Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/323830343a336232633a3a2f33322d3438203d3e20323636313333.roa
File:                     323830343a336232633a3a2f33322d3438203d3e20323636313333.roa (raw, json)
Hash identifier:          hVC7AXP7LFoAa7V9xSq31cJqKbPCjy4a7RX4qav2GFU=
Subject key identifier:   72:DC:2E:83:13:51:C7:54:6C:F5:50:84:FD:64:D5:B0:47:C1:9D:AB
Certificate issuer:       /CN=E2DD7F71F2616B50D18488FA622A57D4C8428DF8
Certificate serial:       5D1C66C1B2CA9E000F3F3F77451BA51C9C17C01F
Authority key identifier: E2:DD:7F:71:F2:61:6B:50:D1:84:88:FA:62:2A:57:D4:C8:42:8D:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/323830343a336232633a3a2f33322d3438203d3e20323636313333.roa
Signing time:             Thu 06 Mar 2025 00:39:05 +0000
ROA not before:           Thu 06 Mar 2025 00:34:05 +0000
ROA not after:            Thu 05 Mar 2026 00:39:05 +0000
asID:                     266133
IP address blocks:        2804:3b2c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.crl
                          rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 17:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1c:66:c1:b2:ca:9e:00:0f:3f:3f:77:45:1b:a5:1c:9c:17:c0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2DD7F71F2616B50D18488FA622A57D4C8428DF8
        Validity
            Not Before: Mar  6 00:34:05 2025 GMT
            Not After : Mar  5 00:39:05 2026 GMT
        Subject: CN=72DC2E831351C7546CF55084FD64D5B047C19DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:47:04:05:b2:b8:87:8e:15:31:36:ee:f3:
                    94:8e:92:f5:0d:73:12:7c:ae:cf:87:40:d7:2b:c5:
                    d9:e0:84:2c:f9:c1:12:1a:73:f9:11:95:1d:81:79:
                    6b:16:33:94:34:67:3b:36:d8:a6:9b:ad:99:80:1c:
                    ac:ef:41:14:4a:f8:78:38:db:76:d3:e9:f2:f2:d0:
                    02:6e:5e:98:a8:d0:82:a4:21:c6:d4:2d:a4:2b:ae:
                    45:8c:e2:8b:d5:bc:04:a9:f9:4b:04:d2:ab:d6:d2:
                    89:4c:86:59:78:f0:c4:75:26:4f:38:c8:a3:6a:ff:
                    3c:7b:06:35:de:a5:b7:7c:62:a9:e9:20:92:0b:52:
                    28:54:03:f8:10:20:96:c7:de:51:52:3a:9e:2b:a6:
                    31:43:a7:3f:2c:43:b0:59:ae:8d:b2:41:62:4f:8c:
                    68:45:95:33:da:1b:95:c2:88:8f:04:0d:51:48:17:
                    5b:c4:cb:6b:51:13:3a:eb:05:73:f9:55:32:42:3b:
                    3a:43:e4:49:cb:e7:71:0d:2d:6b:08:0c:8b:b8:02:
                    c9:7e:de:1b:ae:1d:22:e7:42:1c:80:30:62:19:3e:
                    10:45:07:d4:d2:58:11:6c:1b:b8:01:4a:d5:4b:a5:
                    a9:a8:86:56:5c:5d:99:d6:64:c7:a6:23:27:a7:81:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DC:2E:83:13:51:C7:54:6C:F5:50:84:FD:64:D5:B0:47:C1:9D:AB
            X509v3 Authority Key Identifier:
                keyid:E2:DD:7F:71:F2:61:6B:50:D1:84:88:FA:62:2A:57:D4:C8:42:8D:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2DD7F71F2616B50D18488FA622A57D4C8428DF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7aYV74yXq7ry7pDgtX1WycqpPSHEkoK2uWRYY6Gd21Tc/1/323830343a336232633a3a2f33322d3438203d3e20323636313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:97:64:9b:a9:1f:ec:f5:42:fa:e6:90:29:60:86:bb:72:30:
         59:3a:61:0e:af:67:eb:61:43:8b:dd:09:cf:98:5c:60:e3:05:
         22:85:ca:69:34:bd:ee:cf:f4:9a:4f:2c:c7:f4:a8:99:df:c7:
         5c:0d:ce:4b:9d:db:42:e3:02:3a:a2:b6:67:e9:da:85:e3:f4:
         53:a0:77:13:48:3e:17:4d:23:c0:9e:c6:3b:a2:3d:30:45:19:
         10:c2:bc:0b:67:dc:53:e8:cc:53:d8:5a:26:5d:f3:6d:b0:81:
         ce:ec:5e:8e:7d:c1:9e:85:c1:45:8e:bd:ef:0c:de:80:cf:a2:
         73:a1:58:ed:ba:13:fc:6e:ad:cb:4d:fe:61:01:a9:d5:66:2f:
         c4:6c:ed:e5:e5:5c:e2:40:1e:70:b6:5c:be:2c:cb:59:7d:83:
         96:e9:4d:fd:9d:0e:33:7d:35:b2:af:43:56:79:56:8e:1b:36:
         57:56:eb:72:3a:c3:3b:a2:15:27:f9:ac:aa:b0:c1:24:99:34:
         bf:e2:0d:d1:a3:65:80:f5:37:55:c3:51:35:d7:b5:31:10:61:
         d3:1a:a5:a8:23:9e:e9:ec:e2:c2:2a:ee:b7:e5:ee:82:cb:1a:
         61:a8:03:9f:d4:6e:1c:00:52:63:63:24:ad:28:57:5f:e7:98:
         a2:0e:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:18 2025 by rpki-client