Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa
File:                     323830343a346335303a3a2f33342d3334203d3e20323637333633.roa (raw, json)
Hash identifier:          EAnfvafcCO8mVp3Qg46vYIZPIjhIgBSrjCuPgbIOzZc=
Subject key identifier:   0C:C0:C5:1E:41:5B:E5:57:F1:22:1B:6A:50:C3:43:B8:0E:37:C2:97
Certificate issuer:       /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial:       30CD4B6867552BC9126129021CA08953B77FF4D0
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa
Signing time:             Thu 06 Mar 2025 13:54:53 +0000
ROA not before:           Thu 06 Mar 2025 13:49:53 +0000
ROA not after:            Thu 05 Mar 2026 13:54:53 +0000
asID:                     267363
IP address blocks:        2804:4c50::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
                          rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 10:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cd:4b:68:67:55:2b:c9:12:61:29:02:1c:a0:89:53:b7:7f:f4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
        Validity
            Not Before: Mar  6 13:49:53 2025 GMT
            Not After : Mar  5 13:54:53 2026 GMT
        Subject: CN=0CC0C51E415BE557F1221B6A50C343B80E37C297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:17:83:20:97:03:49:a1:6d:ae:6f:50:a3:
                    bc:c8:19:5e:fa:5f:49:8a:cd:c8:e3:16:21:96:c5:
                    d8:db:36:7c:47:26:ed:c8:ae:6b:4b:52:ce:17:c4:
                    be:ca:c8:ce:1c:84:54:85:59:3a:ce:b7:d1:a2:ca:
                    de:f8:b7:f8:d0:68:bf:01:0f:9c:6d:cd:00:98:3f:
                    9f:ff:72:0b:01:55:0a:7c:3a:71:72:bd:33:39:a0:
                    3d:5c:10:c5:13:00:cb:87:7a:85:75:3e:a1:54:9f:
                    3c:73:74:55:11:dc:30:97:12:c3:4f:ee:8f:dc:11:
                    a1:01:9c:a3:c3:b2:88:03:68:08:2d:9a:91:b2:a3:
                    e6:dd:2e:5b:70:b0:d1:4b:e8:3d:e7:11:1c:7e:7f:
                    1c:d2:92:f2:91:4c:49:43:18:8c:29:ee:59:85:95:
                    3a:e1:1c:e9:98:11:00:45:c3:c5:a5:45:89:ed:65:
                    8c:ab:4c:de:34:6d:e5:56:8b:b9:65:f0:b2:46:84:
                    98:16:cd:81:96:71:82:04:0a:f3:31:18:e5:dd:2c:
                    6b:6f:1f:74:35:8c:9d:ff:f7:ef:65:b8:e8:56:e5:
                    62:26:98:87:87:cd:df:ee:49:d5:af:ca:04:6e:60:
                    7b:be:e6:f7:54:1f:da:52:5c:5e:b0:83:aa:fd:ac:
                    17:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C0:C5:1E:41:5B:E5:57:F1:22:1B:6A:50:C3:43:B8:0E:37:C2:97
            X509v3 Authority Key Identifier:
                keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/323830343a346335303a3a2f33342d3334203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50::/34

    Signature Algorithm: sha256WithRSAEncryption
         bc:e5:91:fe:89:9b:27:e3:c4:e2:db:e8:e3:5b:b0:14:e5:29:
         40:aa:13:85:f8:8a:6f:d8:25:27:b7:96:73:3e:16:a5:18:98:
         18:4e:a8:4a:23:57:1a:5b:92:6b:d6:ce:5d:5a:85:54:15:1c:
         4f:9b:e7:fc:0d:ec:55:46:89:bc:ef:e0:c1:da:d2:28:69:50:
         17:d6:16:45:6f:a8:4a:53:e5:e0:e6:29:f9:ac:b0:e2:2b:fa:
         a1:7f:de:f0:42:6f:ea:e1:a8:86:9a:16:92:d7:03:a0:42:c8:
         2e:1b:d9:8a:07:15:0d:e6:e9:40:46:13:b9:b9:01:78:1f:8e:
         04:8f:e2:2d:78:1a:b9:c0:f0:a8:6d:98:ea:08:0f:55:5f:ad:
         a2:74:28:e1:7d:fd:7d:37:19:16:6e:64:60:67:0e:9d:90:1c:
         ba:36:7e:d3:43:d9:32:06:92:19:a0:72:c9:1b:cb:80:35:eb:
         6b:6d:32:13:1f:16:14:5f:44:06:eb:eb:a5:9a:29:d8:f6:a3:
         a3:63:ee:fb:e7:7f:ad:7c:32:73:63:69:76:f4:0e:ac:c4:fc:
         a6:62:c2:73:e8:89:a8:eb:99:3e:b1:3e:bd:ab:53:48:5f:88:
         cb:3d:cf:fd:48:d6:3f:ac:76:3e:60:29:eb:75:e3:7e:46:74:
         14:65:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:57:00 2025 by rpki-client