Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/323830343a333163383a3a2f33322d3334203d3e20323635303337.roa
File:                     323830343a333163383a3a2f33322d3334203d3e20323635303337.roa (raw, json)
Hash identifier:          lhANAHan8WKxkvbwa5NmVvgOc3r/YM3t80i+O9b8VVE=
Subject key identifier:   52:6D:8B:4D:D6:DF:57:15:5F:B6:8F:77:BB:C7:5A:9D:53:73:A9:BA
Certificate issuer:       /CN=ABE088E5E13DCF0FED5715CC44730ED6FD52199E
Certificate serial:       05AF2D9652B7DEBD663DA15E991B4E81A86A48CC
Authority key identifier: AB:E0:88:E5:E1:3D:CF:0F:ED:57:15:CC:44:73:0E:D6:FD:52:19:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/323830343a333163383a3a2f33322d3334203d3e20323635303337.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     265037
IP address blocks:        2804:31c8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.crl
                          rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:af:2d:96:52:b7:de:bd:66:3d:a1:5e:99:1b:4e:81:a8:6a:48:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABE088E5E13DCF0FED5715CC44730ED6FD52199E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100BD233E3BE3164BCBE933884312F2E8C84129DA8242EC5DAE0270B993F8BE25FAE397C65648A6EB0BD40CC05CEE1848A196C0C7552E20C2406B30F56BCBB04F65765B696B1C2D09C2EE9D6F6F3F93688594DFF371B2E54B8B1BAC33AB50EC3E207141B903088339C77C8FE7371A90418B35F591E7FAAC72DCE8328F7EE258C837BFBC8AA29CD16DA52510F532EF662BDAB60F583F3A9848B8BD2AB6AA3C36936DAC9D72E98C430A75022D7DB057998474FFA4358667727A1501481894C28A696662DC08F72A04D7F09F0C850A3D7E32E569420D07AA5305E64071F0B965F3BAA85E7CD4DF57EB5E849226616298EA9856FC6CE5DE4C3913997F141EC31ABBD2270203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:3e:3b:e3:16:4b:cb:e9:33:88:43:12:f2:
                    e8:c8:41:29:da:82:42:ec:5d:ae:02:70:b9:93:f8:
                    be:25:fa:e3:97:c6:56:48:a6:eb:0b:d4:0c:c0:5c:
                    ee:18:48:a1:96:c0:c7:55:2e:20:c2:40:6b:30:f5:
                    6b:cb:b0:4f:65:76:5b:69:6b:1c:2d:09:c2:ee:9d:
                    6f:6f:3f:93:68:85:94:df:f3:71:b2:e5:4b:8b:1b:
                    ac:33:ab:50:ec:3e:20:71:41:b9:03:08:83:39:c7:
                    7c:8f:e7:37:1a:90:41:8b:35:f5:91:e7:fa:ac:72:
                    dc:e8:32:8f:7e:e2:58:c8:37:bf:bc:8a:a2:9c:d1:
                    6d:a5:25:10:f5:32:ef:66:2b:da:b6:0f:58:3f:3a:
                    98:48:b8:bd:2a:b6:aa:3c:36:93:6d:ac:9d:72:e9:
                    8c:43:0a:75:02:2d:7d:b0:57:99:84:74:ff:a4:35:
                    86:67:72:7a:15:01:48:18:94:c2:8a:69:66:62:dc:
                    08:f7:2a:04:d7:f0:9f:0c:85:0a:3d:7e:32:e5:69:
                    42:0d:07:aa:53:05:e6:40:71:f0:b9:65:f3:ba:a8:
                    5e:7c:d4:df:57:eb:5e:84:92:26:61:62:98:ea:98:
                    56:fc:6c:e5:de:4c:39:13:99:7f:14:1e:c3:1a:bb:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6D:8B:4D:D6:DF:57:15:5F:B6:8F:77:BB:C7:5A:9D:53:73:A9:BA
            X509v3 Authority Key Identifier:
                keyid:AB:E0:88:E5:E1:3D:CF:0F:ED:57:15:CC:44:73:0E:D6:FD:52:19:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABE088E5E13DCF0FED5715CC44730ED6FD52199E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AT3ZXcRvgWYrxsQgvJNExBdUjmuJDENdh4Xo5XJs6SFy/1/323830343a333163383a3a2f33322d3334203d3e20323635303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:9e:1d:b2:01:0a:29:10:d7:57:9a:a1:1e:44:9f:26:69:9f:
         02:98:60:e9:64:95:e5:51:4c:82:41:60:a8:7b:08:06:ba:10:
         56:26:75:bd:96:92:b8:7c:72:17:70:97:28:9d:aa:ae:cc:06:
         9a:bd:81:aa:c0:95:11:e4:54:9f:9f:88:85:22:73:b6:34:f8:
         de:ee:5b:93:7e:0b:dd:2a:61:8d:e5:8a:09:90:e8:66:9f:0d:
         6a:db:a9:2b:69:fa:15:08:8f:16:f8:5f:7c:11:9c:37:e9:d8:
         72:54:ae:9b:33:7e:f0:32:ef:20:c1:c3:b5:ef:bd:35:88:ec:
         34:1e:5f:9a:ea:0b:50:fa:4e:f6:f8:20:3e:22:fd:f8:39:4e:
         55:a7:0a:6d:8b:80:0a:5a:02:01:07:60:ed:e3:84:d8:e7:9a:
         9d:bd:34:fd:6b:72:e7:01:c3:a2:20:ea:74:ab:5b:4f:9a:6e:
         c0:08:20:f7:09:84:16:17:55:a7:54:1d:0f:f5:f9:7e:8d:70:
         b4:fb:ce:5a:90:fa:2a:a1:9b:fa:77:0d:71:1d:a6:28:f9:79:
         b1:e0:d2:fc:d7:d2:99:ac:04:b2:d9:32:3c:db:e2:2d:bc:d8:
         30:73:3d:dc:96:2c:03:b3:ac:37:e2:74:81:36:07:38:d1:72:
         40:16:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:05:53 2025 by rpki-client