Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/323830343a333865383a3a2f33322d3438203d3e20323636353039.roa
File:                     323830343a333865383a3a2f33322d3438203d3e20323636353039.roa (raw, json)
Hash identifier:          beiF6luILGxTO2vowmKrWzz0JOFe4M719DWK8flf55A=
Subject key identifier:   5D:30:A2:6C:93:DB:FA:F3:D5:4F:2D:00:FB:89:16:70:79:3C:46:E1
Certificate issuer:       /CN=0A231FBDB78730CFA863854B96AD42C4BFDBA45A
Certificate serial:       3382E440602B77BC312F3594597A95D91F9F9627
Authority key identifier: 0A:23:1F:BD:B7:87:30:CF:A8:63:85:4B:96:AD:42:C4:BF:DB:A4:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/323830343a333865383a3a2f33322d3438203d3e20323636353039.roa
Signing time:             Wed 05 Mar 2025 22:43:40 +0000
ROA not before:           Wed 05 Mar 2025 22:38:40 +0000
ROA not after:            Wed 04 Mar 2026 22:43:40 +0000
asID:                     266509
IP address blocks:        2804:38e8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.crl
                          rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:82:e4:40:60:2b:77:bc:31:2f:35:94:59:7a:95:d9:1f:9f:96:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A231FBDB78730CFA863854B96AD42C4BFDBA45A
        Validity
            Not Before: Mar  5 22:38:40 2025 GMT
            Not After : Mar  4 22:43:40 2026 GMT
        Subject: CN=5D30A26C93DBFAF3D54F2D00FB891670793C46E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:51:42:a0:8f:3c:2d:b9:9d:7c:02:9c:46:
                    7d:1e:1a:a9:b8:60:d0:61:cf:d3:ae:52:01:c6:cb:
                    b7:44:30:b6:71:20:7d:35:a7:ce:db:d4:03:eb:1c:
                    dd:8b:d5:dd:c4:c3:33:06:41:70:45:69:28:9a:75:
                    1b:18:0e:71:6a:4a:64:a2:3b:a7:f8:32:a2:a8:67:
                    44:9c:a5:3e:78:4f:db:dd:c3:da:1c:61:58:af:76:
                    21:3e:f8:d5:47:6f:c5:db:34:a0:b4:d4:e1:55:09:
                    08:f7:17:92:cd:78:0b:f8:99:e5:6b:b0:e4:0b:6f:
                    fd:4f:2b:74:7c:a4:75:17:0d:91:3a:f6:c9:cb:83:
                    ca:e6:1f:92:7f:57:0d:d5:e6:85:23:7d:fc:4d:64:
                    ba:4c:aa:87:95:85:0d:12:e0:6b:c0:0e:92:8e:9e:
                    76:85:ff:0a:af:72:14:48:ac:c8:a1:45:5a:5e:fd:
                    33:47:c3:cc:a6:71:b4:4f:0a:f4:4c:6f:d5:da:8f:
                    cb:f1:95:45:bd:ce:74:20:06:02:6b:3a:44:47:86:
                    b0:e2:c6:31:a8:82:8d:49:48:28:ec:36:7f:60:93:
                    d2:cd:8d:49:32:f7:0d:7d:ff:53:85:50:c5:6d:cd:
                    d7:61:92:4c:14:48:fb:58:e0:d2:b4:21:c5:e1:6f:
                    02:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:30:A2:6C:93:DB:FA:F3:D5:4F:2D:00:FB:89:16:70:79:3C:46:E1
            X509v3 Authority Key Identifier:
                keyid:0A:23:1F:BD:B7:87:30:CF:A8:63:85:4B:96:AD:42:C4:BF:DB:A4:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A231FBDB78730CFA863854B96AD42C4BFDBA45A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/1/323830343a333865383a3a2f33322d3438203d3e20323636353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:f0:3c:01:28:95:af:c8:21:f2:73:47:fc:c2:a6:ac:2c:01:
         16:41:b6:85:1e:c1:d0:88:1c:72:5e:62:2b:e3:93:1b:20:9c:
         c9:a4:fc:24:f1:c7:e4:57:89:24:3a:e1:ce:88:b5:e5:5a:37:
         51:78:73:2e:01:b0:cb:46:d0:b0:fc:6c:96:21:a6:94:68:cc:
         2c:81:bd:e5:74:47:a4:9c:d9:71:99:98:e9:2c:82:00:7e:ab:
         3e:81:fa:98:e7:30:bc:a2:b6:5f:f2:0c:f0:2e:cd:61:f1:d3:
         e3:90:33:af:80:a7:d7:cc:cb:b4:1e:04:fa:78:cd:8c:61:59:
         5c:f0:45:8e:05:a5:46:cb:28:f7:4f:bc:86:77:39:53:ab:d1:
         37:8d:6f:af:7d:95:e2:b4:b1:b8:f5:63:7f:af:b1:82:c3:a6:
         d0:8c:8f:e0:8d:03:c7:47:ce:3f:ab:f4:da:6d:83:fd:9f:ce:
         34:2b:d9:77:94:3f:78:ad:c2:dd:a2:a0:59:01:51:cc:ee:68:
         81:67:7c:db:96:9c:ed:4b:8e:8f:dd:8c:88:bb:e0:2c:0f:75:
         31:09:94:ea:0b:ca:97:75:f7:89:cc:51:0e:a9:e4:86:ed:0f:
         0a:44:f7:7f:86:37:1d:06:69:2e:91:3a:a2:81:d5:af:88:57:
         d1:09:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:58:00 2025 by rpki-client