Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3a2f33322d3332203d3e20323733363633.roa
File:                     323830343a386135383a3a2f33322d3332203d3e20323733363633.roa (raw, json)
Hash identifier:          wdoU0/3G7naKrZsiNjUMbIteHDMdVMC3snlVPk3EblE=
Subject key identifier:   CA:33:E5:60:F3:C8:4C:35:D7:33:0E:62:B5:86:3D:41:AA:7E:BF:D7
Certificate issuer:       /CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
Certificate serial:       05268437613495F4C6C75B01CEA96F1EB1DB8B23
Authority key identifier: DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3a2f33322d3332203d3e20323733363633.roa
Signing time:             Fri 21 Mar 2025 19:04:14 +0000
ROA not before:           Fri 21 Mar 2025 18:59:14 +0000
ROA not after:            Fri 20 Mar 2026 19:04:14 +0000
asID:                     273663
IP address blocks:        2804:8a58::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 10:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:26:84:37:61:34:95:f4:c6:c7:5b:01:ce:a9:6f:1e:b1:db:8b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
        Validity
            Not Before: Mar 21 18:59:14 2025 GMT
            Not After : Mar 20 19:04:14 2026 GMT
        Subject: CN=CA33E560F3C84C35D7330E62B5863D41AA7EBFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:89:db:f4:68:ed:bf:ff:86:79:28:a1:32:
                    5e:60:51:91:87:69:dd:a1:29:d9:9f:9c:6b:ac:b8:
                    37:23:f3:7c:1a:5b:d8:e5:aa:1e:aa:04:61:e0:2f:
                    a6:c3:26:7f:0f:c7:e2:c2:ac:f6:56:3a:a0:ec:87:
                    c7:9a:37:34:cf:18:88:81:0f:2e:c6:d9:bf:86:60:
                    ca:b5:cd:f4:61:ea:3a:30:29:71:13:27:36:39:be:
                    60:0d:1a:07:5c:0e:44:4a:c1:3e:81:0d:b6:7c:37:
                    69:34:b5:9a:f7:6c:df:74:6b:5e:d9:a1:32:91:d1:
                    da:b0:11:99:5b:88:87:57:c4:fc:91:40:f0:d5:da:
                    7c:b1:7f:48:fd:ae:b7:ca:b6:5e:11:83:1b:3f:06:
                    15:51:8f:29:69:7c:c4:17:0c:67:dd:36:ed:0b:45:
                    0d:1a:56:ec:68:bf:ed:72:6f:a6:2a:4a:21:2c:95:
                    28:6d:b9:79:4f:bd:87:97:75:98:b0:a8:d7:73:e7:
                    f4:53:57:68:ff:de:da:45:d4:1b:31:e7:6c:be:db:
                    7c:38:f4:84:a8:d2:34:1a:f7:c7:fd:e3:35:50:a0:
                    70:49:c6:d5:23:c4:5b:b7:77:c3:72:0f:55:e3:3b:
                    32:00:86:54:be:d3:72:ea:8d:ff:52:8a:00:6c:08:
                    b3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:33:E5:60:F3:C8:4C:35:D7:33:0E:62:B5:86:3D:41:AA:7E:BF:D7
            X509v3 Authority Key Identifier:
                keyid:DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3a2f33322d3332203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a58::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:72:7a:8e:fc:35:87:8d:fa:32:f1:dc:d9:ba:09:f0:ab:04:
         e2:3b:49:ff:a4:ca:54:10:6e:2c:4f:0c:62:3c:96:77:82:7f:
         86:5c:7f:79:f1:e6:1a:4b:f1:72:a2:e5:86:5c:8c:f0:c9:4a:
         3d:11:84:e8:7b:0d:1e:8c:94:6b:d3:b2:01:00:97:8c:1e:6e:
         56:c0:22:1e:3e:6d:51:20:11:23:6f:56:d6:91:1e:36:62:93:
         e2:a0:8c:21:df:81:bb:36:63:93:65:46:c2:7f:21:f5:1a:77:
         4f:f2:63:f1:61:c8:30:31:fc:80:3a:f4:ef:2c:ca:bc:4e:b9:
         ee:dd:f9:d7:ed:f5:90:3e:6f:df:6d:55:57:3b:9b:49:3d:78:
         9b:48:3e:4f:99:bd:3e:ea:5d:44:ae:68:2a:12:ab:59:9e:00:
         af:1a:3b:f5:a8:df:60:9c:ea:b2:dd:20:3a:d6:f3:bb:ba:70:
         81:36:96:35:78:51:79:5b:96:de:a0:a8:74:3c:e6:b9:e6:9d:
         0b:94:1e:ab:d9:94:28:9d:34:59:0b:44:2e:25:cd:f9:6f:cc:
         73:5c:d1:26:8b:95:3e:b5:38:b2:7d:e4:a4:8a:21:ef:c3:9b:
         97:39:d8:24:bc:fa:57:5d:15:0a:de:c9:6b:eb:a4:36:67:6c:
         c3:0f:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:31:46 2025 by rpki-client