Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a3a2f36342d3634203d3e203532363133.roa
File:                     323830343a6433633a3a2f36342d3634203d3e203532363133.roa (raw, json)
Hash identifier:          0404Oeb289zadGtK/R7jpgt2VkMBD+/fDGNDf1LdAbs=
Subject key identifier:   28:04:5B:3C:02:29:5F:29:42:4C:9A:1B:D3:91:3C:F2:6A:82:B4:7C
Certificate issuer:       /CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
Certificate serial:       3ED4CBEE000494A573A9702800F2646F8A7960AD
Authority key identifier: 90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a3a2f36342d3634203d3e203532363133.roa
Signing time:             Thu 06 Mar 2025 09:42:19 +0000
ROA not before:           Thu 06 Mar 2025 09:37:19 +0000
ROA not after:            Thu 05 Mar 2026 09:42:19 +0000
asID:                     52613
IP address blocks:        2804:d3c::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl
                          rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d4:cb:ee:00:04:94:a5:73:a9:70:28:00:f2:64:6f:8a:79:60:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90DC5A35B94707D4EB7106F6BA9E9CF876BAE456
        Validity
            Not Before: Mar  6 09:37:19 2025 GMT
            Not After : Mar  5 09:42:19 2026 GMT
        Subject: CN=28045B3C02295F29424C9A1BD3913CF26A82B47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:b2:79:9a:d4:17:f7:c9:3f:9a:65:d1:94:
                    26:d2:da:ad:89:dc:ca:8a:52:c3:f4:30:ee:8e:d6:
                    81:ab:56:ca:08:4e:01:c9:35:6d:1c:a9:1c:68:94:
                    d3:51:36:c6:13:87:86:bf:d8:f7:e3:6f:a0:9b:0c:
                    69:47:f2:bb:81:fa:d6:61:7d:f1:e8:90:ac:94:03:
                    aa:39:e9:24:ec:f6:fc:68:3d:0c:f6:62:5f:93:dc:
                    4f:c8:5b:1c:92:78:c0:b3:ea:d9:53:b1:b7:fa:43:
                    23:cd:dc:0b:44:3c:67:80:f5:81:fc:8d:1b:d0:b9:
                    46:6b:fe:a4:d3:ed:e4:f3:bb:ad:86:4c:17:92:6b:
                    31:7d:29:b4:d9:1d:46:39:b9:a9:eb:0f:93:54:d1:
                    7a:73:d9:33:4a:cf:a7:61:95:78:b3:2d:bc:9a:01:
                    51:01:01:4c:f1:7b:fb:cd:71:4c:b8:60:fc:37:9a:
                    3b:29:7c:d8:da:c4:86:4b:38:7c:0f:ec:d2:01:52:
                    3f:64:f0:9e:8c:2c:40:db:a7:99:11:bc:30:1b:f6:
                    2c:c8:9b:78:74:36:b2:36:1e:5f:26:52:bc:82:c7:
                    39:df:71:ce:71:45:de:78:ae:7c:c8:67:dc:c3:ea:
                    72:fb:24:89:d6:78:3c:6c:2e:42:1b:30:23:95:e7:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:04:5B:3C:02:29:5F:29:42:4C:9A:1B:D3:91:3C:F2:6A:82:B4:7C
            X509v3 Authority Key Identifier:
                keyid:90:DC:5A:35:B9:47:07:D4:EB:71:06:F6:BA:9E:9C:F8:76:BA:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90DC5A35B94707D4EB7106F6BA9E9CF876BAE456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/1/323830343a6433633a3a2f36342d3634203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c::/64

    Signature Algorithm: sha256WithRSAEncryption
         1a:e1:d3:4a:35:d4:06:25:4d:b7:b9:d0:cf:0c:dc:04:95:a3:
         71:47:23:ce:e5:dc:9c:db:e8:dd:6b:96:9d:4c:87:72:4a:6e:
         02:ff:10:15:a0:8e:64:be:a9:f9:de:79:99:22:09:60:66:30:
         a8:61:84:2b:ad:e0:9c:d1:a8:70:13:8d:41:ed:80:c7:7e:d2:
         39:46:67:d2:89:d4:9c:6b:24:4c:fc:6c:c8:9b:c9:7c:c1:49:
         fa:63:06:a7:e4:e6:ed:13:48:80:6d:e6:62:61:64:b8:c1:65:
         12:cc:e1:cd:e7:4a:47:d5:cf:e6:b9:32:5e:15:a1:36:82:cd:
         45:85:b6:37:b6:22:4a:90:bf:9a:32:c9:21:f2:20:6b:a4:a6:
         ed:eb:c2:54:bd:8c:cd:0f:6d:7e:33:17:6d:d5:f8:b5:b1:d4:
         de:06:9f:ed:29:98:1c:c2:19:49:52:44:b0:b7:6f:a2:d6:8b:
         05:74:2f:2c:09:7c:56:73:de:bb:a9:09:31:86:3c:90:77:27:
         f1:f5:8f:9a:5c:7e:d7:ae:c4:d4:06:ca:2b:19:34:f7:41:1a:
         dd:7f:89:40:9c:78:52:0a:89:53:2d:00:8b:fe:9a:5f:e6:24:
         f9:86:40:fd:90:94:cc:31:8d:54:3b:52:e1:52:f1:46:95:b4:
         94:24:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:24 2025 by rpki-client