Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/323830343a6333383a3a2f33322d3430203d3e203532363835.roa
File:                     323830343a6333383a3a2f33322d3430203d3e203532363835.roa (raw, json)
Hash identifier:          9Jx2+aVV4jzqRxlWHlwczG0/42qe4mfyE3rvpk1r6vQ=
Subject key identifier:   C6:28:2A:A2:E2:69:11:57:42:E8:80:9A:FB:F8:1E:D7:56:6A:A1:8B
Certificate issuer:       /CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
Certificate serial:       4930999E9B210B6B2DF3377BDC506AAB6EB5A426
Authority key identifier: 38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/323830343a6333383a3a2f33322d3430203d3e203532363835.roa
Signing time:             Wed 05 Mar 2025 20:59:44 +0000
ROA not before:           Wed 05 Mar 2025 20:54:44 +0000
ROA not after:            Wed 04 Mar 2026 20:59:44 +0000
asID:                     52685
IP address blocks:        2804:c38::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl
                          rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:30:99:9e:9b:21:0b:6b:2d:f3:37:7b:dc:50:6a:ab:6e:b5:a4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CF6774B52D8A608752303C08D8139ABB69E3F0
        Validity
            Not Before: Mar  5 20:54:44 2025 GMT
            Not After : Mar  4 20:59:44 2026 GMT
        Subject: CN=C6282AA2E269115742E8809AFBF81ED7566AA18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:0e:98:e2:6b:39:bf:b1:fe:37:dd:3c:dc:
                    e2:05:cf:cd:a5:40:13:14:ff:88:c3:84:a1:c6:51:
                    4a:86:48:92:0d:d3:06:e2:1b:a6:c8:4c:55:6d:20:
                    4c:06:11:86:7f:18:3f:e7:3a:a8:d8:ea:0a:ec:17:
                    ee:58:11:8a:ec:9a:eb:04:82:43:87:0d:d3:87:ea:
                    07:5c:44:7f:9e:b4:b4:9b:01:96:5c:b4:cb:e4:94:
                    09:27:7b:4b:72:a1:f4:b0:76:ee:9c:0d:c9:82:96:
                    23:1f:52:e9:6d:f9:cb:17:cc:53:da:e8:d1:28:8b:
                    1f:cd:8f:1b:0d:47:88:06:db:b4:40:84:59:35:62:
                    f9:6c:41:38:c6:a4:18:1b:12:ee:8c:99:cc:1e:c8:
                    74:f8:8e:7d:b9:1a:32:f7:bc:30:3c:bf:03:dc:e8:
                    65:30:83:b2:f9:5c:54:f6:6a:5c:86:01:97:c4:61:
                    a7:80:a6:dd:36:d5:a1:dd:71:48:dc:97:6f:2d:e1:
                    7c:32:99:d2:07:27:c4:cc:8b:4e:fd:cd:ca:74:d0:
                    52:37:ef:0d:23:eb:1f:29:74:fa:a1:14:d6:f7:95:
                    07:d4:17:68:24:08:fb:50:05:a1:81:cf:c0:f9:12:
                    02:e8:e6:38:dc:6c:25:89:3a:09:d4:2d:b6:b9:2f:
                    ec:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:28:2A:A2:E2:69:11:57:42:E8:80:9A:FB:F8:1E:D7:56:6A:A1:8B
            X509v3 Authority Key Identifier:
                keyid:38:CF:67:74:B5:2D:8A:60:87:52:30:3C:08:D8:13:9A:BB:69:E3:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38CF6774B52D8A608752303C08D8139ABB69E3F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/1/323830343a6333383a3a2f33322d3430203d3e203532363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:6c:33:54:a0:eb:68:d5:08:00:86:86:01:32:0b:e3:dc:4c:
         e4:e9:6c:24:3a:de:4e:80:55:60:7c:6a:a7:c8:c0:39:2a:ec:
         e8:10:60:f2:46:9c:dc:09:91:38:3f:77:7a:9c:a4:6e:89:d3:
         26:1c:33:e0:1a:0f:5c:6e:f3:b2:a6:0b:3f:ce:c9:3c:6b:5a:
         0a:44:17:dd:1c:cf:bd:32:3d:a9:d4:07:51:92:13:7b:a7:ce:
         11:7a:4d:ec:a3:4a:07:aa:73:d5:63:98:84:76:e6:df:ea:6e:
         f5:5a:c8:75:e5:96:ea:a1:88:cf:08:cd:09:f9:36:69:6c:a3:
         15:2e:bd:24:2d:27:75:0b:d7:30:c6:ec:29:08:70:7d:45:2a:
         4f:33:86:36:3f:a6:f8:6e:01:1f:42:f8:4e:0f:06:30:d6:4a:
         41:45:a1:b4:13:cf:98:0b:b3:3a:35:52:ce:14:0c:7e:cb:47:
         06:84:a9:94:ec:9e:8c:2a:c1:26:a5:08:92:a4:f1:be:d6:ad:
         ec:12:d9:22:1f:43:a9:92:97:3b:be:7c:20:14:cd:ef:24:ef:
         96:4f:af:4c:ec:39:15:dd:1b:15:d6:9e:82:94:57:d8:11:30:
         6d:07:53:f9:39:fb:4a:2c:37:00:69:45:6e:33:9c:4f:e2:32:
         c2:bf:18:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:16:32 2025 by rpki-client