Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
File:                     323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier:          YZzoZ85DoUHS4gCuVnehRhKWN58SdNn5GMrPCF6nUXU=
Subject key identifier:   82:61:F3:C5:6A:F7:14:9F:D7:6D:D0:52:86:B1:88:27:CE:D1:D4:AC
Certificate issuer:       /CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
Certificate serial:       1235B3B377874657D1D2695961B6F552A42D15A6
Authority key identifier: A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
Signing time:             Tue 04 Mar 2025 06:47:14 +0000
ROA not before:           Tue 04 Mar 2025 06:42:14 +0000
ROA not after:            Tue 03 Mar 2026 06:47:14 +0000
asID:                     265393
IP address blocks:        2804:3364:500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl
                          rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 02:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:35:b3:b3:77:87:46:57:d1:d2:69:59:61:b6:f5:52:a4:2d:15:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
        Validity
            Not Before: Mar  4 06:42:14 2025 GMT
            Not After : Mar  3 06:47:14 2026 GMT
        Subject: CN=8261F3C56AF7149FD76DD05286B18827CED1D4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b6:98:50:a8:06:ff:07:fe:c5:16:32:a2:d8:
                    9f:8c:29:09:1c:82:b5:35:a3:62:3e:a9:f2:8c:4e:
                    a0:7d:8b:43:3a:0d:de:9a:b9:9b:5b:54:22:47:db:
                    0b:17:90:fd:94:89:13:6c:a3:c2:15:3d:72:f4:c6:
                    02:76:da:51:9f:1f:97:3d:aa:92:c4:da:5c:b5:0b:
                    f1:10:65:5e:8b:81:14:77:22:11:de:a9:20:38:12:
                    3e:54:bf:fe:5b:b4:83:b5:91:35:9d:74:c4:57:0a:
                    8b:41:e3:9f:17:1e:e7:49:66:b5:dc:9a:61:30:65:
                    c4:93:f8:ac:ac:a9:6d:04:9f:f7:a2:52:1e:43:89:
                    bd:cb:4e:40:6c:00:f8:2b:90:56:44:c5:13:7d:50:
                    2b:02:ca:bd:2b:58:66:24:15:62:e1:36:bb:16:7a:
                    bc:94:3e:58:d4:c0:1b:57:ad:ad:9f:59:d8:30:22:
                    31:e2:f4:f6:de:9b:23:c3:65:af:a6:ba:49:0d:e6:
                    ba:1d:d0:64:e7:49:1f:19:73:91:cd:87:c0:25:b0:
                    80:8f:fd:22:0a:d8:d6:71:c4:6a:35:ec:62:dc:b1:
                    22:3f:af:cb:98:b9:45:62:8c:35:6e:7c:7f:da:20:
                    de:e7:76:f7:83:99:26:21:5b:5f:0b:33:3c:12:68:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:61:F3:C5:6A:F7:14:9F:D7:6D:D0:52:86:B1:88:27:CE:D1:D4:AC
            X509v3 Authority Key Identifier:
                keyid:A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3364:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:70:1a:2d:f6:5e:81:33:77:d8:e5:f0:ce:5e:a9:21:e0:87:
         0c:53:87:a7:d9:e3:e4:25:be:0e:73:14:50:ca:2e:7b:f4:0c:
         00:b1:e9:b7:38:6e:2b:a1:1d:34:80:ec:08:40:aa:c7:06:3e:
         5e:d4:be:04:84:c7:31:e0:ac:2a:f9:9b:95:e2:b8:94:fb:8a:
         b8:2e:07:68:16:1f:b2:e4:8f:1c:3c:dc:59:ed:a5:35:7c:f4:
         a3:37:c8:a9:6f:7a:e7:b1:d6:87:08:99:b4:94:ca:dd:25:28:
         bf:5e:c7:82:be:c8:df:92:75:ae:cf:e5:ef:c9:55:75:35:a7:
         a2:49:af:b1:1a:09:7a:6f:45:c1:97:e8:88:d9:31:4e:0d:ce:
         86:d7:fd:52:90:36:a5:da:1d:55:9b:de:cd:a2:80:89:c4:63:
         0e:ff:4f:d1:6b:a6:11:17:b8:69:ca:8b:10:c0:ea:74:04:33:
         9a:83:17:fa:b7:8c:31:42:13:2f:3e:a9:5e:43:fd:e7:08:01:
         50:a4:1e:57:86:81:2f:7c:8d:7d:29:df:23:76:80:af:6e:55:
         e5:a4:9e:cd:1f:c2:04:c1:2f:3e:61:cf:dd:73:bb:d8:65:2d:
         22:33:55:40:cb:12:f1:15:ea:60:c2:c4:8f:c2:45:f7:1f:52:
         79:52:c4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 10:35:06 2025 by rpki-client