Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa
File:                     323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa (raw, json)
Hash identifier:          TY3j/cL94cilqBBnF2a2wywvcEBFRGGDxKoi4dj7htw=
Subject key identifier:   04:37:BD:16:64:35:4F:23:B9:FE:87:5C:0C:1F:C3:C4:CA:58:5B:08
Certificate issuer:       /CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
Certificate serial:       30E87EDA72A6687B5EF8E1CD941FD661BD4DFB0D
Authority key identifier: 38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa
Signing time:             Thu 06 Mar 2025 17:42:49 +0000
ROA not before:           Thu 06 Mar 2025 17:37:49 +0000
ROA not after:            Thu 05 Mar 2026 17:42:49 +0000
asID:                     11097
IP address blocks:        2801:80:140c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl
                          rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 10:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e8:7e:da:72:a6:68:7b:5e:f8:e1:cd:94:1f:d6:61:bd:4d:fb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EA6456C8B35EB75FBC6A42DA7F260358634F2F
        Validity
            Not Before: Mar  6 17:37:49 2025 GMT
            Not After : Mar  5 17:42:49 2026 GMT
        Subject: CN=0437BD1664354F23B9FE875C0C1FC3C4CA585B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:03:bc:b7:1b:5b:15:4e:30:08:4a:f0:ca:
                    47:f2:75:30:63:da:55:2d:c8:03:33:2b:2b:4f:3d:
                    19:c8:90:1b:79:f7:b2:26:7b:97:a3:07:d8:ee:58:
                    b0:b6:c2:0c:c5:4d:f9:38:fb:9a:62:80:f0:3a:3f:
                    e7:c5:d4:14:94:cf:c3:26:fb:e5:b3:b9:c7:ed:92:
                    ba:35:4d:55:a3:36:21:a3:ee:92:83:42:8a:9e:fa:
                    86:c4:9f:b5:09:7e:7e:eb:6e:f1:c8:29:4a:c8:24:
                    87:32:90:eb:fa:f1:c7:3a:dc:37:c9:2a:ec:f4:2f:
                    3d:8b:01:a7:2e:56:93:3d:39:d4:18:88:36:78:ad:
                    aa:3b:d0:50:34:7b:72:1b:a4:65:4b:8e:6c:d1:ec:
                    8c:85:e8:6d:31:0b:bb:5b:99:cd:a2:6a:05:54:04:
                    90:25:48:ba:7a:f2:8b:62:d4:a9:ad:b1:7c:10:20:
                    ab:2c:a6:46:5f:26:b7:53:8f:5a:b1:00:a8:86:dc:
                    87:36:76:7d:5b:3d:69:97:dd:d6:a9:20:c4:3b:0b:
                    9a:f7:e8:85:dc:90:e2:e4:58:58:63:41:f6:ad:94:
                    17:e2:bd:53:52:1b:1f:57:74:22:25:94:a4:69:a3:
                    6c:09:11:07:fe:50:0e:d8:b2:18:ef:c2:60:71:01:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:37:BD:16:64:35:4F:23:B9:FE:87:5C:0C:1F:C3:C4:CA:58:5B:08
            X509v3 Authority Key Identifier:
                keyid:38:EA:64:56:C8:B3:5E:B7:5F:BC:6A:42:DA:7F:26:03:58:63:4F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38EA6456C8B35EB75FBC6A42DA7F260358634F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:140c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:d9:fa:00:cc:d1:5f:58:cf:a2:8f:f6:07:ca:18:86:5b:37:
         d8:d3:c9:76:e8:d0:82:56:b1:0e:d2:c0:07:48:44:7e:25:99:
         5d:50:4a:f9:cf:d9:7e:e1:15:7f:5e:22:13:e9:b1:83:20:48:
         16:c1:7e:a9:fd:ae:26:4d:e0:55:6e:7a:70:2b:63:0e:39:c6:
         7c:43:d1:8d:1e:e0:e9:60:98:78:33:3e:2b:4c:18:96:92:9a:
         c7:76:6c:17:50:ec:58:df:7a:a4:f8:ee:f9:1d:f6:51:f7:82:
         fa:5a:62:03:2b:28:45:0b:12:7d:9b:d5:8c:7d:7e:be:23:80:
         54:60:07:b0:2c:09:41:b9:7f:ac:a0:7b:9e:7e:05:7f:6f:2e:
         56:5d:8c:ff:2d:ed:45:cc:bf:7f:af:60:5c:c8:ae:14:70:96:
         70:4a:9f:1b:15:e1:2d:87:e3:7d:04:9d:b9:01:60:f1:4f:6e:
         df:de:48:19:1e:5d:59:48:83:b5:ae:59:6f:47:bf:cb:69:c2:
         4f:39:9f:74:98:2f:0b:a5:f6:c0:3e:36:a0:ba:d5:be:69:09:
         49:24:87:02:a5:ad:5b:cf:8b:2d:cb:33:86:ee:9b:3a:21:b0:
         65:bb:d0:99:17:45:ec:51:2a:1a:bd:d9:ca:22:f3:0a:1c:3b:
         2d:48:f3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:33:01 2025 by rpki-client