Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa
File:                     323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa (raw, json)
Hash identifier:          db2xeH+RbtWjZb7kThhkXW2ZrrOYk6aGX3M0n0WjF5k=
Subject key identifier:   F9:49:BE:6F:CF:A7:BA:BC:D2:9F:D2:76:CA:FA:4B:A7:21:04:4B:27
Certificate issuer:       /CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
Certificate serial:       6384FB1E07D9817EFB5190E29D55A9BC3B3F0AB0
Authority key identifier: B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     264311
IP address blocks:        2804:25f0:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl
                          rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 19:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:84:fb:1e:07:d9:81:7e:fb:51:90:e2:9d:55:a9:bc:3b:3f:0a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=3082010A0282010100BFD76928812FC63E7143B3CF34DFDC3BA76B7CB1CDC6C7D2099E6C6AEA49A9190B3BFE4573C267E012ED7D64D335E3D3A22916632F4F109C0AE3E9DE9A6FCB9881F1300F658EC06F66E64C003C27389AD063044FA8544ED1BF4E4410FACA008AAC67285FD098D066832B319C97E094BD616CB680B728421049D3C1AC03B628749EE8C3893BA96D07DA8188BF0AA81C6BB27B971500932DEB889A9BFF092C5BE508D6812515FA0F26084DA95AAA3042D999D6AEC9186E972646894C9EFE96F41469C352C95DE90EE8E37A5451C9B75CD0884890B6BA9FB1EA8E1486C6809B3EB90A8C898A1741738EEAD887D203B9D2B4DF4D1DE51D8CAC8F08DD34882F80D33D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:69:28:81:2f:c6:3e:71:43:b3:cf:34:df:
                    dc:3b:a7:6b:7c:b1:cd:c6:c7:d2:09:9e:6c:6a:ea:
                    49:a9:19:0b:3b:fe:45:73:c2:67:e0:12:ed:7d:64:
                    d3:35:e3:d3:a2:29:16:63:2f:4f:10:9c:0a:e3:e9:
                    de:9a:6f:cb:98:81:f1:30:0f:65:8e:c0:6f:66:e6:
                    4c:00:3c:27:38:9a:d0:63:04:4f:a8:54:4e:d1:bf:
                    4e:44:10:fa:ca:00:8a:ac:67:28:5f:d0:98:d0:66:
                    83:2b:31:9c:97:e0:94:bd:61:6c:b6:80:b7:28:42:
                    10:49:d3:c1:ac:03:b6:28:74:9e:e8:c3:89:3b:a9:
                    6d:07:da:81:88:bf:0a:a8:1c:6b:b2:7b:97:15:00:
                    93:2d:eb:88:9a:9b:ff:09:2c:5b:e5:08:d6:81:25:
                    15:fa:0f:26:08:4d:a9:5a:aa:30:42:d9:99:d6:ae:
                    c9:18:6e:97:26:46:89:4c:9e:fe:96:f4:14:69:c3:
                    52:c9:5d:e9:0e:e8:e3:7a:54:51:c9:b7:5c:d0:88:
                    48:90:b6:ba:9f:b1:ea:8e:14:86:c6:80:9b:3e:b9:
                    0a:8c:89:8a:17:41:73:8e:ea:d8:87:d2:03:b9:d2:
                    b4:df:4d:1d:e5:1d:8c:ac:8f:08:dd:34:88:2f:80:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:49:BE:6F:CF:A7:BA:BC:D2:9F:D2:76:CA:FA:4B:A7:21:04:4B:27
            X509v3 Authority Key Identifier:
                keyid:B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/323830343a323566303a633030303a3a2f33342d3334203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:b9:27:51:cc:5c:ab:0d:86:1c:05:cd:57:33:a0:f9:96:1d:
         fe:e8:9d:06:20:82:4f:f8:9d:54:40:2c:e6:a0:b4:d0:98:44:
         10:10:d1:4b:ad:2b:71:56:6e:a4:1e:f1:cd:19:25:14:74:57:
         3f:b9:06:37:23:40:52:63:04:b7:39:6e:b4:b4:b2:86:30:5a:
         61:3f:e7:a9:23:6a:7d:9b:15:c1:c9:9f:87:91:24:ef:92:f6:
         4b:99:33:47:2e:81:34:da:a6:52:fa:fb:e3:0e:79:91:f1:42:
         51:53:29:2e:67:b0:1d:c8:28:9a:ef:77:22:f9:e1:dd:2c:59:
         d3:38:04:23:a9:8a:7d:45:d0:f9:ce:e2:99:14:32:76:d3:6d:
         f0:0d:b4:16:d1:e6:0d:94:0e:bd:6b:b5:21:5c:84:d4:a3:1e:
         ec:b2:f9:2c:af:25:dc:4e:c1:09:9e:a0:7f:c8:f1:5f:29:4a:
         9b:cc:ef:57:72:e7:b0:de:8a:51:48:86:32:2c:a3:16:cd:6c:
         ab:54:08:17:fe:4e:3b:da:f0:8d:a4:a0:00:82:51:cd:cf:d3:
         2d:fd:5c:3a:7b:d0:e0:6b:32:a5:ed:cf:7e:3c:d1:ce:d0:96:
         ef:38:77:02:6d:df:95:6c:13:85:93:ce:77:20:63:d0:f1:f4:
         c5:ec:91:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:35:23 2025 by rpki-client