Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a3a2f33342d3334203d3e20323635303238.roa
File:                     323830343a333161343a3a2f33342d3334203d3e20323635303238.roa (raw, json)
Hash identifier:          hcW/dbAJufNqgk2+TjtmhEsMPpAtZy0fwYVXASw4/iU=
Subject key identifier:   89:F0:0B:DE:64:17:9A:C2:00:CD:48:3A:48:D9:97:04:90:B5:FE:29
Certificate issuer:       /CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
Certificate serial:       48750D5B6961EBFB1E6E8ECFFA3660E3F315653D
Authority key identifier: D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a3a2f33342d3334203d3e20323635303238.roa
Signing time:             Wed 09 Apr 2025 13:41:06 +0000
ROA not before:           Wed 09 Apr 2025 13:36:06 +0000
ROA not after:            Wed 08 Apr 2026 13:41:06 +0000
asID:                     265028
IP address blocks:        2804:31a4::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl
                          rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 22:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:75:0d:5b:69:61:eb:fb:1e:6e:8e:cf:fa:36:60:e3:f3:15:65:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8
        Validity
            Not Before: Apr  9 13:36:06 2025 GMT
            Not After : Apr  8 13:41:06 2026 GMT
        Subject: CN=89F00BDE64179AC200CD483A48D9970490B5FE29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2d:a7:d9:54:b7:28:e2:6b:8d:94:4d:2b:26:
                    3f:98:1d:27:c1:05:fd:16:36:4a:bd:8d:a1:75:20:
                    48:5b:15:12:51:78:b3:60:4a:dd:b1:4f:dd:c2:e5:
                    4d:12:6d:5e:38:0e:f9:ed:39:f3:5a:b3:d0:26:d6:
                    16:17:9a:78:e2:62:4a:73:d6:23:76:5d:d7:6c:99:
                    76:2c:03:e9:d2:6a:6b:a5:03:b9:28:fb:d3:4a:3c:
                    8f:13:05:00:b2:4c:29:39:d8:8d:65:1a:c2:49:4a:
                    b2:41:5c:d9:46:f7:f3:31:29:65:ca:f3:6f:c4:7b:
                    e1:7a:3c:2d:33:26:40:a0:54:b4:b5:91:0e:9c:50:
                    e7:aa:92:73:21:4e:ce:48:12:e0:ae:a2:47:fb:6b:
                    01:32:8a:66:23:7f:13:11:31:60:d8:15:ec:53:2e:
                    ef:dd:3b:b3:9d:ed:b2:95:52:13:5c:5f:32:fd:df:
                    f0:aa:2b:45:a4:a7:32:12:6f:02:03:65:84:d2:8f:
                    e8:40:ba:5e:0c:0a:5a:e4:dd:8e:90:17:de:a7:3d:
                    66:36:c3:14:c3:c4:34:77:b7:b8:d1:f9:0d:36:5b:
                    cd:91:37:1f:0f:b8:c4:2b:e2:cc:71:6e:1d:29:43:
                    97:a8:f9:a9:af:17:2d:b9:e3:a1:ca:d1:5d:1c:65:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F0:0B:DE:64:17:9A:C2:00:CD:48:3A:48:D9:97:04:90:B5:FE:29
            X509v3 Authority Key Identifier:
                keyid:D6:BC:FE:43:F9:EB:D9:B9:EF:F3:81:5D:3B:56:D1:3D:82:6C:91:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6BCFE43F9EBD9B9EFF3815D3B56D13D826C91F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAuqnPYcuikzDsFJV1Sz6cJWfXnzCUgdx1dddf84YcqK/0/323830343a333161343a3a2f33342d3334203d3e20323635303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31a4::/34

    Signature Algorithm: sha256WithRSAEncryption
         52:66:fa:28:4b:05:49:f9:cb:14:83:6c:98:6f:a8:47:9a:78:
         91:f1:df:91:fb:0f:23:86:6d:0f:51:33:dc:a7:58:9e:11:81:
         cf:1d:57:83:c6:d2:a0:31:73:66:d8:d3:2e:f6:0c:f5:d1:4a:
         ca:dd:09:58:5c:cd:ba:93:bd:2c:ff:49:a8:4f:2d:fa:f5:4b:
         33:3b:b8:97:90:2e:45:66:0e:c1:91:f1:7a:cd:13:b9:78:ed:
         f5:bf:6b:93:30:f0:97:ab:51:f5:30:49:f4:99:ec:56:d1:82:
         b1:37:f2:85:78:d3:83:0d:cb:5f:1d:30:28:77:31:9a:9a:dd:
         33:38:5d:73:f1:df:0a:59:50:2f:00:28:28:df:12:79:5c:15:
         0d:96:12:4e:d3:72:86:40:5e:8d:fb:db:eb:72:b2:b5:bc:84:
         a0:ec:61:be:e9:26:56:02:83:7d:49:e5:5d:85:d6:19:10:90:
         ae:4b:23:48:a7:d3:c1:ee:18:31:01:e5:87:25:a5:cd:d2:90:
         9e:16:cf:33:91:7f:f3:b9:78:1c:c0:a3:cd:9b:91:95:15:68:
         3c:82:8c:af:f9:cb:b5:f6:3e:4f:7d:7d:aa:9d:88:16:a4:a2:
         25:f2:df:f6:01:73:9a:df:03:48:cb:4e:a8:a5:72:b5:9d:c7:
         3e:4f:44:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:04:36 2025 by rpki-client