Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/323830343a333862633a3a2f33322d3332203d3e20323636343938.roa
File:                     323830343a333862633a3a2f33322d3332203d3e20323636343938.roa (raw, json)
Hash identifier:          tYcBJUSO0KZA+RJnK1KcngPI1fn0bClLRfaXBbcRWc8=
Subject key identifier:   C3:56:08:FC:7E:2B:04:3B:8F:0E:3C:9F:B9:CE:14:1B:DD:29:54:29
Certificate issuer:       /CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
Certificate serial:       2F5B702EDDC12BBB78D4C681907457A88C299257
Authority key identifier: D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/323830343a333862633a3a2f33322d3332203d3e20323636343938.roa
Signing time:             Thu 06 Mar 2025 16:33:24 +0000
ROA not before:           Thu 06 Mar 2025 16:28:24 +0000
ROA not after:            Thu 05 Mar 2026 16:33:24 +0000
asID:                     266498
IP address blocks:        2804:38bc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl
                          rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5b:70:2e:dd:c1:2b:bb:78:d4:c6:81:90:74:57:a8:8c:29:92:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D97EFFA58186EAE6B6F701100E4FACC784AACB40
        Validity
            Not Before: Mar  6 16:28:24 2025 GMT
            Not After : Mar  5 16:33:24 2026 GMT
        Subject: CN=C35608FC7E2B043B8F0E3C9FB9CE141BDD295429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:5c:79:e3:07:3f:99:9f:89:37:22:6b:f5:
                    c7:e7:14:9d:e6:a9:81:93:4c:80:bc:ef:6c:e6:e1:
                    1b:13:73:f6:51:c2:8f:66:15:83:a0:82:d1:26:b8:
                    82:68:47:3b:15:2f:7b:ad:b8:e7:9b:af:e5:5f:1f:
                    3d:0c:51:fd:cf:3a:6c:6d:ee:9f:1d:4e:1d:00:ab:
                    5b:8a:a0:2b:17:f6:07:50:1b:78:5e:1e:51:02:0f:
                    d5:88:9a:ae:fa:ba:62:e0:e8:88:f5:f2:05:a3:8f:
                    46:88:e2:8d:42:03:38:2c:82:dd:f2:c6:57:a3:f0:
                    29:30:de:37:d5:19:35:76:3f:ec:8f:0f:3f:71:1a:
                    4f:e6:e1:b5:e4:5f:bd:88:57:1d:e7:7a:d6:5c:56:
                    0f:2d:b2:3d:3c:7a:60:6c:2e:52:d8:db:04:fc:9d:
                    8b:cc:9c:17:82:74:07:10:18:1b:23:12:1b:73:1a:
                    d0:dc:ff:df:b3:e0:a0:2e:2e:eb:51:6b:a4:7d:01:
                    a7:03:b8:84:70:67:2c:f2:2c:87:d6:1e:36:5a:ff:
                    23:3a:83:30:08:4b:c3:0d:04:4b:e6:e4:3f:2d:a7:
                    e6:19:5d:a5:1e:f1:06:2a:ed:01:8e:fd:a7:4d:87:
                    73:5f:b6:67:4e:a9:8e:0f:2a:73:9c:57:4a:5a:e5:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:56:08:FC:7E:2B:04:3B:8F:0E:3C:9F:B9:CE:14:1B:DD:29:54:29
            X509v3 Authority Key Identifier:
                keyid:D9:7E:FF:A5:81:86:EA:E6:B6:F7:01:10:0E:4F:AC:C7:84:AA:CB:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D97EFFA58186EAE6B6F701100E4FACC784AACB40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BW6uCJwPejCeJQS3fhM1hBb6JF9nFSsr8P4PAE2Kdukw/1/323830343a333862633a3a2f33322d3332203d3e20323636343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:03:bc:e2:6b:a4:9e:9c:80:ab:83:3e:a2:dd:50:33:2f:93:
         63:4e:ec:bc:be:73:ff:99:ae:44:b1:c8:3c:0e:b9:40:a5:a5:
         ec:0c:6b:1f:11:3a:2f:0c:94:fe:36:bb:10:d4:e9:fa:1f:ce:
         63:2b:82:c6:71:bb:2d:b9:81:44:fe:32:25:d6:e5:c1:cb:71:
         14:40:5e:4a:0c:a2:44:0c:5a:c9:23:fc:0c:46:2a:7b:21:4d:
         83:5e:2f:23:26:4d:dd:23:82:c3:80:4c:d1:bb:4f:93:d0:a3:
         3a:07:48:6b:ed:9b:d8:df:91:29:8e:b9:7c:4e:31:c4:2b:25:
         ca:73:5c:a9:5e:47:e6:d0:ea:f6:c8:0b:a9:33:61:37:5a:93:
         75:6a:a3:14:1f:d9:c0:38:25:4c:4a:53:0e:da:d9:3c:98:4c:
         f8:f2:04:b8:0b:70:c8:15:98:94:d6:d6:15:85:0e:04:40:c0:
         e6:31:5f:70:b0:1f:3b:2c:84:60:5b:63:cf:40:a3:8f:0b:18:
         8b:ae:2f:24:b7:ec:9c:55:df:ba:57:01:e8:92:4f:2e:22:7e:
         b3:3b:a6:dc:f1:70:88:68:f6:b6:05:42:10:f8:42:44:55:28:
         8a:8a:41:e3:72:b5:e4:a0:bd:da:63:23:0f:fa:f4:80:a4:a3:
         3d:18:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:21:46 2025 by rpki-client