Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3438203d3e203238333036.roa
File:                     323830343a33343a3a2f33322d3438203d3e203238333036.roa (raw, json)
Hash identifier:          2bZm4vj15VHvPexCZ7bOxBFmJe9FFJyBZCYgQB+zAH0=
Subject key identifier:   BA:B0:42:5C:E0:56:80:F9:9C:FD:39:80:9E:64:86:D1:EE:3D:28:66
Certificate issuer:       /CN=00398394BC116D8D01BE15C08D06060EF5755D29
Certificate serial:       1EF218730EBAE7D6083A3E5291FEC29719B79ECB
Authority key identifier: 00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3438203d3e203238333036.roa
Signing time:             Tue 11 Feb 2025 02:55:23 +0000
ROA not before:           Tue 11 Feb 2025 02:50:23 +0000
ROA not after:            Tue 10 Feb 2026 02:55:23 +0000
asID:                     28306
IP address blocks:        2804:34::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f2:18:73:0e:ba:e7:d6:08:3a:3e:52:91:fe:c2:97:19:b7:9e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00398394BC116D8D01BE15C08D06060EF5755D29
        Validity
            Not Before: Feb 11 02:50:23 2025 GMT
            Not After : Feb 10 02:55:23 2026 GMT
        Subject: CN=BAB0425CE05680F99CFD39809E6486D1EE3D2866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:19:71:f9:a3:9c:ae:2a:e7:33:83:2f:41:db:
                    81:40:a8:d3:07:1f:59:6e:27:2a:90:33:8a:75:c4:
                    c1:7d:70:f4:11:66:80:88:30:09:a5:b5:37:7f:f2:
                    6e:2c:43:5f:f1:fe:88:08:8e:ac:09:9d:d2:0b:dd:
                    c6:13:b1:70:ff:76:40:13:fe:8b:16:0d:d4:08:b2:
                    b4:f7:18:a3:ab:7a:3a:b5:a8:15:94:a8:58:01:70:
                    5d:81:88:2a:f9:f3:11:c6:13:99:a9:01:93:d5:5b:
                    59:a9:87:f4:58:29:86:cc:7a:5e:03:0d:7b:f0:ad:
                    3b:a7:02:22:c2:11:9e:9a:94:d4:82:12:8e:07:25:
                    58:b2:cf:50:33:53:e6:8c:8d:40:e4:ca:81:85:eb:
                    3f:aa:cd:cd:72:03:d2:c6:4e:6c:e1:99:fd:f4:1e:
                    4c:2a:87:1b:de:d1:a0:46:c6:57:86:0f:f8:f6:7c:
                    90:d5:67:d0:21:0c:67:71:2c:90:69:1b:68:45:68:
                    0c:3d:64:be:4b:63:8b:6e:a9:97:ce:8c:6c:01:c0:
                    df:13:e1:f0:f3:cf:86:dc:cc:30:ab:9b:65:54:e5:
                    02:00:04:76:10:3f:02:c5:15:fa:82:6d:74:35:6d:
                    13:76:4c:d0:02:80:9e:e7:6a:32:c3:04:88:6c:fc:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B0:42:5C:E0:56:80:F9:9C:FD:39:80:9E:64:86:D1:EE:3D:28:66
            X509v3 Authority Key Identifier:
                keyid:00:39:83:94:BC:11:6D:8D:01:BE:15:C0:8D:06:06:0E:F5:75:5D:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/00398394BC116D8D01BE15C08D06060EF5755D29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00398394BC116D8D01BE15C08D06060EF5755D29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a3a2f33322d3438203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:fc:c4:5f:3e:dd:20:9c:37:8f:2e:b1:02:a8:6a:8f:64:90:
         07:9f:bb:e4:8a:52:40:f4:5e:29:9c:d7:6a:67:0e:ab:4e:df:
         b3:d5:c2:50:85:ae:9a:96:ba:b1:ed:81:f7:26:6e:c7:88:96:
         f3:0c:ce:24:a4:47:04:1f:94:0c:96:66:cd:f1:b3:e7:c4:4c:
         7c:3b:c3:9a:96:2f:9c:ef:2d:fa:74:10:c7:b5:23:81:bc:e2:
         43:b6:38:42:fb:19:d7:e4:b9:f2:0a:45:0a:33:2f:ef:1b:4c:
         f8:b7:04:c8:77:64:cf:5e:e3:d0:ea:1f:77:6a:5c:79:bc:23:
         18:b6:47:13:13:e2:45:fa:6e:e2:25:14:eb:a6:0d:b0:be:b1:
         b4:f6:f5:e9:1c:65:28:60:30:fc:2f:ce:af:a8:10:01:73:1b:
         1f:b1:97:3b:21:a9:b5:d1:49:1b:24:88:2d:47:46:8c:1d:e6:
         c1:ca:04:99:b9:48:65:b9:e0:ac:25:75:4d:e5:c6:d6:1b:99:
         aa:c4:20:20:0e:85:0a:14:f3:b7:ea:18:8a:2c:f2:67:54:db:
         d8:1d:37:41:fe:36:53:52:9c:ae:2e:3e:84:4b:2a:3b:84:92:
         35:57:e0:be:14:57:e3:50:00:54:37:9a:fb:36:6e:91:dd:34:
         55:b2:46:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:58 2025 by rpki-client