Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa
File:                     323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa (raw, json)
Hash identifier:          10wEGWQJjodShwtbNjfwSGtxzRRG6xY5FPd7dmvALjU=
Subject key identifier:   40:2E:7D:64:40:68:61:FD:00:35:19:17:29:7D:B9:EA:C0:B2:14:5A
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       314FE14ABD0B7E70BE2E171823438230FC0EED27
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4f:e1:4a:bd:0b:7e:70:be:2e:17:18:23:43:82:30:fc:0e:ed:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=3082010A0282010100E35459B0689BDD7F51743390099D469A86DBABCB1C1BD1CAB67B334739608940F2630351D3AC7B39DAB8EC49E1EE0029242EE44C39048F8A0D3689A780BDD43A320CD096FC02D0ED128D22E678EEEFEADD55AEDD505C32126B9B81395BD3136F5A6CC00304D14BC34D7046C9BACD814597DE96D139B9D162CC7F724C425F84F4375D4869F44B60182CA48FB047628627C8B136728E57A8C0FCD775E79EA1A8303B6C519637EC1B7CF5A45D6F669FBE5794D28444F2BD5BF2CBE9C3236D45A89E8462BCF8375DA23C16E912F896B6E5623DCE337D63A5C34D41704B3DAC237D7799ECD19368B14240DB51CE98843FEAD4D223F71D04B0CF67C2FC660175B21CDF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:54:59:b0:68:9b:dd:7f:51:74:33:90:09:9d:
                    46:9a:86:db:ab:cb:1c:1b:d1:ca:b6:7b:33:47:39:
                    60:89:40:f2:63:03:51:d3:ac:7b:39:da:b8:ec:49:
                    e1:ee:00:29:24:2e:e4:4c:39:04:8f:8a:0d:36:89:
                    a7:80:bd:d4:3a:32:0c:d0:96:fc:02:d0:ed:12:8d:
                    22:e6:78:ee:ef:ea:dd:55:ae:dd:50:5c:32:12:6b:
                    9b:81:39:5b:d3:13:6f:5a:6c:c0:03:04:d1:4b:c3:
                    4d:70:46:c9:ba:cd:81:45:97:de:96:d1:39:b9:d1:
                    62:cc:7f:72:4c:42:5f:84:f4:37:5d:48:69:f4:4b:
                    60:18:2c:a4:8f:b0:47:62:86:27:c8:b1:36:72:8e:
                    57:a8:c0:fc:d7:75:e7:9e:a1:a8:30:3b:6c:51:96:
                    37:ec:1b:7c:f5:a4:5d:6f:66:9f:be:57:94:d2:84:
                    44:f2:bd:5b:f2:cb:e9:c3:23:6d:45:a8:9e:84:62:
                    bc:f8:37:5d:a2:3c:16:e9:12:f8:96:b6:e5:62:3d:
                    ce:33:7d:63:a5:c3:4d:41:70:4b:3d:ac:23:7d:77:
                    99:ec:d1:93:68:b1:42:40:db:51:ce:98:84:3f:ea:
                    d4:d2:23:f7:1d:04:b0:cf:67:c2:fc:66:01:75:b2:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2E:7D:64:40:68:61:FD:00:35:19:17:29:7D:B9:EA:C0:B2:14:5A
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a383030303a3a2f33342d3334203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:41:a6:1f:3c:82:54:ef:e8:e1:be:0a:67:a0:f4:5b:6f:
         df:c8:8d:3c:56:30:7f:84:a9:d6:d7:8c:5d:db:40:12:ec:8b:
         7a:47:4d:cc:e1:f0:50:3f:8e:0b:30:9a:bd:3b:cf:f1:97:97:
         6d:91:e0:ac:d1:c9:7b:c0:39:a9:61:03:c0:75:e5:1a:0b:2c:
         49:a3:ef:3b:d6:a3:0e:89:d9:c8:83:b8:8d:9f:2b:e0:88:7b:
         8d:06:1a:df:ca:ce:ea:2f:5d:98:ed:44:c1:36:fe:11:51:10:
         03:36:4b:6c:55:43:f3:50:dc:5b:a7:28:69:19:fa:72:2d:1d:
         73:87:0b:f3:83:3c:a4:60:af:53:4b:b3:28:69:47:1b:4a:a0:
         bf:57:92:b4:4f:3e:8d:ed:aa:9e:fe:4d:d2:20:aa:e6:0c:d4:
         1e:b8:ad:24:61:6d:ae:0a:b6:b0:f4:d6:c2:70:96:19:5b:13:
         17:62:83:d1:7d:14:fa:6a:30:96:1b:d7:d8:0e:0f:d4:c8:eb:
         ec:df:fd:3b:64:5c:e5:c4:42:1d:29:62:28:06:82:62:87:7f:
         2a:76:e5:7e:f0:90:22:60:9a:3d:c5:3c:55:85:13:71:93:8a:
         d3:75:c9:74:9f:7e:04:75:51:8b:f2:4f:19:18:4b:5a:80:c1:
         79:86:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:28:38 2025 by rpki-client