Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa
File:                     323830343a6165303a3a2f33322d3332203d3e203238333532.roa (raw, json)
Hash identifier:          QFG3QgCr9ptBxEYoHPZk0OTDX0Xn/NBwyqC+vdpzyfw=
Subject key identifier:   B3:CF:F3:73:20:D4:43:0E:80:60:96:C2:EC:B9:47:A1:5D:85:4F:0F
Certificate issuer:       /CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
Certificate serial:       58589003750570EB9C937A0EC77164206CF1BF5E
Authority key identifier: D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa
Signing time:             Tue 04 Feb 2025 12:06:24 +0000
ROA not before:           Tue 04 Feb 2025 12:01:24 +0000
ROA not after:            Tue 03 Feb 2026 12:06:24 +0000
asID:                     28352
IP address blocks:        2804:ae0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl
                          rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 12:23:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:58:90:03:75:05:70:eb:9c:93:7a:0e:c7:71:64:20:6c:f1:bf:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05E9D7E25FDD9255E0A8745221B447549A33F95
        Validity
            Not Before: Feb  4 12:01:24 2025 GMT
            Not After : Feb  3 12:06:24 2026 GMT
        Subject: CN=B3CFF37320D4430E806096C2ECB947A15D854F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:11:31:88:7c:98:95:0c:3e:4b:03:01:b5:
                    24:16:5f:a0:0e:4b:9f:bd:a0:39:d3:d4:0c:98:aa:
                    d3:5c:80:98:2a:3a:29:83:f8:30:8a:5d:e7:85:a7:
                    fa:40:ef:4a:da:29:4e:17:04:01:dc:11:97:80:95:
                    f3:39:48:2a:86:49:ca:6e:39:03:61:83:16:70:ba:
                    8c:fd:a6:e2:26:94:41:7c:db:5f:40:fb:fe:ef:99:
                    4d:eb:17:0c:a0:b2:2d:57:d1:45:8e:4c:ae:ac:84:
                    47:cd:d7:3c:ae:7e:e5:3a:83:18:13:3d:0a:4c:c2:
                    fa:36:88:ce:fa:f1:ec:82:60:70:d4:1c:01:8e:31:
                    0d:a9:9e:3c:61:1b:8f:df:ea:b3:72:4b:6a:98:66:
                    1c:33:4e:3c:ac:d1:2a:fc:df:7d:d6:96:e4:da:17:
                    dc:c2:0a:bc:c3:cc:1e:29:75:fc:50:33:ce:ff:7c:
                    29:63:0b:8e:3e:f1:98:6b:b6:8f:f7:3c:25:9d:59:
                    66:ea:46:d9:d5:f7:97:a8:e3:19:7d:b0:b4:68:6b:
                    93:9b:a5:a8:be:67:91:ed:52:07:38:ac:a9:e4:a8:
                    0d:ef:98:ce:1f:8c:c2:77:6b:1f:75:e5:f0:01:a8:
                    b9:8f:d6:62:e0:1b:f0:23:6b:7e:7b:a2:d0:fe:d0:
                    40:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CF:F3:73:20:D4:43:0E:80:60:96:C2:EC:B9:47:A1:5D:85:4F:0F
            X509v3 Authority Key Identifier:
                keyid:D0:5E:9D:7E:25:FD:D9:25:5E:0A:87:45:22:1B:44:75:49:A3:3F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/D05E9D7E25FDD9255E0A8745221B447549A33F95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05E9D7E25FDD9255E0A8745221B447549A33F95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3332203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:95:0f:4e:5b:c8:57:c9:09:22:7f:9f:38:9d:40:09:d9:58:
         a5:ca:9b:be:21:d4:35:73:fa:a6:f0:ac:97:27:f6:6e:aa:e0:
         da:6d:23:db:85:4b:5f:13:7a:6f:85:e9:10:26:0d:e4:c0:23:
         ee:ff:ff:80:99:29:f1:c0:c4:5e:1e:fa:d1:6f:91:ca:46:96:
         65:7a:16:71:c9:dc:6b:64:46:9c:f2:10:a3:8a:40:9a:1b:56:
         35:92:e9:0c:16:0d:19:ca:0f:cb:fc:f2:ee:53:e4:dc:cf:15:
         0f:24:77:9b:25:86:9f:1c:46:39:e2:ad:4f:d1:f6:91:d7:8a:
         7a:76:bc:3b:f7:30:13:fb:e0:8f:2b:aa:6a:d3:a8:16:30:2e:
         0b:d5:97:5d:4e:6d:a4:a3:18:4c:ba:70:77:2c:bf:4b:27:2b:
         89:38:d8:2f:b9:f4:c9:08:77:e5:b3:10:c6:cb:ec:6c:4f:b3:
         ce:70:15:67:76:fc:45:d2:60:e8:d8:91:ca:25:d9:6c:7b:96:
         51:f6:a5:33:1b:52:a6:41:0f:50:8d:6f:80:07:19:61:2b:fa:
         d1:50:77:a6:11:41:e5:ee:5e:ee:e5:98:74:8e:28:64:92:be:
         8d:68:68:2f:fc:93:2f:63:46:8b:25:cd:29:f6:a6:30:09:b7:
         d3:e9:98:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:18:56 2025 by rpki-client