Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33342d3334203d3e20323633363237.roa
File:                     323830343a313034343a3a2f33342d3334203d3e20323633363237.roa (raw, json)
Hash identifier:          iVMr5T/wMwVsoSfBRqk+A5rRn7C0Oq3X1L+dXrN33fA=
Subject key identifier:   98:8C:B0:D5:42:A3:58:5A:28:59:7D:DD:62:58:AD:39:DC:97:9A:6E
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       47917B03FD7C4798DC3372AEEF3F304FD54CA378
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33342d3334203d3e20323633363237.roa
Signing time:             Tue 25 Mar 2025 20:13:30 +0000
ROA not before:           Tue 25 Mar 2025 20:08:30 +0000
ROA not after:            Tue 24 Mar 2026 20:13:30 +0000
asID:                     263627
IP address blocks:        2804:1044::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 12:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:91:7b:03:fd:7c:47:98:dc:33:72:ae:ef:3f:30:4f:d5:4c:a3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Mar 25 20:08:30 2025 GMT
            Not After : Mar 24 20:13:30 2026 GMT
        Subject: CN=988CB0D542A3585A28597DDD6258AD39DC979A6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:c3:63:22:fb:4f:c2:ec:ea:43:11:53:05:
                    9b:a3:91:fd:6a:b8:fc:61:d0:4e:db:96:f8:db:ed:
                    d9:03:e2:ed:14:0a:78:e2:d9:9c:ba:67:d7:55:5b:
                    80:30:f7:92:ed:f7:f4:44:47:5a:8b:bc:7a:ed:c6:
                    20:e9:72:31:6d:39:53:04:b4:6c:a3:5a:64:77:1c:
                    c0:39:64:a8:db:ef:a8:b9:7f:cd:8c:ff:5b:4b:30:
                    47:e6:16:5f:af:eb:0c:33:b9:80:97:0b:7a:2b:0a:
                    de:09:b0:f4:40:09:f3:29:79:74:85:69:99:d6:1e:
                    16:f3:16:25:58:9e:9f:15:a3:83:93:9e:94:38:ed:
                    0d:00:34:9b:26:2e:83:97:75:1f:ba:63:c1:3b:09:
                    aa:52:80:1a:73:f9:02:7a:da:31:2e:50:df:fa:c1:
                    3b:d3:66:5f:d4:5c:84:43:c3:53:7f:a1:72:a6:60:
                    28:aa:32:ea:ae:e6:56:ec:4a:f8:8c:c9:ec:5c:d2:
                    a2:49:54:c1:76:ed:2e:b6:1b:f0:54:93:cc:2b:cc:
                    e5:5c:0a:14:51:b9:18:65:21:af:c1:9c:c1:47:7a:
                    ce:ba:c8:03:9b:b0:a0:ce:ae:50:81:e6:63:28:bd:
                    4c:18:ae:1a:ac:70:0f:c1:d0:40:27:15:35:99:92:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8C:B0:D5:42:A3:58:5A:28:59:7D:DD:62:58:AD:39:DC:97:9A:6E
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33342d3334203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1044::/34

    Signature Algorithm: sha256WithRSAEncryption
         3b:3c:9c:b4:db:ec:e3:4d:60:c6:1a:08:5e:a1:a0:8d:bd:51:
         36:5c:ee:1b:56:fb:a2:98:02:a9:d3:62:21:f8:6c:1c:37:ea:
         8f:5b:b1:f1:ed:74:01:41:2b:e1:cd:cb:df:a3:42:a6:19:ea:
         93:4e:a0:df:39:3c:ac:e0:60:36:10:a3:57:8d:e4:65:00:8b:
         6d:67:4d:69:70:9f:93:2b:1d:c8:9b:2b:00:92:10:7d:32:56:
         58:0e:72:c6:c9:31:c2:8c:03:a5:e2:8e:a1:2a:dd:58:cd:5e:
         37:c7:9b:48:e7:70:97:bf:b0:5d:7c:a4:9c:c9:0b:3c:35:0b:
         ae:30:ed:59:36:de:21:b9:47:7b:6f:a0:9b:46:30:6c:af:d5:
         40:f6:7b:a0:27:f2:2b:c1:1e:0e:3a:a5:36:e1:30:3d:b9:60:
         07:a6:3b:7a:f1:78:2c:d7:99:96:65:b9:63:9e:9c:dc:0b:28:
         38:54:95:7f:35:e3:e3:48:81:7c:ac:84:95:4a:4d:68:19:ab:
         51:d7:13:02:74:75:25:df:06:64:8f:bc:aa:0b:74:71:8f:97:
         db:63:a0:78:97:52:ad:a1:ba:a0:de:68:84:b8:f5:05:fd:43:
         46:7f:a7:6c:f9:56:59:aa:37:15:84:2d:ed:c9:ca:00:4b:0e:
         a8:f2:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:21:47 2025 by rpki-client