Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a336330303a3a2f33382d3338203d3e203533313733.roa
File:                     323830343a6534633a336330303a3a2f33382d3338203d3e203533313733.roa (raw, json)
Hash identifier:          4dO4GZ7oZM88A9Buj3GLrOBOS4BdeT1wD5PXOl4a4+g=
Subject key identifier:   98:60:2E:22:D6:AB:E6:06:C1:45:EB:22:9C:7A:75:96:28:45:A8:B9
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       27D997E2E9BB19EFC7E032D1BA88138217598ABC
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a336330303a3a2f33382d3338203d3e203533313733.roa
Signing time:             Thu 06 Mar 2025 02:42:04 +0000
ROA not before:           Thu 06 Mar 2025 02:37:04 +0000
ROA not after:            Thu 05 Mar 2026 02:42:04 +0000
asID:                     53173
IP address blocks:        2804:e4c:3c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d9:97:e2:e9:bb:19:ef:c7:e0:32:d1:ba:88:13:82:17:59:8a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:37:04 2025 GMT
            Not After : Mar  5 02:42:04 2026 GMT
        Subject: CN=98602E22D6ABE606C145EB229C7A75962845A8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:6d:6f:dd:b3:96:51:df:cd:35:f8:df:96:
                    0c:5c:11:f7:69:3e:46:f1:18:45:03:e5:72:b1:57:
                    d8:f7:e6:64:dc:c9:f7:8c:49:2f:fb:7c:72:97:08:
                    7c:0f:09:61:a7:0f:8e:dd:d9:e3:42:34:1d:e4:c8:
                    24:a1:50:8e:60:cd:b7:fc:5a:83:12:1f:e4:2c:44:
                    fa:50:af:00:cc:33:65:22:15:be:9c:c2:dc:11:ab:
                    7b:50:c9:35:ee:52:9c:ca:99:67:1b:82:f0:da:95:
                    71:e8:bf:7b:f9:40:34:46:95:8f:83:0f:a7:73:d4:
                    d2:ba:e0:58:78:7d:30:2a:e9:e8:d8:8b:f1:d6:1c:
                    1a:4a:d4:ff:34:7b:c3:4b:3e:56:4a:c4:39:4e:ab:
                    1d:df:35:e7:f4:c2:41:a5:f5:f5:cc:4a:e2:9d:5c:
                    1e:ee:63:50:4e:8d:f1:38:5b:4c:13:3f:d5:de:d9:
                    c3:95:c8:8d:02:3c:2b:65:d4:93:ba:f0:8e:42:9d:
                    0c:e8:f9:e6:ff:74:a7:ae:2f:ea:15:26:15:89:8e:
                    5f:a1:e7:55:98:c1:f6:63:78:18:30:43:22:1b:44:
                    da:a5:5b:22:12:3b:1b:93:c0:b0:e1:e3:36:11:d4:
                    4c:42:c8:49:70:ed:81:cb:54:71:fd:46:ae:12:39:
                    5d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:60:2E:22:D6:AB:E6:06:C1:45:EB:22:9C:7A:75:96:28:45:A8:B9
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a336330303a3a2f33382d3338203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e4c:3c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         1e:36:9b:0c:5d:8d:31:63:4a:be:72:ac:8e:db:c3:42:11:5b:
         37:ef:81:ac:31:fa:c6:d6:73:1e:03:3d:f5:cc:92:e9:b5:b8:
         68:18:6e:32:e5:d3:83:6d:3f:86:9b:5a:e4:ed:5f:42:f4:dd:
         8c:b4:29:40:23:b1:24:0f:0b:53:90:f5:61:5a:4f:a3:41:90:
         b1:11:02:16:29:27:92:41:9a:a6:17:82:45:3a:2c:cc:b5:1a:
         82:d1:bf:0b:7d:55:8f:ae:d4:a7:f8:06:a1:cc:5a:1a:6e:04:
         00:94:fa:e0:5e:90:9d:ff:00:d3:2c:47:85:35:86:6f:32:31:
         69:e8:4f:65:93:65:b2:52:69:bb:10:68:b9:1e:bb:0e:e1:60:
         65:fb:25:91:d7:3d:d9:f8:e7:8b:ce:05:5c:4e:cd:86:75:43:
         06:91:d4:38:f4:5e:4f:49:c8:ed:be:a9:1c:55:89:b3:43:e9:
         d5:79:5c:43:3f:7e:ef:e5:3f:22:4e:a1:1a:e5:69:d6:4b:bb:
         23:3d:5e:0d:13:6f:77:6a:b8:d9:0d:ac:82:c5:ea:c9:7e:d1:
         4a:f9:4a:c0:3c:3d:20:5c:15:6d:79:3c:ed:f5:61:15:81:42:
         8c:ea:ba:7b:69:43:c8:90:9a:a3:0c:29:cd:3a:84:06:34:e9:
         3b:f4:07:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:54:28 2025 by rpki-client