Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa
File:                     323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa (raw, json)
Hash identifier:          Z76ovSANgHJGP+sM/lxSiStmUvcI+SG3aC8iOHrSWnM=
Subject key identifier:   4F:2C:54:2A:05:CF:21:18:4C:A1:AB:06:92:CF:46:3E:87:1C:CF:A0
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       5FD3D373F64363901D01728F5993B53DDF342D37
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d3:d3:73:f6:43:63:90:1d:01:72:8f:59:93:b5:3d:df:34:2d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100DD48CB3934A60E84322AE4C97A49724FD1AFF33269EEA2832A63B9673BB7B06C8B417AB7C293ABEFF6E451DA0B4F667439DBD3B0D1965077C1AEAAE1031A51FDDBE670C0F1FE9FDCEC6A9A60C96446E04E4AF5041F6254C58ACF770FEA905F96CE10DA0509B4D78B35C8E0A2458D1DB2D361D39E9C7CF21A34FF384627954C8CADB4DE833189C0489A2917D3615E66A9A2C00ADF35EEA2430C979F3411605FB9BCBE347805AE5F89E61BBDE747E89D4B2F34B4E5A25A94D59E8F1299247DECBD3334685D3C316142F0C1562921899B6E0504509110F5619FD3F7A0AB91EFE60980989AFE8C167F448A79E22E9AFC39FB48C5406EA115F1D7EBB952C37E2A56190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:48:cb:39:34:a6:0e:84:32:2a:e4:c9:7a:49:
                    72:4f:d1:af:f3:32:69:ee:a2:83:2a:63:b9:67:3b:
                    b7:b0:6c:8b:41:7a:b7:c2:93:ab:ef:f6:e4:51:da:
                    0b:4f:66:74:39:db:d3:b0:d1:96:50:77:c1:ae:aa:
                    e1:03:1a:51:fd:db:e6:70:c0:f1:fe:9f:dc:ec:6a:
                    9a:60:c9:64:46:e0:4e:4a:f5:04:1f:62:54:c5:8a:
                    cf:77:0f:ea:90:5f:96:ce:10:da:05:09:b4:d7:8b:
                    35:c8:e0:a2:45:8d:1d:b2:d3:61:d3:9e:9c:7c:f2:
                    1a:34:ff:38:46:27:95:4c:8c:ad:b4:de:83:31:89:
                    c0:48:9a:29:17:d3:61:5e:66:a9:a2:c0:0a:df:35:
                    ee:a2:43:0c:97:9f:34:11:60:5f:b9:bc:be:34:78:
                    05:ae:5f:89:e6:1b:bd:e7:47:e8:9d:4b:2f:34:b4:
                    e5:a2:5a:94:d5:9e:8f:12:99:24:7d:ec:bd:33:34:
                    68:5d:3c:31:61:42:f0:c1:56:29:21:89:9b:6e:05:
                    04:50:91:10:f5:61:9f:d3:f7:a0:ab:91:ef:e6:09:
                    80:98:9a:fe:8c:16:7f:44:8a:79:e2:2e:9a:fc:39:
                    fb:48:c5:40:6e:a1:15:f1:d7:eb:b9:52:c3:7e:2a:
                    56:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2C:54:2A:05:CF:21:18:4C:A1:AB:06:92:CF:46:3E:87:1C:CF:A0
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a343030303a3a2f33342d3334203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7c:bf:0f:38:b9:00:7e:5b:d9:cc:0c:d8:70:21:89:0a:a3:61:
         55:98:66:83:10:7c:33:c9:ee:71:5e:27:fe:83:27:fe:60:49:
         37:eb:48:f5:13:98:38:f0:70:fc:6f:41:38:57:96:b6:a1:78:
         6c:30:08:1c:db:7a:eb:cc:27:cd:1d:d4:aa:b2:f1:e8:3a:44:
         ac:82:04:b0:a8:4e:92:ac:fa:ed:48:b4:59:28:c6:f9:f1:d1:
         ac:a2:df:09:66:8d:93:cb:42:b1:23:2a:b2:f6:47:08:74:f2:
         81:bb:ee:4b:e2:a3:d0:11:6c:b6:61:fd:96:91:8c:67:75:f0:
         b7:fc:00:15:5e:3e:09:8a:f6:3e:b1:a0:dd:26:d2:06:9c:d2:
         d8:36:ac:fc:f3:91:02:b0:c5:53:ef:05:75:62:31:a4:cd:06:
         7a:37:d7:35:fc:39:ba:94:87:03:00:82:f7:bf:12:12:98:4f:
         6f:52:da:c1:08:40:ee:3c:a1:a5:dc:ec:4e:67:d2:d1:72:03:
         bc:3b:72:15:bb:a5:ef:78:0b:db:33:41:40:2e:5c:c7:66:d6:
         91:e3:7f:55:bb:21:77:05:32:62:5b:80:97:6f:40:25:6e:bb:
         07:a0:84:76:87:fa:14:56:f8:19:96:3d:d1:40:f1:51:dc:08:
         33:43:f7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:27:22 2025 by rpki-client