Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a343030303a3a2f33342d3334203d3e20323634393135.roa
File:                     323830343a326664383a343030303a3a2f33342d3334203d3e20323634393135.roa (raw, json)
Hash identifier:          g/5pTcal3q/zEc58JRmYgnETMh0t4RuNK4CIuQnIz70=
Subject key identifier:   B3:03:89:31:21:85:1C:13:9F:C7:5A:7D:92:DA:E1:9D:65:1E:2D:8B
Certificate issuer:       /CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
Certificate serial:       44272C05F846E0F4522502815D90BEFED7384354
Authority key identifier: DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a343030303a3a2f33342d3334203d3e20323634393135.roa
Signing time:             Thu 13 Mar 2025 18:14:23 +0000
ROA not before:           Thu 13 Mar 2025 18:09:23 +0000
ROA not after:            Thu 12 Mar 2026 18:14:23 +0000
asID:                     264915
IP address blocks:        2804:2fd8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl
                          rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:27:2c:05:f8:46:e0:f4:52:25:02:81:5d:90:be:fe:d7:38:43:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D
        Validity
            Not Before: Mar 13 18:09:23 2025 GMT
            Not After : Mar 12 18:14:23 2026 GMT
        Subject: CN=B303893121851C139FC75A7D92DAE19D651E2D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:34:cf:e7:71:92:ba:97:17:b8:e5:71:d2:
                    ad:45:c7:fa:86:ab:a7:09:87:d9:24:41:d3:ac:8a:
                    a7:4f:be:35:9d:ec:af:eb:47:f2:15:9f:df:d1:56:
                    8e:91:1c:2b:f1:83:32:ef:07:cc:7a:24:22:dd:5c:
                    15:7e:88:b5:c6:c7:fe:44:32:9b:30:34:84:c5:b0:
                    2e:7d:a5:6f:d7:3d:db:ce:ed:7e:10:85:e3:55:80:
                    08:34:b7:6c:1a:af:29:68:b1:a7:94:69:09:2f:10:
                    f7:b2:b8:d1:10:b2:e4:de:b1:e6:41:40:66:fa:66:
                    13:6e:fa:ea:ae:60:fe:e1:77:ab:93:19:ec:1f:18:
                    cc:7c:c3:df:bf:9b:3d:b0:02:36:04:fa:ba:a3:8b:
                    5e:a0:4c:a3:15:cb:02:3a:d3:a3:8f:45:d3:f0:c2:
                    37:90:2b:4f:9d:36:f6:28:b4:33:6f:77:e4:46:96:
                    55:d4:71:0f:3d:4f:93:9f:99:4c:c6:53:df:42:e7:
                    31:59:5e:ed:9d:de:a3:2c:72:69:e3:1f:59:8f:6d:
                    ac:22:d0:ce:b8:53:a4:56:dd:28:19:55:8d:38:11:
                    64:e1:ca:a7:b4:30:ac:3c:3c:f1:45:75:10:70:17:
                    46:8a:13:a1:13:5c:d0:ce:08:75:ad:62:51:f6:12:
                    cf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:03:89:31:21:85:1C:13:9F:C7:5A:7D:92:DA:E1:9D:65:1E:2D:8B
            X509v3 Authority Key Identifier:
                keyid:DC:28:C5:A2:EA:1E:56:49:5A:A9:66:FB:19:84:C7:F3:06:4F:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC28C5A2EA1E56495AA966FB1984C7F3064FDA1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a343030303a3a2f33342d3334203d3e20323634393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fd8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:52:0b:7f:2c:f2:94:e3:c4:c9:98:8b:ee:ef:e7:28:d8:2c:
         b9:77:42:4c:fa:a0:ea:1e:53:33:cd:27:94:72:bc:1e:0c:d5:
         c2:9d:24:74:8c:08:cb:5c:b6:63:40:aa:5b:62:00:8f:c2:5f:
         32:2a:bb:79:63:a1:c2:f5:05:c0:f7:56:1f:62:3a:1d:33:75:
         f1:02:0a:83:25:b1:1a:c2:36:24:26:8c:fe:90:1d:e0:db:1d:
         0a:87:e3:ec:66:4b:a5:e8:db:27:25:fd:b4:e9:4f:f7:42:60:
         cd:d5:b7:45:a8:b3:dc:f8:36:4c:bd:16:b3:b9:be:77:ab:f3:
         a2:7d:6e:7a:86:72:50:c3:58:b5:8a:ea:15:74:03:10:c0:3b:
         e2:ea:98:74:01:8d:f0:aa:79:9f:62:6e:c7:39:4b:b0:a3:05:
         29:ab:b7:54:e9:59:9f:cf:85:e2:6d:29:25:ef:49:40:d1:eb:
         96:48:69:2d:5a:13:54:87:7b:e9:5e:2c:44:54:af:24:c4:dd:
         84:42:a1:a4:d0:35:6d:b1:f8:a5:67:20:96:24:ec:1c:47:04:
         71:21:56:8a:e8:49:36:cd:9d:9a:5f:58:1c:19:38:82:df:f8:
         dd:e3:12:4b:94:cf:a9:6b:37:7a:c1:cf:b7:a9:a9:64:1f:b8:
         fc:d7:10:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:57:09 2025 by rpki-client