Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33322d3332203d3e20323731373534.roa
File:                     323830343a383038303a3a2f33322d3332203d3e20323731373534.roa (raw, json)
Hash identifier:          SDdJtxWMH6VIkQnfvEmAoo4GCxbrBmE2je5LpBEZHbY=
Subject key identifier:   8F:EB:E0:B3:14:71:EC:AC:D7:00:91:4A:FC:E4:D2:D5:CA:A6:2F:F3
Certificate issuer:       /CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
Certificate serial:       1A86B8CF431F4EF82EA96923667841AF81808718
Authority key identifier: A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33322d3332203d3e20323731373534.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     271754
IP address blocks:        2804:8080::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:86:b8:cf:43:1f:4e:f8:2e:a9:69:23:66:78:41:af:81:80:87:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:1e:69:73:60:c3:db:71:72:e3:bd:25:be:
                    e2:60:f7:fc:02:89:9d:86:78:fa:be:19:4e:17:16:
                    c9:ce:f3:d0:7f:17:e3:06:7d:7b:d4:97:2b:83:24:
                    e3:a0:fb:ef:1b:13:39:6e:fc:e1:42:91:8d:76:d4:
                    44:7e:67:d8:33:43:13:46:21:99:56:cd:71:ef:fa:
                    b0:36:f9:77:fd:20:1f:73:c1:27:8d:03:fc:e0:c3:
                    5b:30:c7:31:75:ce:46:7b:38:e5:a4:a6:82:a5:a7:
                    9f:5a:d0:5e:ff:f7:cd:e8:f5:7b:14:dd:e4:c7:eb:
                    60:65:f1:7a:a5:c5:d9:4c:13:3d:4b:ce:88:48:0c:
                    be:6f:51:b4:37:4d:d9:e0:92:34:09:e3:e0:e7:12:
                    8a:e3:4f:72:c2:42:0d:1d:a6:01:f4:9c:a7:67:b4:
                    3d:38:69:4d:ac:81:ea:6f:d7:8d:ff:9d:26:48:f2:
                    40:e1:22:f2:f2:e7:31:41:4c:e2:13:cd:6a:d7:28:
                    c1:75:ef:47:96:e9:8c:ee:d9:5b:fb:ef:5b:20:19:
                    f9:5f:2c:f8:11:63:59:8f:d5:93:67:30:eb:38:0f:
                    29:99:22:8a:0f:31:a4:54:48:e6:fa:15:6f:0e:c5:
                    ca:1a:a4:b8:fc:60:d5:85:66:6c:92:29:c7:0f:49:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:EB:E0:B3:14:71:EC:AC:D7:00:91:4A:FC:E4:D2:D5:CA:A6:2F:F3
            X509v3 Authority Key Identifier:
                keyid:A1:65:31:9A:A3:6D:4F:FD:2A:5D:9A:2B:E4:2F:5C:2E:F0:E2:0B:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A165319AA36D4FFD2A5D9A2BE42F5C2EF0E20B8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/1/323830343a383038303a3a2f33322d3332203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8080::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:13:5f:52:43:31:69:88:fa:a3:b5:ca:8d:a5:a0:20:af:
         0e:21:fd:25:c6:fd:c8:bc:fc:b1:02:e0:14:e3:2f:2a:bd:0b:
         7b:15:3f:18:b6:bc:15:27:52:79:88:f5:92:3f:d2:c8:77:3d:
         00:06:08:c0:f8:0c:93:59:c5:ba:27:c7:e0:53:dd:88:e5:36:
         11:5c:8c:51:bc:d6:bb:5b:e9:f5:83:0d:94:11:a7:40:f6:e8:
         ce:b6:cf:ac:6d:21:2a:e0:12:6c:3f:fc:d0:c8:21:61:e8:da:
         7f:db:82:15:80:7a:4f:e1:bc:95:67:a5:a1:c6:5d:94:24:e0:
         84:ac:9c:0e:05:15:c7:ec:40:ec:82:38:04:33:c0:bc:f8:26:
         4d:9f:92:28:b0:ec:3a:66:6f:2f:15:40:b5:f0:91:32:a1:e0:
         91:72:42:51:af:38:7b:df:0f:a3:a8:b8:75:34:6f:39:46:5b:
         0e:02:dc:db:4b:90:53:cd:62:ac:aa:c2:36:99:2b:e1:58:8a:
         f2:90:1c:f3:6e:42:90:00:ab:39:84:7e:f1:8a:bb:1f:a3:de:
         62:db:0a:fe:29:ba:b4:39:a9:fa:8f:9b:5a:64:0f:c4:e5:b5:
         40:b7:1f:df:db:49:b5:18:d5:c5:20:b5:ca:72:34:8a:ba:58:
         6a:0d:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:28:35 2025 by rpki-client