Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa
File:                     323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa (raw, json)
Hash identifier:          p23xXCkMczYyDHKmnl5n9nRzgDTW8ZHFJQutmTzD8pE=
Subject key identifier:   DA:4B:03:A0:B2:5F:7C:83:C1:70:A6:0F:9E:50:00:2F:A9:20:2A:88
Certificate issuer:       /CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
Certificate serial:       04D40E86BF9010B145D269A24D787D029244E876
Authority key identifier: 55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     269195
IP address blocks:        2804:60d8:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl
                          rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d4:0e:86:bf:90:10:b1:45:d2:69:a2:4d:78:7d:02:92:44:e8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=DA4B03A0B25F7C83C170A60F9E50002FA9202A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:6d:bb:4a:d5:16:e3:00:c4:e1:5b:62:0d:
                    b9:8c:32:63:57:60:d4:99:7f:2a:5a:9c:67:60:d3:
                    14:c5:88:f8:fd:83:95:2e:e3:34:a7:76:a7:a3:64:
                    1a:01:76:c8:c9:3c:ce:61:d7:46:bb:75:1f:23:8a:
                    18:c3:12:e5:c8:13:9f:a1:51:9c:bd:19:ff:de:3b:
                    68:5f:7f:56:22:de:75:05:fa:49:6c:13:2c:13:d2:
                    41:df:72:69:c5:d8:ec:2e:fd:56:bd:1a:37:e2:cf:
                    46:60:a8:98:b2:26:25:d8:f4:fb:93:6d:88:a9:e8:
                    9a:cd:8e:4b:a4:34:65:3d:9a:3e:c0:e4:28:b3:37:
                    eb:19:59:e7:fb:f5:9a:14:e2:2d:00:d1:af:49:c1:
                    06:7c:2c:20:3b:08:2a:d5:53:fb:96:00:fb:be:06:
                    19:c7:ef:68:41:78:bd:43:11:86:38:1a:45:dc:76:
                    79:6e:49:65:8e:ee:e5:0f:ce:1d:67:6d:b3:40:d2:
                    50:8d:d3:14:41:52:50:00:59:1b:eb:dd:da:a2:0c:
                    f3:cc:14:3f:25:5f:46:5b:04:a8:2f:1d:6e:3b:3b:
                    39:cc:1f:5f:ef:5e:eb:9e:93:d3:38:86:f1:cd:ab:
                    35:cb:1b:66:25:b4:d5:81:ff:0d:d9:e0:30:f1:76:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4B:03:A0:B2:5F:7C:83:C1:70:A6:0F:9E:50:00:2F:A9:20:2A:88
            X509v3 Authority Key Identifier:
                keyid:55:82:42:E8:5C:6C:8D:5E:0E:16:FA:3F:9B:75:D7:7C:CF:44:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/558242E85C6C8D5E0E16FA3F9B75D77CCF448A9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9DAQd2y3Ggai8RJEsLftFtrUa9ZvGry39FMVYQPHknLn/1/323830343a363064383a383030303a3a2f33342d3334203d3e20323639313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60d8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:cf:45:2a:dd:f9:3a:12:b3:4a:a1:eb:64:7e:25:9b:e1:81:
         c5:15:41:dd:8c:63:85:41:e5:27:27:38:27:1b:42:1a:f7:a7:
         9e:42:3b:d9:f5:cd:83:0a:99:4a:b3:80:0b:2e:10:c3:a6:8e:
         6f:f4:f7:d6:2c:91:ba:bc:c9:24:83:02:10:b7:ad:3a:54:8e:
         72:fd:80:16:cc:09:d0:d8:50:82:ef:0e:2c:2e:f9:e6:1a:3e:
         97:1e:e5:66:e1:6c:4f:87:bf:f5:15:db:b1:a9:66:48:ea:be:
         c9:30:28:a7:14:a6:57:40:47:02:87:b0:e8:61:a9:b7:1f:32:
         93:5d:32:60:07:aa:72:cf:62:f3:ae:d6:97:93:01:97:be:1b:
         3d:f4:6d:07:2c:dd:f8:ee:68:cb:e3:6a:b9:e8:db:be:3f:49:
         53:59:db:84:e5:3d:b8:ba:54:9e:d8:d9:86:79:6b:7e:65:44:
         1a:c6:41:2a:98:c3:1e:85:10:6b:a4:cc:51:04:81:be:8e:ec:
         ab:3f:6a:70:1a:1d:54:8c:32:2a:83:6f:9a:e4:a5:5a:03:51:
         8f:12:85:7a:16:f3:7c:ec:74:00:0b:a6:a2:5d:f6:de:8f:a0:
         98:82:78:4a:d4:02:d7:eb:2a:df:07:a3:68:2a:3b:f1:99:d0:
         f3:f9:49:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:07:12 2025 by rpki-client