Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33342d3334203d3e20323635393335.roa
File:                     323830343a343031633a3a2f33342d3334203d3e20323635393335.roa (raw, json)
Hash identifier:          Sahl2RiuVTohechxqH9kEgIw0rbG9MfR6lFxaweqFQI=
Subject key identifier:   7D:B9:6C:DA:5E:E2:C9:18:DF:FC:4E:73:22:02:D6:6A:45:5C:DB:8B
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       4742B11C470BC0E72CBA6C10B6F079CA439AD3CE
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33342d3334203d3e20323635393335.roa
Signing time:             Thu 06 Mar 2025 07:52:46 +0000
ROA not before:           Thu 06 Mar 2025 07:47:46 +0000
ROA not after:            Thu 05 Mar 2026 07:52:46 +0000
asID:                     265935
IP address blocks:        2804:401c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 21:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:42:b1:1c:47:0b:c0:e7:2c:ba:6c:10:b6:f0:79:ca:43:9a:d3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Mar  6 07:47:46 2025 GMT
            Not After : Mar  5 07:52:46 2026 GMT
        Subject: CN=7DB96CDA5EE2C918DFFC4E732202D66A455CDB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:fa:da:77:b7:d1:5f:08:b9:17:28:9b:9c:
                    ee:7a:f6:67:a4:63:24:eb:dc:24:f6:1b:99:c2:36:
                    d2:ef:d0:14:98:7c:1b:4d:2b:f6:7d:a7:91:97:d3:
                    07:f8:28:a1:25:4a:57:55:d2:38:63:42:fa:d7:57:
                    82:79:ad:fa:a3:7a:d5:ce:c3:8f:d1:50:c5:12:ac:
                    a8:1d:ea:c9:b7:8e:2b:fd:2e:d1:f5:6f:36:34:73:
                    3a:4d:61:0c:2d:cd:f8:ca:df:77:da:66:1d:59:7e:
                    c4:6f:ac:ff:40:82:9d:0d:8e:1e:6d:f4:89:23:8d:
                    fd:a1:be:88:92:63:93:cc:62:60:0f:c7:ad:17:20:
                    90:ab:89:ea:08:d6:19:98:a4:18:1a:20:44:d2:6a:
                    34:61:0e:ec:41:2b:2b:5e:7e:0e:4e:89:6f:f3:4d:
                    0b:bd:ef:27:a7:0b:5e:ba:dc:c6:23:59:ef:9c:29:
                    cb:d3:45:2e:b1:0c:4f:b1:bc:ef:ab:5e:30:1b:e8:
                    d9:3e:4e:08:08:88:35:87:1d:34:11:29:bc:b1:5b:
                    94:25:e0:17:3e:79:62:34:1c:0c:41:36:58:17:62:
                    78:ba:fc:c6:ba:6e:59:c8:cc:c2:5a:34:2d:c2:e0:
                    d0:e8:3f:6b:9e:c6:bb:57:2d:98:17:88:fd:4b:88:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B9:6C:DA:5E:E2:C9:18:DF:FC:4E:73:22:02:D6:6A:45:5C:DB:8B
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/323830343a343031633a3a2f33342d3334203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:401c::/34

    Signature Algorithm: sha256WithRSAEncryption
         23:23:f6:d7:56:3e:97:9d:29:ae:e9:40:38:4b:ba:97:a8:6b:
         56:09:1e:94:60:07:f1:98:db:75:5f:bd:14:24:ff:75:64:6f:
         80:34:0c:59:0e:bf:d5:00:88:4c:70:cb:fe:1f:04:77:5a:96:
         d9:c6:57:1e:66:81:e1:cc:cd:2a:03:74:c9:b3:cf:fc:b9:55:
         f7:60:f7:02:97:fa:90:7d:20:66:ab:55:5e:7c:c0:a2:08:b2:
         17:2b:ee:cd:cc:c1:ba:ce:c6:8b:06:a5:15:c6:45:bf:89:94:
         c9:47:e6:97:ea:c5:9c:63:12:6a:55:35:1e:a8:3c:6a:7f:33:
         5e:40:6f:24:eb:8b:d6:d1:1c:d1:0c:31:09:3a:11:54:d9:ed:
         33:4f:b8:d1:07:e1:c3:5b:2d:3b:92:67:c4:4a:89:61:3f:3d:
         ed:d8:b1:e9:25:b9:5e:e5:b6:a8:44:10:02:73:70:bd:40:7f:
         e7:d5:28:b3:4d:99:b8:33:43:88:bb:90:a9:a2:21:82:8d:4e:
         15:83:27:6e:aa:65:66:3d:17:43:46:53:9b:32:d2:7c:67:b3:
         20:07:98:b2:28:1f:c1:0b:70:79:16:97:6c:43:45:aa:0f:8a:
         89:7c:34:a3:d4:4e:03:02:fd:d2:d1:0f:60:53:63:64:55:df:
         b0:8e:a2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:25:39 2025 by rpki-client