Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/323830343a333539633a393030303a3a2f33382d3338203d3e20323636323936.roa
File:                     323830343a333539633a393030303a3a2f33382d3338203d3e20323636323936.roa (raw, json)
Hash identifier:          /IVojtt4Iqg2XwqyVavQxrgy4OFtWMDHoQ/D3MmMRig=
Subject key identifier:   62:7D:20:EC:70:C6:F1:D1:A4:B4:44:65:D8:E7:26:CF:7B:DD:53:8E
Certificate issuer:       /CN=578D34CF76BA5E5EEFCC4F2B657185989703AE74
Certificate serial:       5246FCE91AB8A905FCB09544EEA55575FBC9811E
Authority key identifier: 57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/323830343a333539633a393030303a3a2f33382d3338203d3e20323636323936.roa
Signing time:             Thu 12 Dec 2024 14:48:29 +0000
ROA not before:           Thu 12 Dec 2024 14:43:29 +0000
ROA not after:            Thu 11 Dec 2025 14:48:29 +0000
asID:                     266296
IP address blocks:        2804:359c:9000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.crl
                          rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 19:45:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:46:fc:e9:1a:b8:a9:05:fc:b0:95:44:ee:a5:55:75:fb:c9:81:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578D34CF76BA5E5EEFCC4F2B657185989703AE74
        Validity
            Not Before: Dec 12 14:43:29 2024 GMT
            Not After : Dec 11 14:48:29 2025 GMT
        Subject: CN=627D20EC70C6F1D1A4B44465D8E726CF7BDD538E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:f6:d8:5e:68:a3:63:07:21:4b:3e:e3:89:
                    1c:ea:ce:f4:b6:2a:85:02:2a:2c:bd:9e:5b:87:b5:
                    e9:39:8d:b6:b5:a0:46:2b:eb:60:7f:83:c4:9f:84:
                    e9:94:8a:38:db:ec:25:f1:63:54:fd:35:dd:12:5b:
                    00:b8:83:3c:27:2f:5f:bc:86:85:6c:b5:60:69:36:
                    10:61:dc:9d:95:0f:e6:df:c0:85:77:65:4a:bb:a7:
                    a5:d5:3d:e8:c5:f4:c0:53:9a:15:08:18:4c:e6:82:
                    58:bc:45:83:2f:ac:cf:ce:9a:3e:df:50:b4:cd:be:
                    c5:46:36:b0:62:f6:bf:53:6b:aa:fd:a9:01:ea:77:
                    81:de:32:bd:f8:88:f1:2a:83:69:d7:7b:47:09:86:
                    55:ec:94:9b:da:b6:39:86:11:f4:bf:2f:67:10:25:
                    b9:ae:52:f4:9b:7a:67:d4:ce:77:0c:94:5d:d0:35:
                    90:60:b8:54:dd:f9:5e:cb:8b:6d:db:c2:a4:97:b2:
                    b6:da:9a:4d:2d:d4:8d:73:0c:a4:9b:98:1f:72:ab:
                    de:59:bf:32:c9:74:5f:cc:b5:37:69:4f:06:72:97:
                    d2:3a:aa:5c:1e:15:be:31:3f:84:3b:53:ac:78:c8:
                    b4:f1:84:6c:77:4d:8c:70:b4:92:d1:99:21:0f:ba:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7D:20:EC:70:C6:F1:D1:A4:B4:44:65:D8:E7:26:CF:7B:DD:53:8E
            X509v3 Authority Key Identifier:
                keyid:57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/323830343a333539633a393030303a3a2f33382d3338203d3e20323636323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:359c:9000::/38

    Signature Algorithm: sha256WithRSAEncryption
         75:b9:52:45:74:02:c3:5e:3f:93:6b:fc:ed:72:73:71:27:24:
         7e:8e:50:d4:d4:ca:1d:04:24:b3:e6:eb:14:c1:7d:b1:79:f1:
         23:ec:d2:b8:61:3f:59:7e:7f:aa:15:30:da:bf:a2:71:fb:f3:
         72:3c:90:f2:d4:fc:7e:d4:2e:38:4c:e0:f4:ec:9b:30:0c:5d:
         43:b6:15:f4:c4:2f:ed:59:e4:87:04:09:c1:3a:3e:96:e9:e1:
         1a:aa:39:2a:3d:6e:a8:b2:c1:70:a5:b1:e3:e2:73:4f:d5:36:
         0e:e9:62:bb:c1:e5:39:5d:8f:6f:8e:bc:01:3b:f4:42:27:01:
         b1:21:d6:1d:6e:d6:12:19:c1:82:26:51:23:95:13:eb:be:50:
         0e:e3:92:db:8f:74:c8:72:34:32:ab:9e:f8:ba:8a:d3:c3:7b:
         d2:18:11:ba:1f:21:2c:f4:0e:a4:2b:63:fb:c2:37:5a:1e:d5:
         1f:71:9b:98:f3:77:0d:91:f6:e7:24:5d:3b:91:91:15:a1:42:
         87:73:74:67:3a:82:93:30:18:ce:26:b0:42:a2:7d:f6:2d:6d:
         fc:4e:56:91:af:52:5a:0a:4c:2a:6a:04:11:cd:32:d4:36:6d:
         0d:44:73:94:7d:81:5a:f8:c5:f2:50:65:03:51:c6:7a:cc:3a:
         30:de:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:49 2025 by rpki-client