Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/323830343a336338343a3a2f33322d313238203d3e20323636323137.roa
File:                     323830343a336338343a3a2f33322d313238203d3e20323636323137.roa (raw, json)
Hash identifier:          4R3AV5bRdC9z2n4GSzHpn99AGG5cA5xN3SgraG7f6hE=
Subject key identifier:   FA:FE:90:BD:5A:88:AF:0C:CC:CC:7E:E1:1A:9F:DB:2E:AD:B3:54:32
Certificate issuer:       /CN=D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D
Certificate serial:       2612AA1C74B02E6B6288E47263C301A15905A262
Authority key identifier: D2:75:1A:D2:D4:C9:D5:D7:A8:31:53:0F:F2:0E:B4:6A:9D:2F:36:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/323830343a336338343a3a2f33322d313238203d3e20323636323137.roa
Signing time:             Tue 11 Mar 2025 20:58:58 +0000
ROA not before:           Tue 11 Mar 2025 20:53:58 +0000
ROA not after:            Tue 10 Mar 2026 20:58:58 +0000
asID:                     266217
IP address blocks:        2804:3c84::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.crl
                          rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:12:aa:1c:74:b0:2e:6b:62:88:e4:72:63:c3:01:a1:59:05:a2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D
        Validity
            Not Before: Mar 11 20:53:58 2025 GMT
            Not After : Mar 10 20:58:58 2026 GMT
        Subject: CN=FAFE90BD5A88AF0CCCCC7EE11A9FDB2EADB35432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:87:36:9f:e0:02:5d:ef:de:ca:22:f6:d6:
                    c3:ed:df:5b:cd:45:58:ac:f9:1d:6e:d6:0a:95:05:
                    c8:38:95:d1:b4:34:be:8d:37:54:a3:e4:38:50:1b:
                    f6:b6:98:83:d7:0f:a0:1c:41:98:d2:1c:1b:1c:3c:
                    9d:c9:ea:aa:74:10:04:f2:8b:d9:a2:98:18:fa:e7:
                    d8:0e:92:66:35:a5:9f:04:9c:a5:20:da:09:a8:59:
                    f3:d0:fa:b4:64:2c:fd:a4:5d:2d:c3:ff:f1:eb:79:
                    5a:b3:4d:a9:40:28:ab:0f:d9:70:ea:79:82:ab:1e:
                    8b:15:88:24:98:a8:cb:20:49:d3:bb:2f:20:3b:91:
                    49:6a:2c:f4:fe:8e:8f:d2:76:14:d7:d1:d9:8b:ed:
                    fa:17:c3:cb:c4:ae:8f:3f:2c:fd:6e:2b:94:7f:46:
                    fb:27:58:85:1f:ea:8b:87:b2:05:4d:4b:fd:76:25:
                    78:6c:90:d6:f5:8a:7d:96:a8:09:cf:d1:f8:3a:2e:
                    84:3e:ef:14:e9:9f:e6:6b:04:28:3a:3b:08:2f:bc:
                    80:c1:bc:4b:f7:4d:82:31:37:c0:e4:32:de:6f:20:
                    06:d0:0e:d9:8c:a8:d7:57:b0:71:5b:56:7b:2d:1c:
                    c2:ef:f2:56:79:fd:09:77:40:5f:a7:69:56:b8:5d:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FE:90:BD:5A:88:AF:0C:CC:CC:7E:E1:1A:9F:DB:2E:AD:B3:54:32
            X509v3 Authority Key Identifier:
                keyid:D2:75:1A:D2:D4:C9:D5:D7:A8:31:53:0F:F2:0E:B4:6A:9D:2F:36:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2751AD2D4C9D5D7A831530FF20EB46A9D2F360D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzrov4tx5WjiAB6qFykPZTFjoZ9Uzxv6rUiiUhJUWTbE/0/323830343a336338343a3a2f33322d313238203d3e20323636323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c84::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:46:c6:02:9f:b3:f7:f5:d3:51:43:5d:7c:87:da:2d:50:74:
         43:f2:a4:e9:dc:3c:bd:70:19:d3:cd:87:57:67:e4:1a:4c:89:
         c3:01:37:3c:e3:b4:13:c2:66:b1:7d:57:a2:ab:2a:80:db:32:
         74:5a:62:15:5d:96:ce:6f:c7:50:cd:d7:d4:7c:8c:c0:97:e7:
         a7:7e:55:66:0d:ec:06:4f:94:54:6e:c4:67:7f:2a:3a:20:46:
         c8:78:cb:84:57:4b:0e:9b:c6:28:d5:62:56:39:84:5b:6a:9e:
         cd:86:81:45:f8:2e:bc:d7:3e:ce:68:5d:e6:a7:5e:9f:a1:df:
         cd:31:f2:42:b2:16:39:c0:0d:f4:d4:63:9c:ac:8b:22:a3:c5:
         e5:07:a5:b3:91:00:7b:50:dd:67:7d:ba:76:17:12:d9:41:2d:
         03:25:db:b9:d3:22:66:fb:64:6c:7d:d2:7d:0a:9f:c4:5f:88:
         95:3d:fa:e7:3d:3d:a8:6d:df:1d:f9:f6:fb:d1:13:b3:48:38:
         aa:36:84:2c:2a:5a:95:0d:3a:58:f9:f6:e0:5e:6e:d5:6d:a1:
         75:a4:73:bb:37:5c:20:93:de:52:6d:23:29:84:30:ce:2f:3a:
         89:3b:ad:42:fa:dd:7c:ca:a6:1a:2f:5b:6a:98:4b:26:59:77:
         84:4a:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:28:36 2025 by rpki-client