Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3334203d3e20323633363234.roa
File:                     323830343a313033343a3a2f33322d3334203d3e20323633363234.roa (raw, json)
Hash identifier:          WEnoKN8Q2d5UmUIkM/SpEBblmOrv6HpXC417B/GS2hI=
Subject key identifier:   3E:87:03:ED:66:1F:FA:BC:D5:54:F1:17:ED:1B:18:78:CD:92:97:29
Certificate issuer:       /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial:       5ECBDCD7DFAFBC97FF0E706AD02E807332AB1EAB
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3334203d3e20323633363234.roa
Signing time:             Mon 06 Jan 2025 19:43:25 +0000
ROA not before:           Mon 06 Jan 2025 19:38:25 +0000
ROA not after:            Mon 05 Jan 2026 19:43:25 +0000
asID:                     263624
IP address blocks:        2804:1034::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
                          rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cb:dc:d7:df:af:bc:97:ff:0e:70:6a:d0:2e:80:73:32:ab:1e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
        Validity
            Not Before: Jan  6 19:38:25 2025 GMT
            Not After : Jan  5 19:43:25 2026 GMT
        Subject: CN=3E8703ED661FFABCD554F117ED1B1878CD929729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:97:ac:f6:2f:a7:a5:f7:be:16:fc:3c:eb:
                    6b:e4:04:59:9f:fa:58:73:21:86:da:17:ee:54:b1:
                    f6:95:16:ae:85:99:aa:9d:91:0f:75:ce:cf:50:b0:
                    f4:c9:7d:26:5f:26:33:de:09:df:80:72:9e:ec:9a:
                    96:e1:90:fa:f9:33:1f:10:23:da:dd:4f:a5:57:cf:
                    d6:a6:c5:2e:77:d2:f2:84:49:77:1e:96:92:72:c7:
                    91:50:5b:17:37:53:75:c4:21:d5:ce:7f:ca:94:a8:
                    43:3b:96:89:40:40:61:97:0b:35:b3:72:69:18:82:
                    5a:6c:8d:49:cb:ae:52:24:fd:0a:2d:0a:0f:da:2a:
                    99:52:0b:b4:98:b2:ba:ac:10:96:c0:f3:07:92:16:
                    67:d6:58:8e:56:e7:8f:ac:3e:53:0b:d1:90:96:ef:
                    3e:0d:a4:74:fc:cf:f7:b7:c2:d4:74:e3:62:c8:8c:
                    c3:74:3a:e8:58:50:be:48:23:29:76:f2:5d:f3:7d:
                    32:80:3a:54:15:f3:e5:0a:4c:9c:b9:61:fb:dd:e7:
                    db:76:41:9e:80:64:98:22:4c:b1:17:0b:28:ae:18:
                    5d:a9:36:55:d6:c1:79:0a:78:7f:f5:4a:7d:4f:ad:
                    e4:da:cb:e7:e2:43:25:d9:62:fa:03:57:3b:18:c9:
                    bd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:87:03:ED:66:1F:FA:BC:D5:54:F1:17:ED:1B:18:78:CD:92:97:29
            X509v3 Authority Key Identifier:
                keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3334203d3e20323633363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1034::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:5c:0d:8e:51:b8:54:1d:1c:d0:a2:ef:60:26:37:d5:f4:9f:
         f3:59:98:89:34:3b:08:c0:a5:6d:09:29:22:29:10:a7:f7:3b:
         57:d5:8c:5a:fd:7f:cb:8e:8f:55:e5:54:f1:cc:47:14:c2:a6:
         4a:19:ce:64:87:47:c1:e9:5a:cd:bb:05:cc:72:c3:ba:69:86:
         c9:d1:aa:87:37:d5:e0:79:09:fb:d6:48:4d:6d:c1:3e:7f:70:
         86:2c:be:67:23:2f:f4:13:5c:68:7a:3e:79:82:ef:26:9b:f1:
         5a:cf:fb:16:40:84:95:f4:4a:6c:62:ad:d2:af:ea:d6:b4:ad:
         84:34:5c:28:08:35:fa:bf:b1:fe:07:43:52:3b:bb:bf:e5:3f:
         40:06:a6:19:b4:27:ea:f2:f5:4c:45:80:f9:9e:6e:2f:fb:22:
         1d:01:e7:59:61:39:46:b5:2c:7f:b2:54:2d:46:59:62:ee:df:
         46:c4:a0:dc:80:54:d0:5e:d9:a0:a5:2c:87:74:d3:2a:d0:b8:
         88:8b:4e:be:0c:f1:6c:02:f3:a9:ea:01:08:8f:7a:04:58:a1:
         b3:3c:03:d1:1b:36:56:9c:df:c6:f9:d0:f5:d3:12:65:9f:ef:
         95:b7:0d:3e:b1:fa:49:7a:79:96:00:68:4f:db:3c:78:55:be:
         81:a7:64:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:27 2025 by rpki-client