Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3336203d3e203533323336.roa
File:                     323830343a3266303a3a2f33362d3336203d3e203533323336.roa (raw, json)
Hash identifier:          BH0A2fccBdxrN+NUkEAQd8QEGvhTLCyZ7R4TYyumbBs=
Subject key identifier:   F7:6C:50:83:64:5C:DE:DC:E3:FF:FD:AD:08:EC:82:29:FC:1D:69:97
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       67608D1BEF11E6E46A816E3498EDE5A86EE0F6D8
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3336203d3e203533323336.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     53236
IP address blocks:        2804:2f0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:60:8d:1b:ef:11:e6:e4:6a:81:6e:34:98:ed:e5:a8:6e:e0:f6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3082010A0282010100DEC6036E147913A9696476628F949C09894206B2A42FAB641962AAA849399F360E3A56517871DEC24049EF215876874787B22625A17081D62A5E56D3431EAD18D2BF3334B6C1D1A2224909FFF4C1190470515653A58A8348A32A9B73EFC56D9B942FB24A850825BC5B8BD0DF0EDD974CD06FADCB6A9AB38DB974532E2CDADCDDBB342DD37130178ED1CF762DB1AE95ED95940408087DF7FFA37435832852BC5E00FC3E4A438AE6B14B2FBA0995AF64F912BCA2B9BF350FD600AB118C5B77BA440ED7697463477F8C69BF8F13F657D5A73A880246D6052244A43A1FF7CED675AB52A621B109DEACE350AC44265DDE8A2460D77A7FA1765C088C8F196A39190B7B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:03:6e:14:79:13:a9:69:64:76:62:8f:94:
                    9c:09:89:42:06:b2:a4:2f:ab:64:19:62:aa:a8:49:
                    39:9f:36:0e:3a:56:51:78:71:de:c2:40:49:ef:21:
                    58:76:87:47:87:b2:26:25:a1:70:81:d6:2a:5e:56:
                    d3:43:1e:ad:18:d2:bf:33:34:b6:c1:d1:a2:22:49:
                    09:ff:f4:c1:19:04:70:51:56:53:a5:8a:83:48:a3:
                    2a:9b:73:ef:c5:6d:9b:94:2f:b2:4a:85:08:25:bc:
                    5b:8b:d0:df:0e:dd:97:4c:d0:6f:ad:cb:6a:9a:b3:
                    8d:b9:74:53:2e:2c:da:dc:dd:bb:34:2d:d3:71:30:
                    17:8e:d1:cf:76:2d:b1:ae:95:ed:95:94:04:08:08:
                    7d:f7:ff:a3:74:35:83:28:52:bc:5e:00:fc:3e:4a:
                    43:8a:e6:b1:4b:2f:ba:09:95:af:64:f9:12:bc:a2:
                    b9:bf:35:0f:d6:00:ab:11:8c:5b:77:ba:44:0e:d7:
                    69:74:63:47:7f:8c:69:bf:8f:13:f6:57:d5:a7:3a:
                    88:02:46:d6:05:22:44:a4:3a:1f:f7:ce:d6:75:ab:
                    52:a6:21:b1:09:de:ac:e3:50:ac:44:26:5d:de:8a:
                    24:60:d7:7a:7f:a1:76:5c:08:8c:8f:19:6a:39:19:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:50:83:64:5C:DE:DC:E3:FF:FD:AD:08:EC:82:29:FC:1D:69:97
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3336203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/36

    Signature Algorithm: sha256WithRSAEncryption
         cc:35:31:68:62:cb:a4:11:7c:40:53:cc:30:05:99:06:6a:65:
         f8:ee:cd:c8:14:61:83:92:ff:43:90:8a:51:45:ff:26:ba:bf:
         d1:0e:9f:49:9e:1a:34:70:1a:2e:9e:ab:60:7e:93:1a:23:8d:
         03:b6:49:a7:8a:7e:dc:57:e6:16:ec:21:c8:eb:b4:f0:64:31:
         8d:8b:59:b9:ef:38:f8:8a:8f:57:b7:c3:bc:9e:1d:89:1f:18:
         98:5d:6f:59:b0:34:a5:76:fa:12:ff:42:be:5f:b4:47:3b:4c:
         ee:36:ce:ce:1c:6e:ea:f7:34:10:7e:e0:81:b9:91:59:1d:09:
         da:5e:77:b8:63:4e:5b:fa:33:f1:08:f1:35:7d:aa:fc:95:1b:
         23:62:fc:75:a4:b1:a5:c1:65:65:58:55:74:f0:bf:13:d1:66:
         3c:79:8b:c5:2d:fd:21:70:dc:f0:87:44:92:b2:0a:c8:d1:77:
         da:a3:f5:e2:b7:2e:59:e0:84:ad:02:39:f5:5f:41:27:ab:fb:
         5c:28:e5:0c:5f:e2:a9:7b:58:3b:bb:1f:4b:3f:34:6e:08:b2:
         41:f4:36:c6:3b:ac:88:5b:d2:71:e1:d2:46:84:83:6f:ef:c9:
         81:f0:99:57:62:f8:b0:a2:5a:91:6e:41:7f:b6:2d:8e:3a:c9:
         6d:aa:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:13 2025 by rpki-client