Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a3a2f33322d3334203d3e20323731323934.roa
File:                     323830343a373934303a3a2f33322d3334203d3e20323731323934.roa (raw, json)
Hash identifier:          UapGBFgc1RfLJ6YMH4C2j/7FP/LoA45toMbmacFJ1Dw=
Subject key identifier:   9E:64:B8:E6:BE:8F:81:1E:CE:3C:E5:77:4C:96:F2:BA:D8:89:06:8E
Certificate issuer:       /CN=80E4C338A5B0625FDDA93821ECF143CB7B79D362
Certificate serial:       2875CAD0E75BF935D56AC0AB7D45BF1466140E34
Authority key identifier: 80:E4:C3:38:A5:B0:62:5F:DD:A9:38:21:EC:F1:43:CB:7B:79:D3:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80E4C338A5B0625FDDA93821ECF143CB7B79D362.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a3a2f33322d3334203d3e20323731323934.roa
Signing time:             Tue 25 Mar 2025 19:40:20 +0000
ROA not before:           Tue 25 Mar 2025 19:35:20 +0000
ROA not after:            Tue 24 Mar 2026 19:40:20 +0000
asID:                     271294
IP address blocks:        2804:7940::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/80E4C338A5B0625FDDA93821ECF143CB7B79D362.crl
                          rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/80E4C338A5B0625FDDA93821ECF143CB7B79D362.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80E4C338A5B0625FDDA93821ECF143CB7B79D362.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 20:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:75:ca:d0:e7:5b:f9:35:d5:6a:c0:ab:7d:45:bf:14:66:14:0e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80E4C338A5B0625FDDA93821ECF143CB7B79D362
        Validity
            Not Before: Mar 25 19:35:20 2025 GMT
            Not After : Mar 24 19:40:20 2026 GMT
        Subject: CN=9E64B8E6BE8F811ECE3CE5774C96F2BAD889068E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:b4:ff:56:69:f0:33:04:fa:f8:07:37:d4:
                    cb:8e:e8:8d:79:1f:48:82:03:2a:d2:0a:e4:ad:99:
                    1d:35:6d:ad:38:bd:a3:31:8d:9c:7e:93:08:8e:1e:
                    52:dc:67:e1:8f:2f:d4:19:55:5c:c0:08:e0:ec:9c:
                    6c:72:44:92:cf:71:60:1c:ea:14:96:25:68:00:1c:
                    d9:e1:3f:22:7c:73:6b:da:c9:b4:38:0f:03:da:e2:
                    30:d2:d8:a6:f1:0f:35:40:56:20:f1:dc:5f:5d:cb:
                    a7:bf:bd:32:3a:22:a9:89:95:b5:9a:87:a0:54:8c:
                    4c:20:e7:c7:fc:cc:f6:73:e4:e8:46:ba:2b:5c:fe:
                    cc:74:82:fd:cc:a2:44:78:93:92:68:91:5b:d2:61:
                    55:be:62:62:3f:1f:ef:ca:fd:f7:fd:65:db:c0:b8:
                    14:6b:69:cc:ae:01:56:b2:2a:44:cc:c9:14:51:bd:
                    ac:46:ed:38:4e:1b:56:bf:eb:0c:a3:a3:47:d5:b5:
                    90:d0:38:dd:65:b6:99:dd:2e:b7:b2:47:a5:c1:e1:
                    35:18:85:7f:18:b6:9b:58:8e:66:40:dd:13:de:48:
                    38:03:ba:44:21:2c:3a:7d:5a:37:ce:01:64:33:7b:
                    5a:ae:e7:b1:a6:5c:01:f8:f2:e8:b9:e5:c4:23:d6:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:64:B8:E6:BE:8F:81:1E:CE:3C:E5:77:4C:96:F2:BA:D8:89:06:8E
            X509v3 Authority Key Identifier:
                keyid:80:E4:C3:38:A5:B0:62:5F:DD:A9:38:21:EC:F1:43:CB:7B:79:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/80E4C338A5B0625FDDA93821ECF143CB7B79D362.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80E4C338A5B0625FDDA93821ECF143CB7B79D362.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CbFSteF4FFfdTubSvN5fE7tM1JeVNj831oA2tA3bkwNj/0/323830343a373934303a3a2f33322d3334203d3e20323731323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7940::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:d3:f3:15:b2:0f:4f:e9:c1:3e:c1:03:f9:51:74:e7:e0:f8:
         6c:b0:3f:57:25:79:11:f3:64:20:2e:d1:ca:08:6d:cf:ec:b9:
         7a:52:17:16:da:fa:b4:dd:b7:00:96:24:ab:b0:ed:22:f9:71:
         f2:70:33:c1:e0:98:a0:93:24:e3:81:d7:88:ed:81:63:b1:96:
         50:8e:c7:28:1d:21:e6:d4:0a:82:0d:ab:39:9b:67:c8:26:c9:
         47:60:74:66:f9:62:60:b4:cb:70:45:6b:be:41:e9:8c:60:46:
         45:d9:2c:a2:53:5a:a8:30:a4:d2:29:65:25:0e:72:29:81:ae:
         6c:68:4e:2b:d8:0a:4d:ad:50:9c:2a:83:2e:bd:dc:c8:9d:0d:
         a8:ae:69:34:da:d6:e0:43:45:cf:f7:2f:38:52:68:df:9a:d0:
         1a:ac:b8:ba:a5:61:ff:59:1f:b7:3d:14:5b:8c:72:2e:2e:c4:
         e4:b0:d7:e0:ba:16:de:27:24:fc:13:76:fb:44:2d:e0:d9:9d:
         5f:6d:02:df:2c:f6:60:96:c5:da:86:31:41:05:2e:26:e8:84:
         b8:69:c6:46:b5:65:5b:eb:38:18:69:74:83:53:91:37:2b:f4:
         41:11:aa:cc:7b:5e:de:90:8b:d1:15:42:7a:0a:55:dc:8c:45:
         b2:8f:04:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:53:59 2025 by rpki-client