Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/323830343a356635343a3a2f33322d3334203d3e20323639303932.roa
File:                     323830343a356635343a3a2f33322d3334203d3e20323639303932.roa (raw, json)
Hash identifier:          Q/2rM1WBr0s9Nn7FGcRvwZk10A6LhqwldNFtNvSlbC8=
Subject key identifier:   0A:75:A5:BC:24:B5:FD:21:42:66:44:9F:13:4F:EA:4A:8B:4A:70:73
Certificate issuer:       /CN=A73D6D578C402A7DD8AED3B5544070906E2FE163
Certificate serial:       33D461F6166246F3D8E8A27FF97D529BEFDD635E
Authority key identifier: A7:3D:6D:57:8C:40:2A:7D:D8:AE:D3:B5:54:40:70:90:6E:2F:E1:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/323830343a356635343a3a2f33322d3334203d3e20323639303932.roa
Signing time:             Thu 06 Mar 2025 06:47:26 +0000
ROA not before:           Thu 06 Mar 2025 06:42:26 +0000
ROA not after:            Thu 05 Mar 2026 06:47:26 +0000
asID:                     269092
IP address blocks:        2804:5f54::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.crl
                          rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d4:61:f6:16:62:46:f3:d8:e8:a2:7f:f9:7d:52:9b:ef:dd:63:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A73D6D578C402A7DD8AED3B5544070906E2FE163
        Validity
            Not Before: Mar  6 06:42:26 2025 GMT
            Not After : Mar  5 06:47:26 2026 GMT
        Subject: CN=0A75A5BC24B5FD214266449F134FEA4A8B4A7073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:4c:b8:39:80:ff:ba:c9:25:ab:b6:f3:f2:
                    f2:56:fa:13:f1:b4:c4:ee:4a:94:01:bb:78:03:37:
                    6a:f7:f3:d0:d4:21:d4:b5:80:4c:67:34:25:27:82:
                    89:6d:32:dd:85:5c:26:05:15:d3:63:76:9c:49:07:
                    07:90:71:b4:3f:65:ff:6a:3b:3a:5b:52:e0:5e:8f:
                    68:21:ad:8d:89:d3:10:01:a7:10:4e:23:96:7f:50:
                    e1:72:bd:0d:c2:59:19:75:06:3d:3e:61:3e:e7:bf:
                    af:ec:4a:3e:aa:00:13:02:e7:21:4c:b1:3b:9c:ef:
                    92:30:81:a8:56:bb:10:66:50:ba:f8:b5:59:24:c5:
                    d3:fc:3a:cb:c8:72:29:04:dc:61:46:5e:79:05:aa:
                    e4:41:a9:50:bd:ca:de:4b:7f:99:f7:7e:63:d1:30:
                    a1:f2:64:40:0f:39:c9:66:a8:72:7e:ab:b3:c7:3a:
                    12:8d:fb:25:95:08:fe:c4:a6:b1:80:73:2c:57:d6:
                    7d:c6:ba:ea:e4:d9:35:36:d3:6e:04:41:8b:c6:b3:
                    08:f2:a0:0c:ff:6e:19:6a:73:73:2e:71:ba:ed:e6:
                    39:83:2c:e4:09:aa:2c:07:89:42:f2:bc:e0:4a:47:
                    c7:ea:63:8d:0b:13:c0:cf:94:b0:ce:45:95:48:87:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:75:A5:BC:24:B5:FD:21:42:66:44:9F:13:4F:EA:4A:8B:4A:70:73
            X509v3 Authority Key Identifier:
                keyid:A7:3D:6D:57:8C:40:2A:7D:D8:AE:D3:B5:54:40:70:90:6E:2F:E1:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A73D6D578C402A7DD8AED3B5544070906E2FE163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mWw1Xr6uwLcxy8TVcz2WiFsFHWkQGfcoDy4wgb8PQ6a/1/323830343a356635343a3a2f33322d3334203d3e20323639303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f54::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:f3:1b:4a:10:57:33:a4:82:86:33:f0:9f:5f:99:f2:6e:93:
         b3:2e:68:d5:33:f3:f5:3a:39:74:d8:66:2c:0c:84:44:ba:d2:
         69:4d:8d:04:0b:2a:4c:b5:33:60:16:a3:a9:2e:db:02:a9:67:
         43:6f:dc:43:68:3e:01:7d:6b:c3:ed:fa:90:ec:44:2f:30:89:
         88:a7:d4:d6:81:da:b2:64:b1:d0:9f:c4:21:39:4d:ad:45:2e:
         ef:be:f1:0e:d5:79:31:0c:24:10:e3:ab:25:0b:34:ae:51:3e:
         0d:89:4a:ad:0d:21:d4:d7:6c:ac:01:05:29:52:d8:c1:15:c6:
         0c:28:0b:e2:8b:e4:1a:d5:38:24:b8:a5:75:49:b1:10:cf:6e:
         c0:36:5c:c2:e3:61:52:0e:c3:53:47:5c:75:68:53:ab:06:ec:
         0f:10:91:32:25:8e:63:72:e8:6b:df:08:27:b8:cb:e9:60:d2:
         f3:27:cf:10:81:27:26:a3:d9:55:aa:0d:a0:83:a3:ee:9c:99:
         3d:83:99:82:fe:8a:cb:7e:b6:da:b2:2d:d6:6a:72:fa:2f:a8:
         86:c4:f9:ff:88:24:56:7b:e0:66:04:19:d0:7d:25:4f:99:91:
         0d:65:5e:99:7e:9c:07:22:f2:9b:87:ec:bf:1d:12:5c:7a:f8:
         1c:a5:f9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:32:45 2025 by rpki-client