Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa
File:                     323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa (raw, json)
Hash identifier:          E99zoi2NY/K4TXY6d6YryWjCWjyBxydG2Mg6fKnJJ7Q=
Subject key identifier:   5B:45:03:0D:82:EC:14:76:5A:82:5D:E3:4D:9B:23:4C:87:8C:7C:85
Certificate issuer:       /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial:       280C0572346348E30E9D0D5DBC62C4785009A6FD
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     272549
IP address blocks:        2804:84f8:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
                          rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0c:05:72:34:63:48:e3:0e:9d:0d:5d:bc:62:c4:78:50:09:a6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ee:59:6b:98:eb:92:e8:8f:1c:e3:d7:ce:96:
                    fe:01:95:3a:c1:0f:80:ab:c2:ce:81:d6:0b:71:bb:
                    ec:f9:f5:49:49:23:d9:a3:88:0e:dc:b3:3d:f0:b2:
                    6b:db:6c:78:c1:2b:83:3e:bf:87:09:6f:15:f2:4a:
                    51:13:b3:1f:bf:92:c5:d1:53:af:3d:5b:c1:ca:47:
                    07:ca:7a:f6:15:71:5d:5f:4e:34:6f:f8:0d:48:11:
                    29:59:23:22:cc:33:82:01:68:e2:4e:2d:ab:57:49:
                    e6:b2:84:2c:b2:a5:84:e5:2a:d9:23:2a:d6:16:67:
                    c1:7d:3a:7e:46:df:3b:04:0f:46:89:ed:17:f5:a2:
                    e9:1e:e0:eb:95:31:61:c2:3a:91:66:93:0c:8c:ca:
                    d1:c6:d4:11:e3:f3:de:b7:8b:07:f1:3d:3c:68:9c:
                    68:f5:61:14:4c:8e:35:ad:14:fb:ec:57:16:2a:60:
                    f9:3b:be:05:84:50:7b:86:6c:1a:0a:5c:f9:67:e5:
                    bc:4e:c7:ef:65:2b:c7:60:de:6f:f7:bc:78:3e:40:
                    35:6a:8f:00:2c:08:8a:5b:89:34:b7:4e:33:b2:7a:
                    86:81:eb:cf:84:ee:04:00:4a:d0:86:47:df:df:fe:
                    6b:e3:93:59:41:06:25:f4:d2:5f:ff:42:b4:6c:68:
                    d7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:45:03:0D:82:EC:14:76:5A:82:5D:E3:4D:9B:23:4C:87:8C:7C:85
            X509v3 Authority Key Identifier:
                keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84f8:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:9a:44:38:75:59:f6:36:d1:3c:4f:75:b2:1e:24:8d:6b:a4:
         65:11:d2:6e:0f:bc:ff:b9:ef:29:2e:fb:ce:7d:4d:3b:1e:f4:
         ae:26:a8:7c:b1:33:93:f0:af:66:fa:b8:d6:50:94:79:59:7b:
         da:e0:2e:7c:c8:32:52:01:7d:33:21:0b:61:02:c3:93:8a:2d:
         4b:22:0c:dd:7e:3d:19:30:be:ee:1a:36:43:93:97:c5:ba:e7:
         ca:ec:69:e9:63:c6:32:3d:a5:e1:12:aa:6c:cc:ee:bf:46:29:
         36:a3:35:0b:1b:de:2f:8c:c8:cc:4c:75:c1:b5:93:c4:47:bd:
         7b:d1:74:4c:0f:76:16:da:6a:83:f3:14:66:e0:2e:20:56:43:
         87:e5:d1:35:27:eb:8c:8e:83:a8:cc:9d:68:8a:8a:a1:37:a5:
         74:65:38:5f:f5:fa:54:ec:2d:65:b8:07:d1:ff:a9:1a:a5:c0:
         6a:8c:43:35:e3:cc:3f:da:d3:99:84:ea:94:2a:bf:3c:73:2f:
         f1:c2:82:5c:1f:bc:be:a9:21:a7:16:a0:42:aa:ca:e1:59:ed:
         ec:2a:3f:b2:35:68:9b:d0:f8:49:d3:5f:18:08:fa:64:74:14:
         00:49:d7:6a:2a:36:df:82:75:14:90:70:f1:1e:4b:19:3b:1a:
         89:ac:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:17:46 2025 by rpki-client