Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
File:                     323830343a326661343a3a2f33322d3438203d3e203532373731.roa (raw, json)
Hash identifier:          yjTkMcDk4CLMzQBlzrsAYIcrdcAzSw6jBr5IYfZdehI=
Subject key identifier:   2D:93:DC:3E:9A:9D:B0:A7:DC:74:F0:BF:79:09:B0:BB:F4:33:DE:20
Certificate issuer:       /CN=3929491D59EC78DBDEC7423B04D06034C1A59303
Certificate serial:       37BB35C7A992D69C211514A12073F9BB01FB022D
Authority key identifier: 39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
Signing time:             Thu 06 Mar 2025 11:34:08 +0000
ROA not before:           Thu 06 Mar 2025 11:29:08 +0000
ROA not after:            Thu 05 Mar 2026 11:34:08 +0000
asID:                     52771
IP address blocks:        2804:2fa4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl
                          rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 22:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bb:35:c7:a9:92:d6:9c:21:15:14:a1:20:73:f9:bb:01:fb:02:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3929491D59EC78DBDEC7423B04D06034C1A59303
        Validity
            Not Before: Mar  6 11:29:08 2025 GMT
            Not After : Mar  5 11:34:08 2026 GMT
        Subject: CN=2D93DC3E9A9DB0A7DC74F0BF7909B0BBF433DE20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:4c:be:0e:9c:3b:b5:44:e8:e7:ea:41:5e:
                    36:c7:a9:78:f8:a6:9b:5e:90:de:aa:b3:72:42:25:
                    13:78:31:9b:9b:f9:c5:c6:32:67:f1:31:73:ba:14:
                    39:85:8e:60:e3:44:fc:f9:7e:cc:32:aa:15:85:5f:
                    f8:b5:a2:19:b3:ab:87:7e:e6:6b:59:4c:82:99:01:
                    c5:a2:be:85:76:2e:f9:de:ee:65:d0:d3:dc:be:bc:
                    fc:9e:a6:42:94:28:c2:b7:a1:07:6c:d9:02:d2:ed:
                    0f:4f:74:c4:7b:da:8a:2a:e3:be:c2:18:05:37:d7:
                    b8:3b:1c:d3:9c:8a:25:78:32:e7:85:15:57:31:8d:
                    3f:fc:8c:8a:2a:fc:e7:8e:98:5a:21:e2:af:41:0b:
                    4f:f5:ae:22:91:8f:36:e1:2a:38:d5:6b:c9:72:d8:
                    0d:ab:59:86:5b:2d:82:fa:9d:83:6b:61:13:f1:e6:
                    ae:59:61:12:4e:25:cb:3d:5c:0a:13:fb:28:37:28:
                    78:84:bf:41:ac:d5:fa:20:75:62:ba:c7:35:24:13:
                    f3:1b:cb:a3:0a:96:4c:41:cc:1d:63:53:8d:c9:a1:
                    32:6d:d2:d4:b5:21:22:7f:45:96:68:bb:41:24:95:
                    5a:25:fe:4c:4c:02:3a:fb:69:7a:65:73:ff:1d:65:
                    87:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:93:DC:3E:9A:9D:B0:A7:DC:74:F0:BF:79:09:B0:BB:F4:33:DE:20
            X509v3 Authority Key Identifier:
                keyid:39:29:49:1D:59:EC:78:DB:DE:C7:42:3B:04:D0:60:34:C1:A5:93:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/3929491D59EC78DBDEC7423B04D06034C1A59303.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3929491D59EC78DBDEC7423B04D06034C1A59303.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/1/323830343a326661343a3a2f33322d3438203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:fa:37:35:eb:80:f6:4a:df:1a:be:4d:69:ee:fb:94:2d:25:
         46:23:6a:e6:66:cc:8d:c4:79:d4:9a:71:68:8d:38:e4:7a:85:
         af:ad:0b:39:0e:4c:57:dc:cb:5b:e8:f8:4f:b9:e4:58:a6:0f:
         12:b0:9d:19:b5:bf:40:d5:ac:b3:2c:5c:27:46:8b:b2:25:64:
         b8:b0:d0:2a:3b:60:68:5e:6d:39:5f:04:fb:ee:f4:af:4d:52:
         9e:5f:66:ab:e7:32:4f:7f:25:74:f5:da:4a:7e:a2:aa:54:5e:
         8c:46:68:f5:40:17:b1:4b:7e:62:5a:05:16:e1:e1:6f:f9:d0:
         ad:ea:71:17:c7:23:4c:6b:50:ae:09:00:0a:ea:b4:84:a0:bb:
         99:02:26:fd:77:d6:c4:2f:8a:20:2b:5e:59:dd:17:8d:2b:74:
         4c:f6:a2:c5:4f:59:90:83:6a:d7:d8:bc:21:31:54:4f:be:ad:
         fb:0c:ba:84:d9:6e:74:4c:01:79:38:eb:a7:3c:d3:fe:7a:34:
         c6:75:27:b6:6a:59:fe:2d:8e:83:7b:41:f1:ea:5c:4e:7a:83:
         59:af:2a:02:35:6b:eb:14:54:99:7e:83:c4:ea:63:63:47:74:
         97:95:dd:9c:1e:4c:11:1f:fa:08:5d:2f:35:94:f4:15:78:cf:
         25:3d:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:47:03 2025 by rpki-client