Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33332d3333203d3e20323730323735.roa
File:                     323830343a363938343a3a2f33332d3333203d3e20323730323735.roa (raw, json)
Hash identifier:          YW/AWsE801qUjxEfCSUXZFdI9M7URHtU4BDuy2dpNo8=
Subject key identifier:   B1:9A:7D:B6:F5:B5:A6:77:0C:95:BF:F4:CE:00:89:63:D9:E9:49:51
Certificate issuer:       /CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
Certificate serial:       5B7AC62421BCC2AADD8F8EAF31777D243A9300B9
Authority key identifier: 1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33332d3333203d3e20323730323735.roa
Signing time:             Thu 06 Mar 2025 06:25:50 +0000
ROA not before:           Thu 06 Mar 2025 06:20:50 +0000
ROA not after:            Thu 05 Mar 2026 06:25:50 +0000
asID:                     270275
IP address blocks:        2804:6984::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl
                          rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 14:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7a:c6:24:21:bc:c2:aa:dd:8f:8e:af:31:77:7d:24:3a:93:00:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6
        Validity
            Not Before: Mar  6 06:20:50 2025 GMT
            Not After : Mar  5 06:25:50 2026 GMT
        Subject: CN=B19A7DB6F5B5A6770C95BFF4CE008963D9E94951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:b5:7f:41:2d:ac:d5:28:44:73:b4:eb:c3:
                    a3:8b:72:36:cf:f2:a0:16:fb:f8:a5:14:f9:98:df:
                    6a:78:d2:7f:50:7c:1f:dc:44:1a:82:ab:dd:62:6b:
                    61:03:f7:6a:77:d7:1c:e7:05:aa:0e:ce:2d:db:7a:
                    cc:4f:29:c5:b4:6a:6e:e5:28:5b:ba:fc:2a:bd:d6:
                    21:31:35:02:3f:b8:ba:e6:18:f0:4f:63:5a:d9:cc:
                    58:fb:cd:a6:e2:b8:d8:6e:96:b5:bf:fa:9c:0c:b1:
                    49:ef:44:fd:8d:ab:a5:1f:5b:dd:7f:c9:04:03:54:
                    b3:03:42:4b:79:48:ec:33:c5:00:6c:b6:c9:b6:0f:
                    22:ed:10:f5:50:01:53:2b:02:63:2f:e6:70:d1:87:
                    07:f5:45:67:6b:f2:44:df:f2:70:33:e3:a1:f8:a7:
                    ff:b7:31:23:f9:13:ce:bf:80:88:c8:01:d3:be:02:
                    3e:8d:9b:e8:92:6a:0c:ea:41:71:51:a6:dc:81:ec:
                    4d:c6:f5:2f:a3:d5:4d:4c:2c:85:1d:ff:08:e5:5b:
                    24:9d:e1:11:74:87:6c:bf:7f:c0:3e:ca:ef:30:48:
                    e8:91:7b:33:16:11:32:c9:1a:24:0d:0b:8f:e4:c5:
                    de:f0:35:f1:03:00:72:3d:1d:db:cc:09:c6:f1:75:
                    09:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9A:7D:B6:F5:B5:A6:77:0C:95:BF:F4:CE:00:89:63:D9:E9:49:51
            X509v3 Authority Key Identifier:
                keyid:1A:50:5F:A7:6D:FA:4D:23:0C:9E:04:A9:1C:C5:9D:7C:F8:1D:72:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A505FA76DFA4D230C9E04A91CC59D7CF81D72B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Av2TpwcqjuuwAN6XX2V8dbLWQDvq8GQC2KUrLfPbLkrp/1/323830343a363938343a3a2f33332d3333203d3e20323730323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6984::/33

    Signature Algorithm: sha256WithRSAEncryption
         20:37:01:47:1b:4f:28:11:f9:00:34:f6:05:94:86:2a:2c:a1:
         4d:38:e7:92:b6:d5:9f:8f:f8:af:68:6c:2a:d9:7c:41:7a:f2:
         78:58:e8:90:49:9e:ee:7d:f6:0f:87:f4:2a:c6:33:69:bc:19:
         e6:ae:41:80:2b:e8:85:7b:91:c7:81:a3:f1:ab:2b:03:04:8c:
         ef:fd:17:04:2a:3c:ad:73:b7:62:45:a0:4f:a3:ef:3f:63:d7:
         27:29:8c:88:ff:b9:2a:a9:a0:5c:78:5e:cc:53:9f:ba:fd:e1:
         d7:4f:2c:d0:8f:b4:f2:0d:26:c2:f4:92:21:37:cf:de:9e:7c:
         94:95:58:02:c8:41:ad:d9:52:9f:6b:31:47:d2:c7:51:a3:05:
         c2:fa:9b:97:cf:43:f4:6f:65:89:04:4e:b7:76:c4:04:b3:fe:
         59:31:85:22:0d:64:7c:a1:50:69:6f:ea:a0:1e:f2:55:26:69:
         71:72:1b:e9:70:31:eb:59:81:69:de:f3:e0:c8:37:b0:4f:14:
         45:dc:6b:1e:9d:5e:ab:3c:7a:11:11:c6:73:41:8c:5f:94:d4:
         34:71:f1:63:b8:3a:0e:6b:bc:c7:5c:39:ee:aa:37:39:dc:8d:
         0d:53:e1:e8:b8:17:12:61:a0:2c:83:8e:52:85:de:22:6e:d0:
         ac:dd:98:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:45:33 2025 by rpki-client