Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/323830343a353931343a3a2f33322d313238203d3e20323638313638.roa
File:                     323830343a353931343a3a2f33322d313238203d3e20323638313638.roa (raw, json)
Hash identifier:          OYWPsSeu6Ry1fwrTyeqn4ungS8YQGR5Wks/hH+QFaRg=
Subject key identifier:   B2:B2:AA:85:97:E2:88:14:B1:B5:E7:0B:73:56:34:B8:73:71:96:AF
Certificate issuer:       /CN=811DA02DC51058EDFF82D04A170B29D01B686AC4
Certificate serial:       5C392DA76F4752AF932D87A77265CD1A611B3EED
Authority key identifier: 81:1D:A0:2D:C5:10:58:ED:FF:82:D0:4A:17:0B:29:D0:1B:68:6A:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/323830343a353931343a3a2f33322d313238203d3e20323638313638.roa
Signing time:             Thu 06 Mar 2025 19:12:15 +0000
ROA not before:           Thu 06 Mar 2025 19:07:15 +0000
ROA not after:            Thu 05 Mar 2026 19:12:15 +0000
asID:                     268168
IP address blocks:        2804:5914::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.crl
                          rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 15:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:39:2d:a7:6f:47:52:af:93:2d:87:a7:72:65:cd:1a:61:1b:3e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811DA02DC51058EDFF82D04A170B29D01B686AC4
        Validity
            Not Before: Mar  6 19:07:15 2025 GMT
            Not After : Mar  5 19:12:15 2026 GMT
        Subject: CN=B2B2AA8597E28814B1B5E70B735634B8737196AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:c9:19:2e:31:59:3f:3a:5b:ef:8d:fa:28:
                    d0:12:41:4c:fb:8d:52:d1:84:37:a1:8a:08:91:cf:
                    a8:09:93:88:bd:48:df:c3:e8:46:1e:12:58:df:43:
                    1e:9d:4c:c3:9b:cf:cb:5e:1e:8e:93:f0:88:de:44:
                    72:35:0f:71:27:b9:32:06:dd:99:71:76:e2:4b:fc:
                    df:87:74:b4:b3:c1:f2:b9:a4:f4:f6:01:fc:26:1f:
                    68:50:ef:10:b3:43:e4:b6:d6:4a:f1:6b:5f:39:44:
                    01:af:3d:87:2b:31:cf:a6:3b:46:7d:47:16:51:08:
                    a2:e2:bd:e6:34:4e:e7:de:70:22:ec:26:8c:db:38:
                    ae:c8:2d:04:60:f0:83:11:4e:d8:ea:37:44:df:2f:
                    4b:e9:3e:b1:47:79:91:1b:43:fa:4a:bc:55:1e:f7:
                    cd:a9:db:81:8e:f6:43:82:66:41:85:21:28:8d:a0:
                    fa:ae:92:64:3d:c8:97:dd:e5:79:78:21:46:91:95:
                    0c:f9:b9:61:e1:25:d6:87:73:e2:89:cc:c7:ba:f2:
                    fe:fb:1d:7e:fa:f1:a3:eb:1d:c4:31:bd:6c:15:ec:
                    6f:ce:1b:9a:47:c9:67:b4:ed:9c:f9:57:49:a9:80:
                    1e:e4:29:e5:f5:33:b1:39:87:56:79:5c:f7:50:9d:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B2:AA:85:97:E2:88:14:B1:B5:E7:0B:73:56:34:B8:73:71:96:AF
            X509v3 Authority Key Identifier:
                keyid:81:1D:A0:2D:C5:10:58:ED:FF:82:D0:4A:17:0B:29:D0:1B:68:6A:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/811DA02DC51058EDFF82D04A170B29D01B686AC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/1/323830343a353931343a3a2f33322d313238203d3e20323638313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5914::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:bc:42:ce:13:b8:8e:c7:a5:7f:36:7f:6f:38:9f:82:78:
         6e:15:c3:a3:1c:93:12:1f:27:b3:5f:13:6f:2b:2c:9d:13:0c:
         b9:28:25:d3:16:d3:8e:34:5a:f6:71:20:96:c1:86:e6:1f:29:
         a4:1d:25:a9:39:25:aa:fb:2e:7d:e2:8d:a5:a7:be:96:34:3e:
         c0:19:fe:c5:b2:ef:0a:cd:64:a7:76:59:8d:6d:99:49:06:a2:
         e4:ca:56:89:9d:42:33:0a:ae:15:38:dd:86:16:95:76:a3:a1:
         78:a4:02:42:c4:fd:0b:79:ee:9a:ca:e7:fe:77:9a:be:bc:1e:
         dd:e6:90:6d:57:32:9d:73:83:23:d9:28:20:87:a2:be:b6:77:
         47:87:a0:11:ec:2f:1a:b7:ad:94:7d:db:63:93:54:dc:33:0e:
         a8:fb:bf:f3:73:f0:a7:b5:6a:48:85:ab:cd:17:5b:cc:ff:99:
         26:a1:ac:8b:49:2d:d9:c7:40:d9:fb:08:8f:5c:89:d0:ae:13:
         c4:a7:db:3a:02:9f:09:51:45:02:21:b0:a8:28:d2:3c:4d:3e:
         f5:c8:56:33:d5:25:65:d0:45:7d:3a:ff:ee:98:15:69:7c:81:
         4a:5d:76:af:6b:5e:b2:4f:4e:eb:39:24:85:11:3f:7c:90:6b:
         ab:b0:7b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:49:16 2025 by rpki-client