Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33322d3438203d3e203533323336.roa
File:                     323830343a3266303a3a2f33322d3438203d3e203533323336.roa (raw, json)
Hash identifier:          J88M01bP+z5Hpu8jX7Gx7B/yPIpw3ZP5XWT+qD4LgWE=
Subject key identifier:   A8:BB:96:F1:DC:EB:4D:A9:86:51:8C:17:E4:2C:09:3D:85:36:03:EF
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       6C7E7DEA490875B344BCCAEC552A9DD756A44A56
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33322d3438203d3e203533323336.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     53236
IP address blocks:        2804:2f0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7e:7d:ea:49:08:75:b3:44:bc:ca:ec:55:2a:9d:d7:56:a4:4a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:61:db:41:ff:02:18:19:c0:53:e4:85:dc:
                    fa:46:6e:68:63:25:ab:c8:0e:74:82:c0:ff:08:c5:
                    ad:d3:a3:2f:45:ac:4c:f8:cb:2b:3f:99:67:1d:a1:
                    11:ce:da:93:7e:fe:c8:aa:28:44:71:dd:a3:19:53:
                    98:36:6f:e3:d3:c0:0b:a5:0a:99:f7:bc:4a:67:ee:
                    d7:9b:ec:e1:56:30:be:0a:d0:94:63:ed:0b:26:ae:
                    3c:a6:c7:ec:e0:59:a6:42:06:03:3f:92:2a:49:d7:
                    5e:39:1a:79:93:7b:46:f1:37:1b:4c:a0:3c:09:83:
                    0c:c8:69:01:87:7c:d9:c4:75:01:0e:87:76:89:2c:
                    57:05:44:23:b7:69:af:12:7f:98:c1:44:7b:de:27:
                    49:5e:e6:41:0d:b7:98:00:16:b9:76:6e:42:e8:4b:
                    df:18:8f:da:80:92:0f:3c:7e:f6:09:13:fc:13:4e:
                    90:4f:71:62:7b:69:dc:7e:5e:6f:c2:a0:a0:96:89:
                    83:33:3f:41:04:0c:44:00:25:42:b1:31:7b:5d:bf:
                    be:72:13:5c:7c:19:3e:24:5e:07:6e:fb:41:41:de:
                    27:9e:d1:cb:1b:c8:d5:d5:0d:17:37:c0:87:30:7c:
                    28:ff:6b:79:6d:5d:ff:cb:a9:28:89:80:07:fd:16:
                    c8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BB:96:F1:DC:EB:4D:A9:86:51:8C:17:E4:2C:09:3D:85:36:03:EF
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33322d3438203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:d6:b6:d1:c9:49:9a:55:7a:6b:ca:11:fd:8e:2a:b2:7c:8a:
         74:bc:50:13:9d:a1:70:f6:e3:fe:bf:6f:97:87:13:75:d7:da:
         c8:da:a2:0e:01:4a:cf:dd:09:37:03:7f:c0:ef:ff:89:1b:76:
         03:52:ad:df:c1:7c:13:95:ef:fa:7d:6c:33:05:91:7b:57:ee:
         59:9e:39:da:89:1c:6f:9b:88:13:2a:83:9f:ff:87:84:90:07:
         4e:fa:76:0d:bd:9b:d7:20:b9:e4:5f:29:40:00:d3:fa:bc:51:
         9f:ed:51:df:73:46:36:d5:c2:9e:2f:96:0e:a4:38:59:52:30:
         32:4a:6c:99:d1:31:40:55:6e:e9:69:0c:e9:c1:0b:25:98:24:
         af:43:9a:38:31:cf:f3:f0:64:d8:d4:78:9b:02:c8:ab:29:d9:
         3d:1c:33:ad:78:21:b5:98:8b:ae:eb:e9:b4:48:2e:7a:b4:89:
         75:ed:be:92:f8:23:cb:d7:db:ce:7a:a3:23:ae:f4:f6:1b:1f:
         97:bd:ea:ff:33:17:73:51:a8:d1:2f:2d:05:3c:30:87:3c:8b:
         85:54:f7:a3:49:95:c3:d0:9e:f2:fd:54:34:9a:3f:da:3f:de:
         1c:69:6a:f0:ef:c7:3d:cc:70:84:ac:ce:68:3c:10:4e:e2:28:
         31:07:41:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:38 2025 by rpki-client