Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/323830343a336234633a3a2f33322d313238203d3e20323636313430.roa
File:                     323830343a336234633a3a2f33322d313238203d3e20323636313430.roa (raw, json)
Hash identifier:          wtL9IYalkHyva3LZqTtTEMQ7BxCRTX/aVoPlnkJnyRE=
Subject key identifier:   5C:CE:D0:82:14:3E:BD:CD:FA:F8:16:A5:21:58:C2:57:72:04:B2:1D
Certificate issuer:       /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial:       51A85EA60426B1A9D87FBD78573E13D8991AA1C7
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/323830343a336234633a3a2f33322d313238203d3e20323636313430.roa
Signing time:             Thu 06 Mar 2025 23:07:13 +0000
ROA not before:           Thu 06 Mar 2025 23:02:13 +0000
ROA not after:            Thu 05 Mar 2026 23:07:13 +0000
asID:                     266140
IP address blocks:        2804:3b4c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
                          rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a8:5e:a6:04:26:b1:a9:d8:7f:bd:78:57:3e:13:d8:99:1a:a1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
        Validity
            Not Before: Mar  6 23:02:13 2025 GMT
            Not After : Mar  5 23:07:13 2026 GMT
        Subject: CN=5CCED082143EBDCDFAF816A52158C2577204B21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:dd:87:b5:f6:b0:a7:8a:0d:a1:49:55:98:
                    2b:23:f6:38:59:10:d7:51:cc:0e:f6:09:d9:3a:49:
                    30:ae:19:f1:b1:1e:20:e9:a6:9f:4f:f1:f8:00:6b:
                    cc:d0:10:77:64:f5:5f:1a:8f:50:09:a5:d7:73:b0:
                    ae:f3:f2:b2:cf:39:f7:5e:31:93:39:5f:ee:ef:eb:
                    fc:6a:ae:d0:c1:2f:e9:a0:9c:a0:b2:c8:71:12:fb:
                    38:b8:68:c5:b1:bd:f4:89:49:42:99:0c:46:5d:7d:
                    3e:88:11:8f:8b:b3:80:90:85:75:53:76:40:f5:77:
                    b0:3d:ba:4c:0d:f2:78:0f:76:4b:c2:82:92:05:54:
                    66:6b:bb:6e:81:00:a5:c3:91:f4:de:91:e6:b4:66:
                    69:8f:5a:89:d4:9e:a2:f5:d2:fa:34:28:db:55:48:
                    89:ce:fc:69:e6:91:77:38:1a:e4:b1:ac:d8:74:68:
                    b8:5a:f2:0b:36:d5:90:43:87:56:5d:4a:22:fe:b8:
                    9b:bf:90:6a:6c:b3:80:21:03:f1:45:d1:2c:9d:f5:
                    e3:89:36:a6:63:fe:60:bb:d5:f3:b0:42:34:bc:7f:
                    29:9a:69:1e:6d:ba:09:92:25:88:b2:3a:2b:e8:a8:
                    04:00:b4:fb:2d:31:01:c7:70:4a:07:c3:6e:2e:26:
                    89:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CE:D0:82:14:3E:BD:CD:FA:F8:16:A5:21:58:C2:57:72:04:B2:1D
            X509v3 Authority Key Identifier:
                keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/323830343a336234633a3a2f33322d313238203d3e20323636313430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:f4:19:ca:f9:3d:53:8c:68:ae:b9:dd:a1:9d:47:9f:54:32:
         d2:f9:6e:9b:98:0d:01:5d:60:b1:9a:21:f5:83:69:99:51:0b:
         a9:b7:49:38:73:e7:f6:8c:72:a6:b0:57:5d:0d:d3:d7:bf:27:
         09:a9:19:33:d4:d0:5c:e1:7f:42:39:c1:86:4f:f8:2a:e1:17:
         8f:53:88:b2:03:55:fc:07:da:02:93:ec:8f:d2:b5:0d:17:2f:
         51:9d:a5:57:60:b7:53:ba:65:2e:bf:b5:e8:cd:72:ba:1e:b7:
         39:2f:1b:c5:a8:97:d8:f1:58:d3:1e:b6:df:1d:ac:81:a0:49:
         ad:9c:86:1b:f2:ed:98:f4:c8:8d:8b:99:90:7d:16:32:56:a9:
         13:c3:94:b8:4d:e4:b9:43:1e:61:08:18:93:a0:a3:4b:21:f1:
         dc:d0:bd:75:4d:4b:15:c0:04:1e:b1:16:8f:db:69:5f:5f:d0:
         0a:26:2f:ee:e3:23:e2:c5:d7:45:bd:f5:96:c8:c0:3d:40:7d:
         d0:68:54:32:8a:8e:77:9d:69:89:1b:a2:f1:82:6a:bd:43:2a:
         41:5d:46:7d:a7:d6:eb:c1:84:9e:54:01:1a:98:3c:aa:02:d5:
         87:02:cd:e4:19:fc:b0:6e:ff:1d:04:7d:aa:2e:27:1d:73:fa:
         f3:31:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:39 2025 by rpki-client