Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/323830343a373161633a3a2f33322d3334203d3e20323730383034.roa
File:                     323830343a373161633a3a2f33322d3334203d3e20323730383034.roa (raw, json)
Hash identifier:          kWizhYXctWqFAzO8qbRxcj9EfIIFpy8OQc4fAFfox+4=
Subject key identifier:   58:39:BD:FA:F8:67:AC:6C:18:0E:F5:B5:D3:A1:DE:63:E0:4A:36:4F
Certificate issuer:       /CN=2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060
Certificate serial:       3B6BBFB72E97F03C9B675EA20335A94AF41DE268
Authority key identifier: 2E:2E:DC:BC:8E:8A:B4:AB:73:02:5D:D0:0A:EC:CD:06:42:B9:00:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/323830343a373161633a3a2f33322d3334203d3e20323730383034.roa
Signing time:             Tue 25 Mar 2025 14:34:22 +0000
ROA not before:           Tue 25 Mar 2025 14:29:22 +0000
ROA not after:            Tue 24 Mar 2026 14:34:22 +0000
asID:                     270804
IP address blocks:        2804:71ac::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.crl
                          rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:41:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6b:bf:b7:2e:97:f0:3c:9b:67:5e:a2:03:35:a9:4a:f4:1d:e2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060
        Validity
            Not Before: Mar 25 14:29:22 2025 GMT
            Not After : Mar 24 14:34:22 2026 GMT
        Subject: CN=5839BDFAF867AC6C180EF5B5D3A1DE63E04A364F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:55:66:b6:c1:8d:1c:fa:b5:f6:e9:d1:47:
                    24:d2:ec:13:c3:22:87:13:fe:10:3d:f1:1a:e4:03:
                    98:16:9e:86:5c:d3:fb:3e:e7:fa:12:67:9e:f1:0d:
                    c2:19:0b:9a:3e:1b:d1:7a:fb:93:1d:37:3d:a1:27:
                    9b:e6:4a:b1:6a:48:a2:ba:6b:12:62:e3:ba:2b:29:
                    dd:21:6c:83:ee:aa:b7:bb:f4:ce:74:15:ce:78:69:
                    89:95:14:c1:a8:5a:e6:97:6d:16:c1:4f:14:b4:e0:
                    ee:ee:38:2d:2b:be:9a:9b:4e:09:26:b7:29:69:da:
                    b6:3b:12:4b:5e:ce:5b:3d:e8:5d:b3:35:d0:6e:02:
                    bf:05:ef:44:8d:a0:09:c9:22:ca:ba:12:03:cf:c1:
                    67:49:e6:a7:8c:3c:77:0a:19:66:0a:c6:64:2d:af:
                    6d:ba:ee:d5:94:26:41:17:fe:a4:a3:17:d9:38:45:
                    4c:ca:ae:e1:c5:9c:82:de:fe:26:7c:1c:55:9b:7d:
                    7f:42:7f:6e:79:9c:34:a3:27:10:7b:08:7d:83:c8:
                    83:dc:cd:ad:40:77:6a:d2:e5:d4:56:73:53:07:1b:
                    13:1d:59:fd:56:0b:9b:b2:0d:be:61:9c:87:23:60:
                    85:af:f6:d0:2f:68:37:44:3c:5d:10:00:18:60:5e:
                    5e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:39:BD:FA:F8:67:AC:6C:18:0E:F5:B5:D3:A1:DE:63:E0:4A:36:4F
            X509v3 Authority Key Identifier:
                keyid:2E:2E:DC:BC:8E:8A:B4:AB:73:02:5D:D0:0A:EC:CD:06:42:B9:00:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E2EDCBC8E8AB4AB73025DD00AECCD0642B90060.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/323830343a373161633a3a2f33322d3334203d3e20323730383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:42:3f:77:f9:bb:00:28:63:c1:af:b2:f1:e8:55:b8:58:1b:
         f3:d0:51:83:40:01:fd:30:3f:1f:a4:30:79:14:fc:c9:e7:9c:
         f9:72:2a:e8:3f:cf:62:fc:05:c5:88:49:c8:7e:e9:99:63:c5:
         78:c2:7f:7b:23:af:5e:9c:3e:53:a9:f6:32:a5:11:f0:8f:7c:
         5a:2d:f6:04:73:fd:b0:c4:fd:49:0b:64:d0:48:e3:5d:0c:3c:
         41:02:4a:6c:2e:11:b9:9d:ed:35:62:24:0a:2d:4b:54:12:c4:
         1a:b4:24:1a:a1:7a:e7:4d:ca:d9:d7:58:db:35:09:ea:e3:09:
         e0:f0:b0:58:0a:0d:ae:9a:93:27:8e:65:8e:e9:e6:21:8a:8c:
         22:a1:e1:8c:ef:58:7e:3d:31:bb:17:a6:b5:5f:37:2e:e7:10:
         a0:ec:e0:3b:ff:4c:ee:e5:7b:15:a4:2e:19:72:c7:c7:ac:6d:
         bc:42:01:de:e8:98:69:1a:8b:8f:2d:1e:84:0c:84:6f:06:b1:
         64:05:31:09:0a:1f:36:8a:3e:88:c4:ef:c9:c3:92:ea:4b:1d:
         c1:12:77:66:7a:61:d9:76:0b:e6:86:32:53:e3:c2:9a:92:d4:
         69:55:b0:72:a1:34:77:f6:55:3c:d1:6a:4b:1b:d4:6e:72:a4:
         b6:1c:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:41:11 2025 by rpki-client