Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/323830343a346230343a3a2f33322d313238203d3e20323637323738.roa
File:                     323830343a346230343a3a2f33322d313238203d3e20323637323738.roa (raw, json)
Hash identifier:          hvlXNhTHFZQ9r4y6cpAWFjBXqMgdMdLwt6b07AXfm0Q=
Subject key identifier:   AA:98:33:18:27:38:0A:6C:29:2F:B4:FC:B0:BF:9E:28:3D:27:BC:D9
Certificate issuer:       /CN=0DE4CEA7C916B2344C1F738B34E291BFC48C22C5
Certificate serial:       3B7FB6203EB9F04012B36D61D62B1B5E6D8BADA8
Authority key identifier: 0D:E4:CE:A7:C9:16:B2:34:4C:1F:73:8B:34:E2:91:BF:C4:8C:22:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/323830343a346230343a3a2f33322d313238203d3e20323637323738.roa
Signing time:             Thu 04 Apr 2024 09:07:27 +0000
ROA not before:           Thu 04 Apr 2024 09:02:27 +0000
ROA not after:            Thu 03 Apr 2025 09:07:27 +0000
asID:                     267278
IP address blocks:        2804:4b04::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.crl
                          rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 08:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7f:b6:20:3e:b9:f0:40:12:b3:6d:61:d6:2b:1b:5e:6d:8b:ad:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DE4CEA7C916B2344C1F738B34E291BFC48C22C5
        Validity
            Not Before: Apr  4 09:02:27 2024 GMT
            Not After : Apr  3 09:07:27 2025 GMT
        Subject: CN=AA98331827380A6C292FB4FCB0BF9E283D27BCD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:86:5e:c3:bc:d9:cb:44:c3:b6:1b:34:3f:
                    5f:89:ba:0c:bc:79:cb:33:b2:8f:aa:09:ae:34:ee:
                    39:0a:cf:1c:d9:fd:8a:ec:df:c3:a5:5e:b8:12:32:
                    c8:84:82:98:7b:e5:50:e3:f5:12:fd:8d:f7:d6:71:
                    43:86:7f:25:d5:11:b3:85:21:f1:57:cb:d8:be:10:
                    33:ac:46:8b:b7:f9:16:5f:2b:9f:8c:24:60:db:3b:
                    01:40:87:72:0a:77:3f:7c:09:e8:a1:ad:84:b6:8e:
                    0a:d2:d5:fc:1d:30:2b:1d:b3:fb:76:9d:31:e4:0b:
                    59:cd:19:92:bc:f0:83:bd:d4:03:cc:c0:b8:06:ee:
                    08:21:3c:1c:63:df:2a:97:95:1e:d6:d9:66:b7:7b:
                    1f:7c:45:00:af:fb:02:80:93:e6:79:b5:3a:78:15:
                    9d:5c:6a:12:b0:c6:43:a0:e4:81:10:6b:d9:96:43:
                    9b:14:8e:75:8a:0d:18:8f:3c:c1:c8:a4:51:53:9a:
                    28:e5:5d:f6:83:82:3e:dd:23:08:2d:00:fe:dd:59:
                    6d:a3:40:0f:ff:37:93:5e:59:f8:88:25:9c:36:b7:
                    95:3c:2b:f2:a5:2f:02:8f:18:90:60:76:a9:cb:38:
                    9c:29:4d:7a:78:e5:ea:c0:e3:e5:3e:61:79:a7:26:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:98:33:18:27:38:0A:6C:29:2F:B4:FC:B0:BF:9E:28:3D:27:BC:D9
            X509v3 Authority Key Identifier:
                keyid:0D:E4:CE:A7:C9:16:B2:34:4C:1F:73:8B:34:E2:91:BF:C4:8C:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DE4CEA7C916B2344C1F738B34E291BFC48C22C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5vH1WE5jxJxtx2wdHZ7WqZibqz64rAKeS9BnUVZPTUXk/1/323830343a346230343a3a2f33322d313238203d3e20323637323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b04::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:38:7a:d4:2a:6d:94:fc:63:39:29:c8:83:39:cf:f5:60:19:
         45:e1:6f:bc:5c:ab:bf:08:e2:2a:ca:fc:ee:bd:d8:12:77:b4:
         b1:c5:a1:0f:d5:f6:04:5a:b3:7b:14:c6:8c:ad:da:dc:4e:ae:
         d7:95:c8:d7:2c:5e:d7:6b:0b:01:ae:61:3e:7c:70:6e:cf:e0:
         ff:a4:4a:29:80:98:a0:15:43:8a:cc:2c:9e:99:3d:ff:c7:29:
         52:a4:a4:66:52:7f:9f:dc:a2:73:55:b7:01:ad:7f:df:55:27:
         c8:c9:e6:9e:3c:83:27:54:10:8b:32:e9:d1:ff:13:06:19:16:
         c6:5c:1d:94:b5:b9:cf:fe:14:95:6b:00:54:7c:be:10:94:d6:
         57:0b:c9:4f:31:c3:9e:84:bf:47:ba:00:a7:e5:bd:f1:d4:ef:
         e8:9c:86:b1:2f:f8:94:e2:da:22:21:b3:56:ee:ce:bd:4c:3d:
         21:34:58:3e:13:86:c5:db:6d:7a:70:44:8d:4d:26:20:9c:f5:
         90:17:f9:33:31:06:23:4b:7a:d0:13:fa:97:cd:bb:a3:f2:65:
         a6:ef:bb:f8:59:af:8d:be:ce:a6:49:a5:43:15:e3:c0:bb:c4:
         9b:b8:53:82:8f:be:c5:54:08:ee:9f:e2:c4:66:24:dd:13:9c:
         61:13:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:52 2025 by rpki-client