Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/323830343a3963303a3a2f33322d313238203d3e20323632393839.roa
File:                     323830343a3963303a3a2f33322d313238203d3e20323632393839.roa (raw, json)
Hash identifier:          imG0+6n/6vRTA0KgpICMvWM+xXoxDU/yWwYHgaTBICg=
Subject key identifier:   92:F7:74:A3:5D:0F:80:36:94:18:80:4D:03:C8:3D:A6:65:62:FA:C1
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       65F5A10DA7553F64C1AF70F891A61E896123FD5B
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/323830343a3963303a3a2f33322d313238203d3e20323632393839.roa
Signing time:             Thu 06 Mar 2025 20:58:09 +0000
ROA not before:           Thu 06 Mar 2025 20:53:09 +0000
ROA not after:            Thu 05 Mar 2026 20:58:09 +0000
asID:                     262989
IP address blocks:        2804:9c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 20:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f5:a1:0d:a7:55:3f:64:c1:af:70:f8:91:a6:1e:89:61:23:fd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Mar  6 20:53:09 2025 GMT
            Not After : Mar  5 20:58:09 2026 GMT
        Subject: CN=92F774A35D0F80369418804D03C83DA66562FAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e2:2c:29:5d:1f:fb:fb:37:e9:94:94:92:84:
                    3b:18:79:e7:73:e5:81:11:9a:49:7c:0f:0d:30:57:
                    40:60:e9:5d:0b:12:66:5a:b2:a1:2b:9e:71:26:f8:
                    0b:8c:5e:65:d5:37:13:e9:71:d3:c4:fb:84:10:be:
                    5b:d8:03:c3:4c:ea:f3:c3:2f:22:5d:c8:43:86:d2:
                    b3:9c:9a:b4:e5:8d:9e:03:40:98:9c:ca:40:7b:69:
                    7f:43:fe:40:6e:64:19:32:12:1a:c0:06:12:bc:16:
                    62:19:e2:4a:6f:f2:02:f2:82:5c:9f:ea:25:6e:70:
                    d3:52:4a:00:3c:1e:57:a7:8a:15:24:3d:bd:7e:c9:
                    e7:4b:a5:12:2b:9d:67:6e:59:86:4f:13:7c:a6:55:
                    bc:6b:ee:01:37:fb:4d:30:a1:61:df:62:49:b2:23:
                    35:5a:10:0b:1d:5a:77:c9:3d:fd:57:26:8f:09:88:
                    1d:b9:c7:73:68:44:c0:5c:c9:65:dd:1a:c2:c1:e5:
                    d5:49:77:ff:aa:52:56:cd:19:cc:d0:bc:3e:65:6d:
                    28:4d:1a:cc:44:fe:9f:9f:54:18:0d:49:42:f5:c8:
                    36:81:cb:da:23:53:c6:b3:61:6a:78:cc:7b:3a:43:
                    36:92:28:24:bc:11:eb:df:5a:75:0b:9a:12:5a:bf:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F7:74:A3:5D:0F:80:36:94:18:80:4D:03:C8:3D:A6:65:62:FA:C1
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/323830343a3963303a3a2f33322d313238203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:46:c3:3b:24:dc:21:3d:3a:7c:3f:51:c3:b6:00:5d:f3:29:
         10:c8:6a:f5:31:8a:1d:a4:11:7c:d1:b7:1a:ac:60:c6:4a:0a:
         ab:bf:bf:88:19:52:63:fa:67:29:8d:f9:53:05:ed:0b:81:bb:
         a4:b2:1e:85:aa:81:24:b2:e4:dd:1a:b1:f4:e4:95:7e:fa:da:
         a3:0d:48:45:fc:58:53:7c:f5:61:fc:9d:15:66:1c:90:80:f9:
         43:8d:29:01:dc:85:b6:c2:f1:aa:ac:76:fd:e2:69:33:5a:bb:
         fe:46:fc:ed:41:2d:cf:6f:29:b7:da:08:78:0a:1b:19:00:fa:
         e9:59:2a:87:4a:53:58:0a:4b:91:af:5d:6c:8a:8d:f1:85:e1:
         06:ff:04:77:19:b0:bc:77:e1:b6:b2:1e:0d:07:a2:22:55:b6:
         d6:f1:6f:d2:25:f7:d7:be:65:09:b4:de:4c:17:01:2e:39:5a:
         16:95:48:75:2f:f0:14:15:8e:83:f1:64:26:e5:24:22:00:77:
         78:a5:1c:64:e7:cf:b5:92:22:a8:0b:68:6f:57:fb:a2:59:30:
         41:d8:0e:77:51:ba:2a:11:69:63:b2:a9:28:8c:e9:6b:41:16:
         16:3f:de:16:a6:13:c9:fd:56:4a:86:55:a6:c2:73:d9:c1:a9:
         eb:f0:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:37:37 2025 by rpki-client