Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3430203d3e203533323336.roa
File:                     323830343a3266303a3a2f33362d3430203d3e203533323336.roa (raw, json)
Hash identifier:          uvUwAtAtVg6mQHE5cr/a+nOMPCGoMgIyGKHKR8l+YOg=
Subject key identifier:   63:4E:B1:E1:71:A8:80:4C:5E:29:24:A7:6A:82:23:2F:79:07:D7:73
Certificate issuer:       /CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
Certificate serial:       2949DB98967464C02AE68D47C7F946A7444D6FDF
Authority key identifier: 17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3430203d3e203533323336.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     53236
IP address blocks:        2804:2f0::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl
                          rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:49:db:98:96:74:64:c0:2a:e6:8d:47:c7:f9:46:a7:44:4d:6f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:59:2e:e0:24:94:6e:7c:cd:87:d0:54:0f:
                    75:b9:3b:6d:2e:c9:f7:31:72:74:e8:0d:01:ff:08:
                    b5:ce:62:15:b7:a9:43:6e:04:52:b2:63:36:87:7a:
                    80:2d:c2:06:df:c4:3d:53:d1:9b:53:d2:ff:49:5a:
                    ae:2a:a0:43:ac:a5:14:92:ed:2c:ca:55:94:8e:24:
                    0a:ef:e7:d5:df:69:29:61:5c:3e:47:0d:ed:36:d8:
                    d2:b0:e4:f9:cd:eb:1c:ae:c8:0a:b1:ab:66:6d:93:
                    fe:74:98:cb:60:e2:cd:f7:7a:a1:38:65:9d:ad:b1:
                    59:cc:c5:b4:10:e4:da:f5:9d:a8:ac:16:0c:0e:ac:
                    e9:3d:83:96:34:2c:65:9e:85:0a:12:9f:fb:a9:09:
                    4a:9c:8b:96:3c:f2:3d:54:78:07:ea:f4:b7:81:de:
                    10:e3:7c:05:fb:5b:83:b0:69:45:01:d8:3a:8d:36:
                    08:78:33:c1:9c:b5:d6:88:4e:d4:c6:7c:53:94:3f:
                    c4:3c:16:d4:73:db:da:16:1c:fd:86:58:d2:1b:48:
                    47:56:e9:94:0c:6c:7d:2b:81:5d:1d:84:ee:de:e0:
                    ec:aa:88:0e:43:d4:d7:f2:18:08:8a:8f:19:27:ac:
                    fd:ce:e5:cd:8e:94:54:00:5d:9a:31:ef:c7:2f:3a:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4E:B1:E1:71:A8:80:4C:5E:29:24:A7:6A:82:23:2F:79:07:D7:73
            X509v3 Authority Key Identifier:
                keyid:17:4C:40:BD:2D:1D:EF:2E:D8:BF:C1:DE:1B:EA:BB:F5:27:18:4A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174C40BD2D1DEF2ED8BFC1DE1BEABBF527184A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTWeCEMqVo7itWtzi5k88nvQALkJgpPvENtDwgi1oxod/1/323830343a3266303a3a2f33362d3430203d3e203533323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f0::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:66:e6:92:27:66:ab:fb:b7:31:d1:6c:dd:9a:fa:e7:02:39:
         f1:8a:f5:75:6e:5d:a6:67:ff:8c:29:de:2e:c5:9f:ba:b9:ca:
         9c:1e:b7:06:f1:17:66:30:8e:aa:f0:39:11:85:25:24:5d:68:
         0f:5a:24:f2:8b:72:a9:a1:df:96:1b:0d:ee:af:fd:b6:85:af:
         2f:ae:e5:21:d8:f9:2c:bf:d8:8c:0c:0a:c0:e5:e5:3e:c7:f0:
         54:9b:50:95:25:b8:0c:5b:ed:51:9e:4c:b0:90:c7:13:44:71:
         8d:0b:7c:60:7f:46:45:7d:5b:2a:56:46:58:83:1b:26:cb:81:
         43:62:c8:c6:29:91:31:b9:91:65:f1:c6:5a:7b:f2:fe:0b:d8:
         79:f5:49:de:ef:1b:70:1b:10:26:e1:3f:45:aa:12:e2:67:ab:
         3c:78:4c:f4:cc:9d:3f:8f:3f:b5:9b:d6:a6:2c:df:b6:d8:1b:
         93:c4:97:b3:29:23:f7:38:b0:82:36:3e:6e:ea:b4:61:24:1d:
         24:89:f8:d8:fe:a3:e5:96:88:95:22:a3:7b:5d:37:9d:1c:8a:
         f0:81:a2:b3:fb:e4:10:8e:fe:c6:6c:a6:97:4e:b0:57:ec:7a:
         79:26:ad:4f:1b:55:25:a7:f8:8d:26:fb:10:4b:29:72:81:85:
         a6:5a:e6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:42 2025 by rpki-client