki-client