Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/323830343a343461303a3a2f33322d3438203d3e20323637363433.roa
File:                     323830343a343461303a3a2f33322d3438203d3e20323637363433.roa (raw, json)
Hash identifier:          OhP4AfZLm8wKcC8NRb3lR5wasqSW+ZFcBQBWlmtzm+0=
Subject key identifier:   0D:9D:BD:56:75:EF:2F:19:1B:BD:EC:83:EA:59:63:43:D9:D0:D8:92
Certificate issuer:       /CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
Certificate serial:       2ABD819934417A6F620D22E9CE1EF230EA2B829A
Authority key identifier: D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/323830343a343461303a3a2f33322d3438203d3e20323637363433.roa
Signing time:             Wed 04 Jun 2025 18:40:01 +0000
ROA not before:           Wed 04 Jun 2025 18:35:01 +0000
ROA not after:            Wed 03 Jun 2026 18:40:01 +0000
asID:                     267643
IP address blocks:        2804:44a0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl
                          rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 06:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:bd:81:99:34:41:7a:6f:62:0d:22:e9:ce:1e:f2:30:ea:2b:82:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB
        Validity
            Not Before: Jun  4 18:35:01 2025 GMT
            Not After : Jun  3 18:40:01 2026 GMT
        Subject: CN=0D9DBD5675EF2F191BBDEC83EA596343D9D0D892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:03:09:fe:c3:43:31:38:f9:f9:de:40:6c:
                    5e:70:35:60:ab:c8:8a:f3:c6:17:fb:02:33:7e:43:
                    3a:bc:45:f6:55:f3:18:c2:e2:c3:15:21:a8:52:eb:
                    0e:7a:08:fa:86:3a:f0:33:ea:b8:0f:e7:0e:ec:16:
                    31:26:75:32:f3:72:be:08:58:9e:7e:50:74:b4:55:
                    91:95:1b:ca:7d:bc:da:5a:49:c3:1e:0a:66:f8:bc:
                    08:bf:d8:52:11:80:a7:04:92:84:9b:0c:e2:37:e2:
                    f6:66:52:7b:c3:f4:72:c8:e3:3a:ce:2c:46:6d:2a:
                    6b:65:17:3f:82:74:a3:a0:91:be:99:11:8e:03:56:
                    1a:39:53:b4:3d:a7:94:6c:67:ca:1b:f8:3e:a4:dd:
                    b7:c7:02:18:04:2e:e7:5f:5b:ea:69:d2:e8:86:81:
                    af:d0:38:22:69:c5:23:36:bf:e0:a6:e5:9a:db:11:
                    19:73:0a:ce:8f:72:77:e2:a7:6b:09:ca:e1:b4:68:
                    11:c4:b2:89:92:ec:32:44:f8:97:04:90:dd:2f:1b:
                    e6:ca:4a:8e:21:1e:81:dd:45:1a:92:96:bd:46:d3:
                    ae:3c:19:28:fa:53:19:de:a7:21:7e:7d:d6:16:85:
                    de:62:17:c4:04:56:97:96:c9:0f:c9:3d:10:49:fc:
                    3b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9D:BD:56:75:EF:2F:19:1B:BD:EC:83:EA:59:63:43:D9:D0:D8:92
            X509v3 Authority Key Identifier:
                keyid:D9:70:F1:7C:86:D4:D5:A9:C6:39:5E:9E:2D:16:01:BB:D9:FA:8B:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D970F17C86D4D5A9C6395E9E2D1601BBD9FA8BDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C3C4t7mJXW3YFYpZHCNbeF9wR9zunEfzm5t23BALXovb/1/323830343a343461303a3a2f33322d3438203d3e20323637363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:10:65:1c:23:d6:8b:41:d6:61:c3:46:0a:8c:14:6a:09:5d:
         5f:e5:15:83:52:ea:5d:b4:ea:6e:fb:76:2d:48:19:34:65:cb:
         2f:ce:29:2b:4b:35:a0:ff:3e:a9:ab:dc:76:e0:b7:1c:bb:75:
         1a:8f:a9:95:4f:4f:a4:29:09:51:7f:8c:57:b4:dd:62:f7:13:
         c6:be:98:97:db:e8:3d:b8:c9:68:07:20:53:d8:34:8e:fb:c2:
         4c:47:68:59:af:f4:f2:87:b9:26:d5:98:8a:b5:c1:f0:55:fb:
         ba:bc:c2:db:fc:94:7c:8b:30:39:ab:2a:6d:cf:3f:9a:a2:21:
         ef:2d:9e:60:83:8a:f7:b0:08:f9:46:a7:01:be:ef:99:5e:62:
         b7:83:bb:93:8d:3e:1e:30:a0:c4:78:7d:01:8f:d8:ee:80:ed:
         89:59:a9:2f:bf:57:d9:90:31:05:88:fc:4f:59:02:c3:57:13:
         ad:4f:a6:35:8f:c9:ac:9f:1c:a3:cf:4b:9d:4c:85:ca:81:75:
         3f:97:30:54:f0:25:4a:57:64:35:78:70:fa:89:94:2c:67:14:
         2b:a8:28:79:51:14:96:d6:21:6f:70:11:5a:7d:6a:43:e4:bb:
         b9:52:15:2b:1f:c6:f9:dc:35:b3:02:fa:24:99:2b:7c:48:35:
         32:63:e9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:33:12 2025 by rpki-client