Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/323830343a343434383a3a2f33322d3332203d3e20323637363232.roa
File:                     323830343a343434383a3a2f33322d3332203d3e20323637363232.roa (raw, json)
Hash identifier:          U7COzrwpbhDDHlSSDXBWonpUrXecAIZU3fklst4FCwU=
Subject key identifier:   01:0D:01:42:9B:3B:D3:7D:52:E1:E3:C4:C0:54:F4:64:6D:F0:4B:0B
Certificate issuer:       /CN=D05EC24593D2026D2D5B7D7EF76C0E52331234DF
Certificate serial:       0ADCBF43256DEB92E6B810F88A35BE8EE1AAD25D
Authority key identifier: D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/323830343a343434383a3a2f33322d3332203d3e20323637363232.roa
Signing time:             Mon 14 Apr 2025 21:16:55 +0000
ROA not before:           Mon 14 Apr 2025 21:11:55 +0000
ROA not after:            Mon 13 Apr 2026 21:16:55 +0000
asID:                     267622
IP address blocks:        2804:4448::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.crl
                          rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 20:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:dc:bf:43:25:6d:eb:92:e6:b8:10:f8:8a:35:be:8e:e1:aa:d2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D05EC24593D2026D2D5B7D7EF76C0E52331234DF
        Validity
            Not Before: Apr 14 21:11:55 2025 GMT
            Not After : Apr 13 21:16:55 2026 GMT
        Subject: CN=010D01429B3BD37D52E1E3C4C054F4646DF04B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:07:24:f0:e9:fe:05:ce:29:8f:ec:fb:f7:42:
                    38:43:34:25:b1:da:f6:de:71:81:34:6d:bb:e7:ac:
                    53:72:9e:30:95:02:12:d5:4e:8d:c4:2b:58:db:41:
                    26:d6:8e:8a:6b:c8:7b:2c:65:58:e4:0c:02:12:56:
                    4e:9a:a4:cb:af:b1:b0:da:dc:a6:b3:1a:e5:c5:65:
                    d3:b9:c9:57:ce:fd:a8:1f:b3:60:be:3d:70:cd:6d:
                    7c:fa:da:66:4f:3d:9f:a3:65:26:1f:18:4f:1f:9e:
                    83:13:e5:de:50:58:7a:f4:f0:00:dc:0e:86:18:67:
                    52:7a:f5:30:84:d4:c2:e7:46:43:16:85:2b:1f:43:
                    08:3b:07:53:ee:ea:51:fb:59:f0:35:21:45:ff:e3:
                    05:fa:55:8b:65:c0:df:dc:2d:c1:c8:7c:8e:df:f1:
                    f5:80:c5:5f:de:87:d4:b4:39:0b:c4:84:84:3d:54:
                    4e:bb:c7:36:a7:ba:58:78:fe:d7:9e:38:23:10:d5:
                    17:26:ef:cc:80:c6:8f:5b:84:3a:8f:5e:ec:0e:72:
                    de:d7:bd:07:89:e1:6c:10:2b:6a:85:bb:23:8c:33:
                    ef:47:bd:c1:1d:48:75:29:f9:99:d1:f0:a7:24:79:
                    d5:8a:5e:bf:cd:bf:97:f2:0c:28:5e:80:f1:79:b2:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0D:01:42:9B:3B:D3:7D:52:E1:E3:C4:C0:54:F4:64:6D:F0:4B:0B
            X509v3 Authority Key Identifier:
                keyid:D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/323830343a343434383a3a2f33322d3332203d3e20323637363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4448::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:47:fd:93:93:da:03:30:91:98:8d:9a:32:86:81:3e:b3:bb:
         e1:0f:8b:6a:fc:ea:c3:11:47:80:06:6b:f5:0f:b3:ae:fb:20:
         be:eb:b4:67:67:8c:c2:8c:8d:b8:94:76:dc:a3:35:af:3b:a4:
         4b:bb:94:7c:1a:dd:54:fd:2b:6c:2a:f2:7f:af:0d:24:5e:c4:
         c6:41:68:97:db:be:bd:50:11:c2:56:31:8c:13:ce:67:b3:bc:
         4b:04:90:c7:86:78:5f:cd:ba:d0:4a:6d:47:14:e9:d1:c6:70:
         9e:bd:0a:19:12:74:ea:b5:24:b0:07:65:e6:0e:32:9b:bf:9f:
         2f:30:0d:1c:a1:6e:e0:86:df:4a:bf:22:c3:93:fd:2e:7f:ba:
         2e:83:79:64:e4:9d:1c:8a:73:04:c4:64:10:57:1c:56:62:ed:
         d4:9d:e0:23:17:41:97:7e:56:86:61:74:72:ed:0b:41:3b:c3:
         7d:90:d0:a5:4d:88:a9:9d:51:76:7d:ad:20:0c:49:48:7c:c5:
         e4:a3:ff:48:46:cb:c0:6b:b1:93:31:e9:e6:28:64:8f:79:07:
         6e:28:ba:13:83:d2:67:0b:1a:cc:01:6c:a4:99:76:89:db:57:
         dd:22:33:71:19:e6:23:ac:29:e0:bc:55:48:19:5c:f4:43:90:
         8a:6c:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:40:51 2025 by rpki-client