Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a3a2f33322d313238203d3e203232313737.roa
File:                     323830343a3533343a3a2f33322d313238203d3e203232313737.roa (raw, json)
Hash identifier:          VbvlE4+HaODpR8w8KgTU/2BnJSCK974eYd4rLx8HoAQ=
Subject key identifier:   DF:BA:D6:B1:80:00:83:92:F5:48:0E:FC:28:A2:38:30:25:7D:E4:C0
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       31DE4BE68109560B4E2FA6F36F5B1437427B7A4D
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a3a2f33322d313238203d3e203232313737.roa
Signing time:             Thu 06 Mar 2025 04:30:09 +0000
ROA not before:           Thu 06 Mar 2025 04:25:09 +0000
ROA not after:            Thu 05 Mar 2026 04:30:09 +0000
asID:                     22177
IP address blocks:        2804:534::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 08:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:de:4b:e6:81:09:56:0b:4e:2f:a6:f3:6f:5b:14:37:42:7b:7a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Mar  6 04:25:09 2025 GMT
            Not After : Mar  5 04:30:09 2026 GMT
        Subject: CN=DFBAD6B180008392F5480EFC28A23830257DE4C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:8a:6f:57:be:49:f9:7f:0c:13:db:e2:8b:
                    68:3b:e6:64:f8:6b:57:4c:3a:64:9a:8a:b1:6e:cc:
                    1a:78:05:02:34:2b:c3:b1:79:5b:d9:0a:8c:41:1d:
                    08:8b:48:46:75:c2:d8:ba:d2:cd:0c:d7:9e:af:11:
                    08:79:8c:0c:57:7d:d2:3c:b1:c2:7f:de:2a:b5:56:
                    cb:66:46:ea:93:93:78:51:6e:06:21:2d:5b:17:36:
                    56:1c:27:f4:1a:c9:0e:3e:bf:42:98:d9:c5:4b:75:
                    5b:37:92:8a:68:11:64:a5:1e:94:68:48:17:86:33:
                    3c:d8:c3:37:71:97:b5:96:9c:69:57:aa:49:56:c3:
                    07:df:66:9a:81:22:dc:19:3c:fc:83:92:64:03:ae:
                    5d:16:73:30:c3:e8:f1:99:c1:29:30:86:27:6b:62:
                    63:2b:99:09:9d:ed:dc:4b:fd:89:71:af:c0:89:c9:
                    b5:b1:fc:db:8e:c5:34:18:ef:0a:26:55:ca:21:f7:
                    81:36:f7:93:83:28:af:01:c7:db:2d:2a:6d:57:50:
                    66:f9:33:8a:99:73:de:0d:7b:71:c9:42:43:eb:bb:
                    ab:69:68:52:0c:95:b4:2d:8d:95:8b:2a:e9:5c:90:
                    65:58:21:49:53:bb:46:a8:06:9d:46:e0:2a:f0:d5:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BA:D6:B1:80:00:83:92:F5:48:0E:FC:28:A2:38:30:25:7D:E4:C0
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/323830343a3533343a3a2f33322d313238203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:534::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:91:dd:6c:98:3e:47:56:58:0e:33:d2:88:ff:af:ca:2a:5a:
         7a:ab:79:e1:a2:95:b7:73:78:2f:28:ac:45:b4:6a:0e:b6:f2:
         36:5a:82:08:80:fd:96:51:74:92:74:2c:2a:b7:1b:e7:dc:59:
         9d:19:21:25:37:cf:5c:2c:90:ac:38:4f:97:fb:27:80:93:d5:
         c2:c9:bb:80:8c:02:a3:a9:a5:9b:86:75:24:f6:00:33:7d:09:
         80:27:13:34:08:b5:96:42:c3:2f:48:b9:dd:cc:61:36:e4:66:
         fc:ff:f0:71:40:a2:30:32:e6:59:ea:17:df:cb:97:ae:dd:b2:
         b5:db:e0:82:8c:33:3b:49:69:90:f0:48:6d:91:10:48:19:74:
         3a:a4:52:07:14:30:41:0c:03:6e:ab:0e:e4:5c:4e:73:12:0a:
         b1:fa:3f:1d:ea:12:6b:4e:78:bc:91:3d:58:fc:c1:5a:59:5b:
         07:60:79:da:e3:91:28:5f:8e:ed:64:95:5a:19:54:92:1e:ad:
         55:4e:88:79:2f:a6:90:56:58:3e:53:51:4c:36:6f:b9:cb:e1:
         0a:3a:ad:c4:b8:aa:9b:85:f5:29:2a:86:a5:40:6d:d6:dc:f2:
         80:2f:30:47:24:cf:93:76:5e:60:98:e8:05:84:91:d3:ad:8c:
         dc:04:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:05:58 2025 by rpki-client