Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a633030303a3a2f33342d3334203d3e20323638313732.roa
File:                     323830343a353932383a633030303a3a2f33342d3334203d3e20323638313732.roa (raw, json)
Hash identifier:          gVn5u3HaVB45E4NkqkMQDhuzj1onjpxsMvwMlKReGxE=
Subject key identifier:   74:5A:E8:03:06:AC:6A:7E:BD:C7:DF:C0:A1:68:24:2B:DD:5E:4F:DD
Certificate issuer:       /CN=3D90D603749AF57040F7092DF1F2D266672E47E7
Certificate serial:       50B6A8A0AF2377125EA8AE5406975C8995064406
Authority key identifier: 3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a633030303a3a2f33342d3334203d3e20323638313732.roa
Signing time:             Fri 04 Apr 2025 15:20:25 +0000
ROA not before:           Fri 04 Apr 2025 15:15:25 +0000
ROA not after:            Fri 03 Apr 2026 15:20:25 +0000
asID:                     268172
IP address blocks:        2804:5928:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl
                          rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 20:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:b6:a8:a0:af:23:77:12:5e:a8:ae:54:06:97:5c:89:95:06:44:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D90D603749AF57040F7092DF1F2D266672E47E7
        Validity
            Not Before: Apr  4 15:15:25 2025 GMT
            Not After : Apr  3 15:20:25 2026 GMT
        Subject: CN=745AE80306AC6A7EBDC7DFC0A168242BDD5E4FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:ac:a2:c6:2d:61:fb:52:fb:71:db:2d:1e:
                    2d:7a:d4:83:ba:f5:27:53:ab:5e:7a:b4:fe:ce:41:
                    ea:5b:7f:49:61:c9:3e:df:e5:a3:9b:86:95:7d:4b:
                    03:10:79:8d:7a:80:46:f2:61:0b:97:95:d8:15:24:
                    f9:fa:c6:44:71:d1:90:be:91:3c:fd:22:9f:29:e8:
                    a2:cb:48:c7:6f:35:5b:87:03:34:5c:e1:53:ab:c3:
                    ee:19:2e:c3:b2:76:8c:3e:a7:b7:1b:b0:35:c0:f0:
                    69:f1:60:63:b0:13:39:91:82:b6:6d:60:d5:76:de:
                    52:12:66:b6:94:f6:ac:68:69:76:12:3e:c7:6e:49:
                    21:8d:8a:75:6c:9a:1b:2f:6c:b5:10:a4:ff:2e:98:
                    4a:b3:fb:4f:81:97:fd:30:00:31:2d:f0:1b:e4:7e:
                    d7:67:39:1f:f8:f1:33:b1:73:70:ea:ec:ac:2d:8c:
                    50:77:a0:5d:65:d5:cd:da:8f:43:ce:30:d4:50:68:
                    8c:60:00:e0:2b:c7:5b:1d:c1:9c:b6:69:63:54:b2:
                    c1:5b:5f:a2:b9:9a:43:7a:fe:47:b7:a6:84:bb:04:
                    f8:d4:f6:a0:3e:84:a5:8b:e4:44:e5:36:7b:38:11:
                    e6:26:14:56:0f:3e:82:aa:08:f0:7d:0c:4e:48:4b:
                    60:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5A:E8:03:06:AC:6A:7E:BD:C7:DF:C0:A1:68:24:2B:DD:5E:4F:DD
            X509v3 Authority Key Identifier:
                keyid:3D:90:D6:03:74:9A:F5:70:40:F7:09:2D:F1:F2:D2:66:67:2E:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/3D90D603749AF57040F7092DF1F2D266672E47E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D90D603749AF57040F7092DF1F2D266672E47E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7hVdgSauDRj6dDiYyw9q28oGT6BPRktoG17CDCj5atxF/0/323830343a353932383a633030303a3a2f33342d3334203d3e20323638313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5928:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:11:21:6f:00:9e:02:ef:a1:7e:67:2e:1a:f2:e7:2f:10:ec:
         10:43:39:31:f3:6c:c6:68:b3:7b:d7:7d:52:63:70:93:f1:af:
         8e:a3:f3:c2:fa:b0:6f:dd:11:95:0d:f9:13:10:16:d0:31:9f:
         c7:63:5c:97:11:28:b2:c6:15:00:0d:6e:5b:25:04:5e:60:f9:
         1f:e9:ba:62:4b:22:07:3c:b0:73:34:ff:a6:1b:49:e6:3e:eb:
         f3:a7:50:7b:81:c9:17:31:0a:87:50:a1:5b:8e:82:bf:79:18:
         b7:a8:a0:3a:cd:bc:81:8e:4b:e5:ac:fe:df:a3:8f:b3:27:40:
         9b:01:3f:45:89:a7:ab:b0:ea:0c:6f:dd:e9:17:16:5a:eb:98:
         54:d2:89:d4:6f:db:5c:47:ca:39:63:53:88:36:7a:4a:24:68:
         b8:8b:65:f5:41:e6:37:4b:1b:18:e6:a1:f8:32:a6:57:9c:b3:
         83:c6:74:da:fe:60:e1:c3:1e:f5:20:1c:e3:f5:3b:63:22:29:
         4f:67:6f:7f:ac:f4:f5:e1:63:43:f7:00:f5:3b:48:9f:c0:1a:
         d3:7a:36:25:e7:a5:b9:e6:af:bc:29:47:73:07:40:8d:d5:8c:
         df:ee:0c:dc:ab:32:ad:dd:1d:ac:21:b2:b4:e7:3d:3c:1a:04:
         8a:62:52:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:15:41 2025 by rpki-client