Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/323830343a336162633a3a2f33322d3333203d3e20323636313036.roa
File:                     323830343a336162633a3a2f33322d3333203d3e20323636313036.roa (raw, json)
Hash identifier:          FkDWM8ekj2MFpQZk00KWqniHh8Esq0ZNl7n1b93nHyI=
Subject key identifier:   CF:A2:FF:35:63:2E:26:A2:32:E2:AE:C2:44:4F:72:C4:FC:D0:DE:BD
Certificate issuer:       /CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9
Certificate serial:       2B6B7EFF19C3026BDA09192312EEC45A8FC8A3B5
Authority key identifier: 2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/323830343a336162633a3a2f33322d3333203d3e20323636313036.roa
Signing time:             Wed 05 Feb 2025 01:24:53 +0000
ROA not before:           Wed 05 Feb 2025 01:19:53 +0000
ROA not after:            Wed 04 Feb 2026 01:24:53 +0000
asID:                     266106
IP address blocks:        2804:3abc::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.crl
                          rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 06:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6b:7e:ff:19:c3:02:6b:da:09:19:23:12:ee:c4:5a:8f:c8:a3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9
        Validity
            Not Before: Feb  5 01:19:53 2025 GMT
            Not After : Feb  4 01:24:53 2026 GMT
        Subject: CN=CFA2FF35632E26A232E2AEC2444F72C4FCD0DEBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b3:29:79:a3:ca:c6:3e:ae:93:e4:3c:fe:9d:
                    71:0e:98:ae:80:23:48:01:ed:a1:48:e0:07:94:e7:
                    6a:9c:8d:a0:70:16:3a:04:1c:e5:13:23:ed:d9:f0:
                    86:4f:5b:4a:3f:f9:7e:2d:11:6e:de:fd:e5:47:7c:
                    65:ea:46:72:97:ec:23:76:fb:08:16:80:d9:91:90:
                    b5:b8:0b:60:7e:f4:69:50:3a:a8:d5:51:da:de:4b:
                    79:db:7b:08:9c:3a:67:dc:e4:fb:1f:45:94:04:7e:
                    2e:dd:06:88:3f:b0:82:6f:70:60:39:ab:91:26:e0:
                    48:7b:be:cd:c9:08:64:b1:af:25:97:8b:d9:fd:16:
                    b2:97:73:eb:5b:47:21:9b:3a:63:b3:cb:4d:d2:40:
                    44:2c:98:65:77:29:2c:68:1d:3d:6a:0a:ef:5f:9f:
                    c2:0b:82:e9:9e:1f:32:78:c5:b1:8f:63:8d:7a:54:
                    1c:e2:b8:d4:4b:cc:d0:90:26:3a:f8:7d:52:55:a5:
                    5c:78:46:4b:0d:af:4e:ca:3d:ce:1c:7d:d4:a8:14:
                    16:4d:11:ac:0d:90:4a:2d:6b:bf:7e:69:15:7a:95:
                    86:6e:d4:13:e8:d5:9a:2a:3a:d1:24:4c:4e:cc:cb:
                    ef:a7:80:40:cb:1d:9a:35:88:b6:09:dd:17:20:c5:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A2:FF:35:63:2E:26:A2:32:E2:AE:C2:44:4F:72:C4:FC:D0:DE:BD
            X509v3 Authority Key Identifier:
                keyid:2A:FE:E5:7C:CE:63:B2:1A:54:9A:CB:85:F8:45:EE:E4:DF:F9:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AFEE57CCE63B21A549ACB85F845EEE4DFF9A1C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/323830343a336162633a3a2f33322d3333203d3e20323636313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3abc::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:fe:62:0a:76:2a:3b:a6:de:c0:6c:99:16:d4:fe:38:48:67:
         b0:5c:28:bc:8c:e6:e1:82:38:66:b7:e8:7f:a4:b4:f8:e3:ba:
         16:5e:e7:a6:c4:16:2d:0e:a4:53:3d:48:d8:90:da:8d:f7:1b:
         94:a4:ca:54:da:f4:a4:23:eb:ea:13:ac:6e:c9:8b:90:8c:01:
         00:dd:99:11:61:1b:ae:a3:84:2e:ed:6a:db:16:e1:dc:06:73:
         a4:a6:75:e3:d0:af:7f:e2:97:61:3a:41:0e:54:5f:16:cc:25:
         e2:2a:a1:91:d1:84:cc:2c:b4:09:a5:be:9a:2c:c5:05:b2:83:
         83:d2:3b:8b:79:0d:ea:e8:90:23:b7:3e:4c:f0:3e:4a:a4:9a:
         da:4e:c4:1c:55:3e:1f:94:ee:ff:73:1b:e5:9b:e0:f5:69:95:
         d7:90:f5:ad:6f:12:3d:84:78:3d:23:8d:5d:e0:35:df:67:53:
         86:d0:6e:e7:64:f1:d1:52:6b:1c:57:e5:4e:78:41:91:32:90:
         04:b0:3d:2c:65:1e:06:b4:a8:f2:cb:d0:84:ae:0c:e3:9d:5e:
         7a:d7:a4:8b:cc:a8:33:d8:89:d4:4a:2a:c9:8a:bb:22:76:c4:
         c0:d6:c5:34:db:b0:36:21:da:2d:a1:e0:0a:15:05:84:2c:d1:
         71:5b:d4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:04:37 2025 by rpki-client