Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/323830343a386230303a3a2f33322d3335203d3e20323733373036.roa
File:                     323830343a386230303a3a2f33322d3335203d3e20323733373036.roa (raw, json)
Hash identifier:          6TL5vKPSaKqQE4gIGwSgvsrJrF+N73V7cP4sGVuVr+A=
Subject key identifier:   73:24:71:DE:2E:3D:50:1E:5D:11:81:16:AB:B0:CE:00:97:38:8E:B9
Certificate issuer:       /CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
Certificate serial:       332B5EE498A812FECF703A766B7C597C35811ECF
Authority key identifier: DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/323830343a386230303a3a2f33322d3335203d3e20323733373036.roa
Signing time:             Fri 07 Mar 2025 00:13:52 +0000
ROA not before:           Fri 07 Mar 2025 00:08:52 +0000
ROA not after:            Fri 06 Mar 2026 00:13:52 +0000
asID:                     273706
IP address blocks:        2804:8b00::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl
                          rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:2b:5e:e4:98:a8:12:fe:cf:70:3a:76:6b:7c:59:7c:35:81:1e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD420BEEE86658C69BF7BF025ABDEB35F723B3D
        Validity
            Not Before: Mar  7 00:08:52 2025 GMT
            Not After : Mar  6 00:13:52 2026 GMT
        Subject: CN=732471DE2E3D501E5D118116ABB0CE0097388EB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:cf:b5:78:1a:04:a9:d3:fd:1d:8b:f5:5c:
                    dd:02:7e:70:41:eb:d9:6f:a4:83:e6:2d:5c:40:79:
                    b7:03:69:2a:45:f4:f4:15:44:58:90:dc:b5:06:7e:
                    bf:0e:03:7b:14:2b:7e:dc:4b:9d:42:e5:78:e4:48:
                    85:dc:3f:16:65:1a:1d:e8:11:66:7a:4c:53:89:14:
                    2f:ed:2c:1f:52:a7:38:41:df:16:0d:f3:b1:f2:1d:
                    b9:7d:98:f2:7d:1e:48:62:d5:15:9d:44:d3:03:9a:
                    1a:3f:6b:3a:c3:29:be:15:61:d5:da:9d:a6:06:1c:
                    ee:d8:7d:9b:85:34:b2:c9:d9:36:9e:d6:02:8d:e2:
                    c9:a2:94:cf:dd:ab:67:1c:f0:af:1c:de:ec:41:55:
                    8b:4d:07:e9:41:e5:52:82:d0:9a:1e:e7:14:6b:08:
                    3f:cd:2a:f5:47:4d:12:97:5c:15:c9:7a:94:74:82:
                    e7:fd:d2:66:01:2d:0e:d7:4a:d7:ed:75:77:5c:67:
                    86:bc:86:8a:0d:df:c0:25:3a:81:86:8f:64:1a:83:
                    d9:7f:ee:c6:bf:e9:f7:eb:5b:8b:4a:0b:8e:a9:39:
                    77:61:2b:a4:7f:04:f4:d1:47:d0:15:ee:79:1b:34:
                    a3:fe:c0:18:bb:5e:97:ec:fe:ed:eb:8b:81:22:8b:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:24:71:DE:2E:3D:50:1E:5D:11:81:16:AB:B0:CE:00:97:38:8E:B9
            X509v3 Authority Key Identifier:
                keyid:DF:D4:20:BE:EE:86:65:8C:69:BF:7B:F0:25:AB:DE:B3:5F:72:3B:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFD420BEEE86658C69BF7BF025ABDEB35F723B3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/1/323830343a386230303a3a2f33322d3335203d3e20323733373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:43:62:74:96:f4:08:5d:32:6b:9b:1f:49:99:dc:e6:a0:bd:
         66:af:8c:e1:cd:fe:a9:c1:85:a2:56:2c:97:25:51:a7:88:98:
         22:9b:a1:dd:60:41:c5:aa:70:be:03:a7:7a:0b:50:d4:d9:f6:
         34:d3:20:6e:9a:33:2c:42:db:39:58:85:d4:d2:4f:b8:fe:fd:
         4d:0f:ab:db:94:39:63:af:39:82:08:e8:d6:df:5c:5b:6a:ed:
         30:81:64:ac:a8:7a:01:a1:40:af:cb:c2:21:cd:7e:65:12:7f:
         72:64:00:52:67:1d:11:aa:26:50:77:2a:5a:f4:01:08:15:c0:
         f7:ec:f2:2a:50:9f:de:2b:7f:12:e4:ee:e5:59:f4:48:7f:18:
         98:53:ca:d4:60:87:96:d8:2d:0c:5a:13:79:e2:f3:55:49:5b:
         5c:81:af:bf:53:85:50:60:0c:c4:8c:6f:12:33:de:6b:40:05:
         32:0d:e9:7a:58:3a:c2:15:9a:05:f4:3e:78:b4:44:68:19:28:
         1d:64:7e:23:b6:54:e0:34:5d:ed:0b:17:4a:0b:fe:79:ce:5c:
         12:1e:a8:71:fb:2b:ae:ee:42:d5:68:d4:22:de:6e:c4:b1:57:
         e5:f5:76:24:3d:87:7b:cf:3c:a8:35:b8:1d:7f:13:ce:f7:63:
         15:02:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:46 2025 by rpki-client