Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/323830343a383532303a3a2f33322d3438203d3e20323732353539.roa
File:                     323830343a383532303a3a2f33322d3438203d3e20323732353539.roa (raw, json)
Hash identifier:          jF/zwaq85TE1d+oF45MZQQgqCMrHmW1/059Xhy3WSKE=
Subject key identifier:   C0:09:90:37:B7:35:B7:90:8E:BE:22:26:F5:0D:41:75:F2:D4:36:BF
Certificate issuer:       /CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
Certificate serial:       38FD48FAED2E883F92C7BD9AE0D4E963BDAE6402
Authority key identifier: 85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/323830343a383532303a3a2f33322d3438203d3e20323732353539.roa
Signing time:             Thu 06 Mar 2025 04:01:04 +0000
ROA not before:           Thu 06 Mar 2025 03:56:04 +0000
ROA not after:            Thu 05 Mar 2026 04:01:04 +0000
asID:                     272559
IP address blocks:        2804:8520::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl
                          rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 05:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fd:48:fa:ed:2e:88:3f:92:c7:bd:9a:e0:d4:e9:63:bd:ae:64:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Validity
            Not Before: Mar  6 03:56:04 2025 GMT
            Not After : Mar  5 04:01:04 2026 GMT
        Subject: CN=C0099037B735B7908EBE2226F50D4175F2D436BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:c8:d4:3a:26:e2:5d:fd:13:75:80:65:dc:
                    21:ad:78:97:3d:3e:ab:c0:d6:38:b7:c6:26:27:bd:
                    94:f4:15:3a:ae:da:4b:f3:68:a1:aa:d2:2c:92:c1:
                    da:65:22:1f:31:48:9d:1b:75:05:f6:00:25:0a:32:
                    20:6f:c0:37:6c:e0:42:de:fc:85:dc:ce:2e:57:e2:
                    c7:9d:39:8a:69:46:c8:07:40:da:0e:9f:96:17:0e:
                    4a:06:3e:a1:59:d8:bc:dd:10:83:24:46:fd:23:75:
                    26:3d:96:2c:31:1c:30:da:bd:67:f7:70:1c:7a:96:
                    cd:8b:5d:9c:0b:7f:69:87:8c:3f:0c:31:57:95:0e:
                    3a:66:63:24:14:ed:e3:de:94:d3:69:37:1e:7a:90:
                    f7:2e:c1:1b:10:86:bc:a0:0a:9e:06:6a:7b:94:27:
                    0e:9d:29:7d:c4:11:f7:7c:05:ce:e2:50:31:48:81:
                    d5:6f:c4:56:c9:06:22:71:06:47:8b:ec:e4:0e:e3:
                    7e:6c:3a:5c:20:a9:3a:a7:cd:cf:38:14:52:28:93:
                    71:ad:2b:2a:4a:9b:db:a4:f7:3e:36:9e:3a:5d:8d:
                    d4:88:ab:5c:64:5f:ff:e1:fd:76:d9:60:18:54:05:
                    f0:68:6a:92:f3:80:01:68:39:67:5c:45:37:66:35:
                    d1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:09:90:37:B7:35:B7:90:8E:BE:22:26:F5:0D:41:75:F2:D4:36:BF
            X509v3 Authority Key Identifier:
                keyid:85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/323830343a383532303a3a2f33322d3438203d3e20323732353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8520::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:73:e4:20:b0:5d:47:43:44:71:1e:c9:9d:c9:35:2b:e3:8f:
         d2:fb:87:86:b5:fb:31:cd:27:ae:a7:7e:47:02:06:7e:3e:21:
         19:84:6f:df:15:99:d3:11:5c:ce:18:70:d1:ff:80:de:d0:25:
         32:59:22:23:20:c6:8c:2d:2e:4e:4e:56:d5:57:5a:aa:fa:f0:
         25:64:f1:a4:ff:ab:35:a5:3e:2b:6c:19:41:46:54:d1:1b:3b:
         58:49:92:46:5d:63:6b:9e:52:04:ed:83:72:3d:a0:39:ff:13:
         61:aa:3e:9f:57:42:61:f5:ac:61:78:77:3f:58:c8:05:b6:42:
         f7:8f:4e:3f:fe:a3:9e:1c:b1:e7:06:e7:1d:3e:93:45:ea:0f:
         19:f0:0c:c3:10:c2:cc:7d:f3:da:53:1b:69:0c:01:04:89:42:
         fc:2e:22:b4:e0:fe:da:f1:2f:f2:9b:17:19:76:24:13:65:e0:
         88:55:ed:0b:20:d6:c5:12:10:2a:4a:dc:35:19:cb:7c:fb:1d:
         30:fb:d3:08:fd:1d:3c:b4:fa:2b:48:23:8b:ad:49:09:5a:39:
         86:05:47:47:aa:66:6b:8e:99:1c:95:57:0a:81:c6:a8:55:59:
         f6:57:6e:df:8e:0e:45:1c:1b:0d:1e:54:35:a5:44:7a:02:93:
         0f:ee:4b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:06:44 2025 by rpki-client