Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa
File:                     323830343a356265303a3a2f33322d3332203d3e20323638383734.roa (raw, json)
Hash identifier:          tCfqS8UfvI979KF3Vff43TGrFJXiZp8XAjbb1Wo4ZPs=
Subject key identifier:   1B:7F:35:88:B2:7B:7B:A5:54:7F:B8:BD:9D:2F:60:B6:59:D7:83:CE
Certificate issuer:       /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial:       2681A538ED78A5D699856E7D791BED49C3393774
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa
Signing time:             Thu 06 Mar 2025 06:33:12 +0000
ROA not before:           Thu 06 Mar 2025 06:28:12 +0000
ROA not after:            Thu 05 Mar 2026 06:33:12 +0000
asID:                     268874
IP address blocks:        2804:5be0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl
                          rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 03:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:81:a5:38:ed:78:a5:d6:99:85:6e:7d:79:1b:ed:49:c3:39:37:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
        Validity
            Not Before: Mar  6 06:28:12 2025 GMT
            Not After : Mar  5 06:33:12 2026 GMT
        Subject: CN=1B7F3588B27B7BA5547FB8BD9D2F60B659D783CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:33:d6:9b:80:aa:7c:a1:02:96:7d:f2:42:
                    5b:68:fc:15:b8:fb:72:ef:06:8d:73:31:23:ab:23:
                    55:8f:ae:cb:7a:34:83:96:4c:62:4b:82:bc:70:e7:
                    0c:e7:cb:13:d3:ef:9e:04:4a:87:94:0c:35:c4:61:
                    15:5b:14:6d:eb:15:4b:a1:fa:c1:3b:cd:82:53:bf:
                    f5:65:97:1b:96:52:6a:c7:78:05:74:ce:b9:78:8c:
                    d4:99:4e:aa:8a:34:da:cf:56:3e:86:c0:76:03:f3:
                    e8:c2:9a:65:29:34:d7:0c:04:2e:8c:f5:47:b8:27:
                    d2:9d:70:f1:fa:8d:9f:11:84:1f:98:74:d7:1e:b7:
                    e7:46:ac:19:9a:72:90:ee:02:0f:bc:fd:2a:29:09:
                    4f:33:81:48:10:86:e5:91:b6:6d:57:a5:9a:62:4c:
                    bc:c4:d1:bf:dc:a2:54:d6:eb:43:79:cf:57:eb:88:
                    57:f8:6c:34:68:f8:0c:a6:c1:b8:fd:71:0b:74:1a:
                    3f:7c:ad:df:28:f4:53:9b:b7:b5:0b:12:c7:25:9e:
                    f8:65:8d:b8:08:5c:e9:7a:47:85:94:2a:48:5e:45:
                    a0:65:d6:0e:62:ae:25:e1:38:d6:0d:47:f1:f6:58:
                    e7:8a:ab:87:2d:06:f8:9b:5f:6a:55:05:b5:f9:4d:
                    a0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7F:35:88:B2:7B:7B:A5:54:7F:B8:BD:9D:2F:60:B6:59:D7:83:CE
            X509v3 Authority Key Identifier:
                keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:1b:18:88:af:0b:9b:eb:63:8e:a6:ff:74:ac:5d:9c:dc:78:
         f3:6a:68:19:af:17:4b:7d:88:49:d5:ad:21:d9:e4:52:db:46:
         16:89:09:4a:1b:62:c7:b6:97:d6:5a:a1:6b:fc:68:d3:e3:32:
         2a:0a:65:ef:4e:b0:2a:86:93:a0:11:5f:d0:78:8b:d6:ad:a2:
         e8:3a:62:81:e8:48:0b:d2:8c:f8:f7:c5:60:41:47:d4:c6:bb:
         f4:e6:bf:4b:b5:f7:4c:81:d6:bb:b5:fe:c6:c6:09:96:ab:99:
         38:74:7e:a4:65:a4:9f:fb:7a:9a:9e:42:36:a8:ac:15:dc:1c:
         ab:b2:85:2e:29:c3:64:f8:4f:2c:d1:ab:1f:1d:23:79:6e:80:
         64:95:8f:dc:b1:be:7a:f5:1b:c8:cb:1e:31:bf:98:bf:30:d4:
         57:f4:71:f0:66:91:09:b2:ee:f2:b6:50:5e:44:0e:54:df:d5:
         34:a9:60:98:05:ec:ec:f2:a0:69:be:c0:4e:47:31:08:27:0e:
         13:c4:21:58:93:52:32:72:c0:99:17:09:7b:3a:a2:86:04:eb:
         d5:b9:27:60:9a:08:ca:a6:7f:63:e7:73:e7:d9:44:a7:80:ea:
         eb:bb:28:f7:c4:e0:06:ee:30:8f:53:fd:80:74:ba:98:14:24:
         4b:b9:93:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:47 2025 by rpki-client