Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a3a2f33342d3334203d3e20323635303431.roa
File:                     323830343a333164633a3a2f33342d3334203d3e20323635303431.roa (raw, json)
Hash identifier:          JIDQ5OJfYiZzL+EwmGqxHmbtuCyp62IcQhBY/taq8D0=
Subject key identifier:   FA:17:69:50:42:0F:77:70:B8:05:A5:45:A5:31:C3:CB:65:78:66:7F
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       389309F83D942A082CE16F72EEAF657114DFB6B3
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a3a2f33342d3334203d3e20323635303431.roa
Signing time:             Thu 06 Mar 2025 16:52:49 +0000
ROA not before:           Thu 06 Mar 2025 16:47:49 +0000
ROA not after:            Thu 05 Mar 2026 16:52:49 +0000
asID:                     265041
IP address blocks:        2804:31dc::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 20:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:93:09:f8:3d:94:2a:08:2c:e1:6f:72:ee:af:65:71:14:df:b6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Mar  6 16:47:49 2025 GMT
            Not After : Mar  5 16:52:49 2026 GMT
        Subject: CN=FA176950420F7770B805A545A531C3CB6578667F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:9e:a5:39:c4:14:83:96:29:45:82:b4:66:
                    23:b3:e6:6f:8a:22:5d:54:2c:4d:42:f7:a7:11:74:
                    31:b3:9b:14:11:a0:b5:9e:a4:c5:8a:05:df:9a:da:
                    28:61:22:32:0a:5b:17:56:cf:8a:a1:12:3f:2e:39:
                    9e:a0:ab:c5:06:5c:b7:0d:25:13:56:bf:d0:91:c4:
                    5a:b3:0c:97:b4:92:7a:6f:17:39:b5:85:4a:5f:11:
                    26:04:0f:62:a4:9a:bf:f9:56:82:d6:f8:ab:d9:4d:
                    12:d8:1d:1a:81:28:af:7e:8d:84:fb:b2:3a:b4:19:
                    08:e5:87:96:71:4c:4d:73:a0:bc:65:72:e2:5b:f5:
                    65:8f:ca:5e:93:92:8e:b0:2f:b2:a6:8d:59:18:a4:
                    b8:f7:6e:43:bc:ef:ff:a5:af:f7:f2:5d:44:c0:a0:
                    46:de:79:fd:60:ef:6a:fd:f6:b2:c0:d8:34:76:1d:
                    c5:c8:a0:9a:12:14:7b:b6:b8:3b:dc:2c:bb:15:4c:
                    8e:a5:48:e5:4e:89:79:e9:f0:20:d5:34:28:2c:90:
                    62:63:c2:6f:a1:27:62:a3:82:69:18:29:09:3e:d8:
                    9d:40:05:8f:54:01:ac:1a:6f:8b:d2:ab:ae:f4:1e:
                    04:c8:e7:02:03:f4:40:9d:87:cc:3d:2c:1a:55:65:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:17:69:50:42:0F:77:70:B8:05:A5:45:A5:31:C3:CB:65:78:66:7F
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/323830343a333164633a3a2f33342d3334203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31dc::/34

    Signature Algorithm: sha256WithRSAEncryption
         b8:5c:9d:39:3a:4e:82:f8:a6:1d:4a:17:47:cf:f3:7d:4d:05:
         16:26:e7:d6:89:02:7c:0e:d8:8c:9b:8e:a0:1d:aa:56:b6:9b:
         1e:f9:e5:8f:24:db:ff:a4:dd:db:a5:b0:88:a9:9b:82:15:52:
         32:09:3e:1e:3c:ad:f0:eb:bd:39:b1:e9:67:44:3f:3d:66:99:
         7a:0c:06:7e:ce:5c:80:0a:1f:a6:ed:9a:d3:55:58:6e:0a:bd:
         7d:f9:89:22:b1:20:60:46:d3:de:cc:1d:e5:3e:bd:00:9e:b2:
         cf:1f:c9:ef:4f:b0:66:44:36:18:11:95:0c:c8:4f:01:2e:b0:
         81:d9:c0:cf:ac:f3:df:8e:e6:8c:a0:3b:46:12:38:fa:d9:a5:
         30:c3:8d:44:6c:12:5c:b8:e1:1f:70:1f:98:bd:e1:0c:24:59:
         4e:7a:2b:f2:aa:d8:74:9a:f8:ad:e3:0f:bf:db:d3:95:d5:28:
         e6:ef:98:4d:26:4e:3c:28:7f:c0:9d:41:99:ff:92:e6:9c:34:
         49:bf:92:f3:25:f6:85:3e:95:b9:ae:18:52:20:8e:06:fd:bb:
         01:04:08:c2:72:08:17:b9:bc:d4:fe:5d:75:42:19:a3:81:8d:
         12:ae:ea:cc:27:7d:7d:ee:25:89:42:a4:39:0b:00:74:d4:87:
         df:01:70:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:23 2025 by rpki-client