Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/323830343a326561303a3a2f33322d3333203d3e20323635333536.roa
File:                     323830343a326561303a3a2f33322d3333203d3e20323635333536.roa (raw, json)
Hash identifier:          kjzI/Hy+VFjqPtwfNH3S/qDBzkCKqTsnz+u5CaN3zbE=
Subject key identifier:   B7:B5:1C:B4:A1:DF:F0:FD:FD:85:E1:3A:18:ED:73:84:69:0C:37:5B
Certificate issuer:       /CN=E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC
Certificate serial:       03AB95D01C9DE53461A15502DB24B3BFA8F2DE9F
Authority key identifier: E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/323830343a326561303a3a2f33322d3333203d3e20323635333536.roa
Signing time:             Thu 06 Mar 2025 07:04:16 +0000
ROA not before:           Thu 06 Mar 2025 06:59:16 +0000
ROA not after:            Thu 05 Mar 2026 07:04:16 +0000
asID:                     265356
IP address blocks:        2804:2ea0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.crl
                          rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 21:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ab:95:d0:1c:9d:e5:34:61:a1:55:02:db:24:b3:bf:a8:f2:de:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC
        Validity
            Not Before: Mar  6 06:59:16 2025 GMT
            Not After : Mar  5 07:04:16 2026 GMT
        Subject: CN=B7B51CB4A1DFF0FDFD85E13A18ED7384690C375B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:63:f1:69:1d:4e:e8:40:0b:80:7c:39:10:b7:
                    ae:c1:fa:50:a7:4c:9e:fc:84:9b:56:f2:ae:ac:0e:
                    ae:67:bd:fa:d5:4d:99:f3:3c:cd:3b:ff:a1:6e:16:
                    89:b5:f1:21:39:db:96:59:c6:ab:83:13:f6:b2:31:
                    7b:b1:fd:bf:b2:88:ad:51:82:2b:ad:b6:b0:27:18:
                    fc:1e:aa:9c:2e:5b:49:3f:af:17:9e:3e:5b:1a:34:
                    38:d9:8d:ca:48:0e:df:a3:b4:d4:d1:26:c2:56:30:
                    d7:c5:c6:45:1e:26:86:d6:19:a0:bd:72:c4:a6:38:
                    0b:ee:bb:2d:1f:00:39:f2:8c:09:59:d3:8b:63:d6:
                    3d:3d:33:62:0b:f8:f2:17:4c:89:72:79:1c:05:93:
                    63:34:ab:62:40:3f:4d:bf:bc:59:43:d6:cc:36:93:
                    de:fd:23:b3:ce:07:11:88:ff:c5:89:da:d6:d7:c6:
                    e5:57:46:a6:bb:83:a2:15:06:ab:ff:36:1a:ec:f5:
                    b5:26:8c:75:65:be:44:b2:74:40:df:7d:e8:eb:5d:
                    f5:f3:2f:88:95:49:48:e7:c4:ae:54:65:9b:06:a4:
                    75:29:01:20:04:86:34:89:0a:8a:a0:f1:95:5d:02:
                    55:9a:97:9c:8c:36:5d:33:fe:6b:2b:78:c9:05:46:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B5:1C:B4:A1:DF:F0:FD:FD:85:E1:3A:18:ED:73:84:69:0C:37:5B
            X509v3 Authority Key Identifier:
                keyid:E3:FD:3A:AE:B4:22:FC:D9:BB:42:9C:EA:04:FB:06:B5:77:8E:C8:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3FD3AAEB422FCD9BB429CEA04FB06B5778EC8BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/62eHZ4fSK6vNQGdNwNXibZMRXKaUmZVfEmt1ErTuTWEz/1/323830343a326561303a3a2f33322d3333203d3e20323635333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:ca:ff:2c:48:0d:79:26:a8:11:56:1b:af:7a:bb:e0:40:08:
         42:dc:46:83:d7:1d:72:74:59:01:c5:76:17:dc:ca:e8:4c:50:
         c2:2f:d9:6e:2d:2c:9c:ca:52:3e:a6:28:76:98:37:c5:c3:e2:
         47:14:1f:4d:0d:13:ba:76:0f:ed:13:5f:17:4f:8f:dc:8f:20:
         a3:f0:4d:fd:bf:14:16:df:13:6e:ad:6a:bb:9c:4c:31:21:7a:
         e7:25:0a:89:69:47:72:e5:d2:67:8e:2c:e0:bd:bd:d6:77:e1:
         f7:c1:13:9f:40:9c:fd:72:9a:1d:b7:35:45:29:3f:92:4d:8d:
         b9:70:3c:6a:34:38:29:90:1b:a1:4f:e3:7c:2b:43:e3:02:3e:
         6c:a4:8c:5f:60:d1:a1:8b:77:72:66:34:49:ef:24:df:3c:c7:
         35:ac:01:3f:f4:2e:60:9e:b7:11:dc:26:a8:df:fc:68:10:c9:
         08:cb:81:df:61:bb:57:dc:27:36:c3:2f:5f:a4:db:7f:ad:95:
         e0:88:94:4c:b0:61:39:99:ea:8e:7d:9d:9d:64:a8:5f:3b:e0:
         1e:f7:e2:2a:aa:f3:8a:7a:85:62:72:fa:f2:63:0c:20:f3:52:
         f5:ae:bb:0c:c2:70:b7:eb:43:54:82:62:8f:4e:b5:9f:d7:83:
         b3:5b:84:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:09:46 2025 by rpki-client