Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/323830343a333131383a3a2f33322d3438203d3e20323634393932.roa
File:                     323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (raw, json)
Hash identifier:          DzRsY8gKF0BWS3fC42Y03Map2xKST/W63/0XfL2297o=
Subject key identifier:   07:3A:DD:0E:EE:AF:98:60:05:C4:99:4C:64:AF:25:B9:DE:7B:7B:EE
Certificate issuer:       /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Certificate serial:       5CD8CF3BC96E295C5BEB856F0465E1B383ED189C
Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/323830343a333131383a3a2f33322d3438203d3e20323634393932.roa
Signing time:             Thu 06 Mar 2025 04:01:05 +0000
ROA not before:           Thu 06 Mar 2025 03:56:05 +0000
ROA not after:            Thu 05 Mar 2026 04:01:05 +0000
asID:                     264992
IP address blocks:        2804:3118::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl
                          rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 17:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d8:cf:3b:c9:6e:29:5c:5b:eb:85:6f:04:65:e1:b3:83:ed:18:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
        Validity
            Not Before: Mar  6 03:56:05 2025 GMT
            Not After : Mar  5 04:01:05 2026 GMT
        Subject: CN=073ADD0EEEAF986005C4994C64AF25B9DE7B7BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:a7:ec:74:a0:29:96:e0:44:75:7c:cd:d4:
                    f3:6c:69:cf:e3:18:3b:7d:c5:f5:70:a1:75:6c:b2:
                    8d:bf:03:5d:1f:bb:01:f8:40:2a:d6:a3:ab:aa:dc:
                    2f:a2:43:fc:03:c6:30:dc:3b:9e:65:7e:05:18:aa:
                    6f:f2:6f:2a:14:40:23:1a:53:db:64:49:ab:d5:56:
                    57:b9:9f:f6:29:28:93:b0:26:02:11:f7:76:40:57:
                    f9:1b:bd:61:62:cf:38:6a:05:02:47:4f:66:59:aa:
                    8b:6f:03:03:57:45:54:5e:62:79:f0:0f:f5:92:6c:
                    c5:0e:55:72:44:d8:ca:c2:18:f7:59:60:29:42:91:
                    17:96:03:01:d2:5e:d6:c1:74:00:19:1e:3f:40:28:
                    ee:fe:b2:87:96:85:dd:09:06:7c:80:a2:9b:3a:b1:
                    8b:88:dc:23:ae:b4:43:9e:5b:7e:af:38:29:ae:19:
                    b9:82:06:49:7c:16:17:7a:e0:9a:81:6a:12:e9:c6:
                    c9:19:ff:f3:cd:61:a4:b9:7f:54:19:6f:59:65:d8:
                    b6:82:93:ed:a9:f8:d5:5f:ea:5d:3d:f8:3f:27:2f:
                    f9:82:92:ae:11:df:9f:9e:66:ef:d3:9e:93:22:92:
                    ad:18:6d:b0:a9:4e:bc:cf:54:e9:ce:63:e9:e6:df:
                    f5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3A:DD:0E:EE:AF:98:60:05:C4:99:4C:64:AF:25:B9:DE:7B:7B:EE
            X509v3 Authority Key Identifier:
                keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/323830343a333131383a3a2f33322d3438203d3e20323634393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3118::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:a2:03:bd:e9:9e:d2:40:5f:b9:76:a7:d2:34:32:44:cb:5d:
         4c:09:e4:fb:01:74:86:46:69:de:30:8a:8f:5a:39:13:ab:97:
         0f:a1:71:b3:c4:8d:bf:55:eb:47:3e:39:22:fe:69:d9:bd:ed:
         da:6a:ca:d9:0e:41:8b:d7:77:d4:b4:78:14:ae:61:2c:93:a9:
         14:cb:37:5d:bc:a6:55:b7:f9:2a:61:71:e1:e8:fd:e2:86:df:
         3e:9f:e9:02:70:7b:f3:60:7c:2c:00:2a:dc:22:44:ee:84:e5:
         54:66:06:59:a3:65:a9:1c:e2:3b:48:1e:4b:fc:ad:db:f6:ce:
         25:5f:d3:89:79:ec:7a:59:e6:84:f1:c4:58:45:fd:23:20:48:
         73:68:a1:ef:06:91:8e:48:31:7b:e6:15:c7:b8:19:1f:32:08:
         fa:f7:ee:09:29:4a:72:49:a8:ef:a9:8d:00:b3:cc:36:a3:90:
         9b:1f:38:3e:09:bf:bc:c3:6b:24:7a:3f:84:e7:66:1a:98:77:
         97:86:1e:29:07:fa:c1:5e:56:84:09:84:58:65:1b:20:0e:47:
         c6:f3:d0:a4:c2:49:e8:1a:24:9f:44:13:e5:70:d0:48:59:2c:
         13:72:a4:08:2e:32:74:d2:8d:79:28:d4:b3:12:d2:77:48:66:
         a1:42:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:42:50 2025 by rpki-client