Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/323830343a333239633a3a2f33322d3438203d3e20323635303838.roa
File:                     323830343a333239633a3a2f33322d3438203d3e20323635303838.roa (raw, json)
Hash identifier:          V5ZwvzsPbrm0wg2SvSp6bmf2WTQwfvtm0/TNKPkDSeI=
Subject key identifier:   2C:9D:4E:CD:86:DD:9D:BE:E8:77:07:2F:DC:00:35:41:F8:60:9F:E2
Certificate issuer:       /CN=66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7
Certificate serial:       6B7B99572428EB3B79A9CDD1185DD0AFBADFFC61
Authority key identifier: 66:AB:3C:6D:69:62:BB:C2:0D:BF:F5:97:96:9F:5D:2B:8E:D6:E1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/323830343a333239633a3a2f33322d3438203d3e20323635303838.roa
Signing time:             Thu 06 Mar 2025 11:55:33 +0000
ROA not before:           Thu 06 Mar 2025 11:50:33 +0000
ROA not after:            Thu 05 Mar 2026 11:55:33 +0000
asID:                     265088
IP address blocks:        2804:329c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.crl
                          rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7b:99:57:24:28:eb:3b:79:a9:cd:d1:18:5d:d0:af:ba:df:fc:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7
        Validity
            Not Before: Mar  6 11:50:33 2025 GMT
            Not After : Mar  5 11:55:33 2026 GMT
        Subject: CN=2C9D4ECD86DD9DBEE877072FDC003541F8609FE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2b:d2:1b:85:cc:3c:ad:a6:09:28:f5:7b:dc:
                    47:78:c4:18:43:11:17:4d:44:30:59:51:be:5e:8d:
                    bd:b6:af:a0:3d:a1:67:7b:56:ac:d1:06:6f:d0:ba:
                    02:df:75:b2:b3:2f:32:d1:42:a5:22:85:88:22:bd:
                    29:8f:e4:1d:2b:ad:f1:9f:a7:0e:66:12:e4:54:e9:
                    20:6e:9f:60:48:3a:e5:80:1f:23:63:11:15:ad:99:
                    7c:6f:f9:ef:da:17:9b:47:2c:cd:09:fe:67:a5:24:
                    43:7d:c8:f2:37:2a:e0:07:9b:46:fe:6b:40:ad:24:
                    83:47:e9:c4:22:28:28:f9:7d:d8:c1:21:9e:e6:47:
                    2f:45:1c:b9:34:3e:16:8f:2e:44:3f:89:ba:78:24:
                    60:ca:b0:99:e8:13:bd:76:d4:cb:84:77:aa:29:d1:
                    6a:e8:fc:2b:00:34:3e:00:5f:5e:31:b6:44:d4:e2:
                    0f:e4:f8:1e:07:d1:82:4c:96:34:ba:5d:3f:be:27:
                    fb:bb:c4:86:ba:fe:f9:09:e4:2f:c9:ad:a3:17:e0:
                    65:44:4d:0e:aa:57:ba:f3:b3:1e:61:08:9b:f9:87:
                    99:3f:3d:28:16:54:ec:60:07:43:af:e7:28:9a:db:
                    da:41:7f:12:c7:f9:a2:a2:97:3d:31:0c:f0:b0:f8:
                    59:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9D:4E:CD:86:DD:9D:BE:E8:77:07:2F:DC:00:35:41:F8:60:9F:E2
            X509v3 Authority Key Identifier:
                keyid:66:AB:3C:6D:69:62:BB:C2:0D:BF:F5:97:96:9F:5D:2B:8E:D6:E1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66AB3C6D6962BBC20DBFF597969F5D2B8ED6E1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bww3ckGMSHyNQ9N67DKh3QJJ9zstRjo65UjZ4Uhy4eqy/1/323830343a333239633a3a2f33322d3438203d3e20323635303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:329c::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:25:c7:0a:57:dd:05:9a:8a:fa:fb:37:90:8d:ed:73:92:cc:
         9c:2a:52:fd:47:5a:cb:ac:a4:eb:9c:26:fa:cd:dd:8a:fa:7a:
         01:66:3e:3e:f5:3b:c3:ab:ed:90:5b:dc:06:ff:1a:32:4a:c4:
         24:72:f5:f1:e3:a7:bc:90:e3:51:b0:94:a2:e4:ca:95:1d:50:
         c5:4d:d9:42:94:7d:11:3c:13:84:a5:e4:93:dd:e4:4c:58:db:
         6d:03:b8:d7:2e:8c:e4:1e:67:e0:5c:c0:9e:83:59:09:a3:6c:
         10:a2:97:ba:39:a6:1c:80:ac:ac:5d:9a:b4:f8:34:b1:4e:54:
         3b:66:71:a8:a2:c9:f9:aa:63:2a:80:f1:dd:56:e7:7a:91:64:
         21:44:31:66:5a:72:1d:49:e0:ad:cb:47:55:f8:0c:22:81:42:
         d8:18:dd:8f:d9:08:d2:43:9d:b2:0b:1c:90:32:4e:56:00:63:
         d9:1e:b8:90:77:0b:3d:aa:5d:f1:3b:0f:eb:9d:b0:a4:44:d5:
         04:19:20:3a:27:cb:2f:02:bc:36:55:80:46:1b:d5:47:11:13:
         74:b7:6b:28:2f:e5:1b:86:c6:72:cc:3e:0d:f8:b0:dd:a9:19:
         a9:05:ea:52:83:3f:59:67:f2:ca:74:e0:06:c3:47:9e:c6:5e:
         02:57:ed:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:46:44 2025 by rpki-client