Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33332d3333203d3e20323632363432.roa
File:                     323830343a326561383a383030303a3a2f33332d3333203d3e20323632363432.roa (raw, json)
Hash identifier:          SOOQCwb7rTfPVxweprkjvWSKPXUunqVQ4VwX2g3R60k=
Subject key identifier:   A3:E0:AD:8C:D5:5E:6B:84:06:F4:21:5A:C4:7C:B7:05:DA:E0:DB:FA
Certificate issuer:       /CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
Certificate serial:       328485063CB320089E950B38DA681B9D0858AACD
Authority key identifier: C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33332d3333203d3e20323632363432.roa
Signing time:             Thu 06 Mar 2025 03:50:02 +0000
ROA not before:           Thu 06 Mar 2025 03:45:02 +0000
ROA not after:            Thu 05 Mar 2026 03:50:02 +0000
asID:                     262642
IP address blocks:        2804:2ea8:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:84:85:06:3c:b3:20:08:9e:95:0b:38:da:68:1b:9d:08:58:aa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C48D8D96F1FFEC5F20C6F1F733EE69503E716745
        Validity
            Not Before: Mar  6 03:45:02 2025 GMT
            Not After : Mar  5 03:50:02 2026 GMT
        Subject: CN=A3E0AD8CD55E6B8406F4215AC47CB705DAE0DBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f5:ac:38:d2:68:8b:e4:a0:41:ad:2f:d6:41:
                    23:e1:7f:95:8e:74:05:58:1f:26:27:ac:e5:77:ba:
                    8f:42:32:f6:5d:29:28:ad:fc:aa:bc:4d:35:1e:7d:
                    b1:9f:b3:c6:b3:b5:8d:0c:0e:fb:72:9a:c3:8c:7f:
                    2e:90:79:3e:5a:cb:ad:2e:1f:4b:8d:fa:9b:41:b8:
                    02:00:11:02:d3:06:ba:65:45:00:8b:ee:17:04:47:
                    03:e4:73:27:13:3a:ea:76:a0:21:86:26:7e:0a:c7:
                    0e:2c:42:87:db:71:f3:fc:e0:36:0f:23:20:a1:b6:
                    bc:84:21:f0:cc:4d:c3:97:09:d8:8a:4c:b7:7c:8c:
                    ea:91:89:a0:39:90:6f:8e:36:4f:e1:f9:98:8b:9e:
                    f7:58:18:10:11:0b:5e:e5:52:c5:95:b8:4a:17:10:
                    39:31:55:0e:c3:cd:92:39:44:e4:20:1a:7c:ca:3e:
                    18:ef:b8:97:16:e5:c9:50:44:66:dd:74:44:c5:bc:
                    45:30:bb:06:f9:2c:f8:bb:5d:f3:6e:40:7e:57:0a:
                    4f:9a:ac:b3:9a:71:f7:17:9b:bb:09:62:ac:e5:64:
                    0d:d4:af:68:13:85:23:7d:3f:4e:60:7a:70:65:dd:
                    e3:ee:77:17:b8:7a:2e:3c:d2:20:34:65:d5:b6:f7:
                    2c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E0:AD:8C:D5:5E:6B:84:06:F4:21:5A:C4:7C:B7:05:DA:E0:DB:FA
            X509v3 Authority Key Identifier:
                keyid:C4:8D:8D:96:F1:FF:EC:5F:20:C6:F1:F7:33:EE:69:50:3E:71:67:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C48D8D96F1FFEC5F20C6F1F733EE69503E716745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/1/323830343a326561383a383030303a3a2f33332d3333203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ea8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:59:95:51:0c:e2:94:27:21:c2:3d:0b:02:43:17:68:3d:53:
         a9:e6:74:d9:35:b6:93:8f:f5:1f:c4:b1:6b:f4:bc:e9:7c:93:
         13:b3:5b:54:f4:8a:cb:e0:39:52:0e:3e:83:2b:3b:f3:df:01:
         b8:97:7f:92:b3:60:69:23:89:bd:c3:6b:0f:bb:63:25:d2:b2:
         14:e0:1a:83:a6:aa:1e:9e:70:1b:4f:a0:06:1f:00:1b:cf:87:
         cf:c3:85:b3:aa:54:77:a1:5c:56:c8:8f:5c:d6:c5:8d:70:22:
         5d:78:5b:f7:f3:55:1e:9a:4a:37:8d:c1:02:89:23:a9:82:89:
         2a:59:7a:d7:79:9f:67:d5:16:83:41:6d:31:5b:cd:f4:b6:ed:
         df:df:1a:7d:8b:bf:4e:a1:74:cd:3e:66:e0:73:2b:f1:2a:0d:
         af:89:24:79:85:37:53:0a:a1:d3:31:0d:ab:b8:9c:54:fe:63:
         72:36:02:a4:38:23:01:e4:d7:f8:88:27:9e:e4:a5:64:be:d9:
         fe:f4:4a:d5:34:09:96:3f:36:a4:7b:43:30:72:07:a6:09:0d:
         29:86:a1:3d:d7:e0:b8:97:71:8e:0c:f0:13:fb:62:4f:d5:58:
         8b:30:e2:4f:20:0b:2e:03:0a:4d:48:f5:4c:32:4e:9f:f6:19:
         7c:de:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:34:21 2025 by rpki-client