Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3334203d3e203532363337.roa
File:                     323830343a6438383a3a2f33322d3334203d3e203532363337.roa (raw, json)
Hash identifier:          k3Bm0F1eBUvJv9DR8EcC67zGNW6MvG6HAqcmjidYFoI=
Subject key identifier:   27:0F:A1:3C:10:F7:76:9F:74:AD:FC:05:71:E3:97:61:05:9E:4D:78
Certificate issuer:       /CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
Certificate serial:       48C7520AC0663DD3B7F78B814A4A89BC985F13B7
Authority key identifier: BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3334203d3e203532363337.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     52637
IP address blocks:        2804:d88::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl
                          rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c7:52:0a:c0:66:3d:d3:b7:f7:8b:81:4a:4a:89:bc:98:5f:13:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD40CEDDB8E6AC181C713C37060807D151D2B1AE
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=3082010A0282010100DE067A30B41D825860EC063C118A6BC14B10946AFE7DC6CF8416434B61C0C577B8BC7A391304410E5FC53F452CBD3230C3A8705C0F5D82C2F71090AFE56DA3863B0C535BA743702AD72D53332A0C33DAC1E447C68F93B473D23343D16827E47F446A21B23C0E980AA753A96FC1EF4D6484623448E5E17442A96FE08C77BB74777012C53ECBFFD1EE40973C0CD0F0806D7691FCC3E542FC8A9D143A35661A2EB68AC6ACCA4D8C2E68C45E47FA820405779ABE4DA8517F20642E97DAA1065C41CB178D3A4093A73CC8D73979A774F84DBD4DFA9BF784BE4E075BEFF871A5D156961F6F7BDB43A16D66D0526C5AFB4F1BF7619EC7923B069D4111EFD5975E109DDD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:06:7a:30:b4:1d:82:58:60:ec:06:3c:11:8a:
                    6b:c1:4b:10:94:6a:fe:7d:c6:cf:84:16:43:4b:61:
                    c0:c5:77:b8:bc:7a:39:13:04:41:0e:5f:c5:3f:45:
                    2c:bd:32:30:c3:a8:70:5c:0f:5d:82:c2:f7:10:90:
                    af:e5:6d:a3:86:3b:0c:53:5b:a7:43:70:2a:d7:2d:
                    53:33:2a:0c:33:da:c1:e4:47:c6:8f:93:b4:73:d2:
                    33:43:d1:68:27:e4:7f:44:6a:21:b2:3c:0e:98:0a:
                    a7:53:a9:6f:c1:ef:4d:64:84:62:34:48:e5:e1:74:
                    42:a9:6f:e0:8c:77:bb:74:77:70:12:c5:3e:cb:ff:
                    d1:ee:40:97:3c:0c:d0:f0:80:6d:76:91:fc:c3:e5:
                    42:fc:8a:9d:14:3a:35:66:1a:2e:b6:8a:c6:ac:ca:
                    4d:8c:2e:68:c4:5e:47:fa:82:04:05:77:9a:be:4d:
                    a8:51:7f:20:64:2e:97:da:a1:06:5c:41:cb:17:8d:
                    3a:40:93:a7:3c:c8:d7:39:79:a7:74:f8:4d:bd:4d:
                    fa:9b:f7:84:be:4e:07:5b:ef:f8:71:a5:d1:56:96:
                    1f:6f:7b:db:43:a1:6d:66:d0:52:6c:5a:fb:4f:1b:
                    f7:61:9e:c7:92:3b:06:9d:41:11:ef:d5:97:5e:10:
                    9d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0F:A1:3C:10:F7:76:9F:74:AD:FC:05:71:E3:97:61:05:9E:4D:78
            X509v3 Authority Key Identifier:
                keyid:BD:40:CE:DD:B8:E6:AC:18:1C:71:3C:37:06:08:07:D1:51:D2:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD40CEDDB8E6AC181C713C37060807D151D2B1AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/2/323830343a6438383a3a2f33322d3334203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:b6:de:5a:fe:e2:77:c2:e7:f7:ca:23:59:1b:11:c4:0d:4a:
         cc:8c:9c:08:0f:f0:ff:d5:5c:be:e8:ce:02:59:2c:29:47:26:
         85:f2:56:19:54:b0:20:91:1e:34:02:aa:f8:d7:40:53:2b:3d:
         f5:79:a4:ac:53:fd:46:6c:e0:a9:8e:a0:37:84:ed:20:d1:18:
         c4:86:8e:a8:0b:66:9d:4d:94:57:7e:ef:28:ab:01:2f:ae:64:
         ad:91:79:42:5a:a8:d0:18:19:04:3d:c0:df:f6:33:55:db:38:
         ed:5b:e9:9e:1c:6f:8f:1b:f3:29:0f:03:53:6f:8d:83:b3:18:
         32:70:34:fe:a8:46:3c:62:33:cd:7e:b4:dd:4b:47:3a:57:d8:
         7b:b3:0f:ee:33:04:ae:80:3a:d3:ef:19:ce:d6:5d:e0:ff:d3:
         1c:00:00:be:23:33:21:63:ca:fe:40:83:b6:75:25:aa:cf:8c:
         a0:59:10:7a:77:ab:df:7f:da:65:d6:0f:7f:8a:41:c1:83:8e:
         22:76:b6:b4:84:3c:f5:4b:b1:ad:09:c3:27:9b:46:e2:5d:74:
         c6:12:e4:60:2f:ec:a9:3f:cf:d4:4d:1f:8d:44:c3:27:0f:71:
         0c:f0:87:b0:84:ea:52:70:25:ce:0d:3b:fc:fb:16:8a:07:5f:
         e4:32:1e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:54 2025 by rpki-client