Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/323830343a363463633a3a2f33322d3334203d3e20323639343439.roa
File:                     323830343a363463633a3a2f33322d3334203d3e20323639343439.roa (raw, json)
Hash identifier:          VolkYIxigPkHcIyRDfvdsqzZA67iFDYYROXsfPFbvyw=
Subject key identifier:   75:40:B4:EA:8E:DE:F0:7A:64:A2:E6:B1:90:EC:08:0D:C0:5F:FA:09
Certificate issuer:       /CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
Certificate serial:       55E1AA43287B5A2DB26FD479C7BD676D1189C5A8
Authority key identifier: 41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/323830343a363463633a3a2f33322d3334203d3e20323639343439.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     269449
IP address blocks:        2804:64cc::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl
                          rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 19:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e1:aa:43:28:7b:5a:2d:b2:6f:d4:79:c7:bd:67:6d:11:89:c5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=413DEE2A242256C5C1A9566FD18C03ECF2F0F586
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:a4:a2:3a:18:b9:f8:c2:0c:d3:65:34:20:
                    b2:cd:c4:51:a3:4a:c2:cd:14:08:14:39:63:4e:16:
                    fb:e9:6e:11:c2:16:a5:c5:68:19:d6:ae:dd:af:9f:
                    64:f0:9a:49:1e:03:67:4f:49:6d:85:89:89:0a:fd:
                    50:3a:4e:ab:06:a0:a0:a2:5f:11:07:17:75:5e:8d:
                    c6:d5:57:88:39:3e:bc:d1:2f:b8:8b:e6:a9:7f:0f:
                    a6:a8:34:d5:56:af:da:12:a5:f7:62:c5:65:25:fb:
                    11:91:1b:0a:cf:89:fd:bd:c3:d4:cb:1f:1a:ab:68:
                    0e:0c:5b:5f:24:b2:58:aa:6b:bb:8e:40:d4:8b:68:
                    d2:12:e3:06:c1:1a:a6:f2:92:12:57:f2:ac:c4:55:
                    07:39:90:26:e3:aa:53:de:f0:0e:fd:52:36:bd:e3:
                    e4:9a:80:33:c6:a4:18:70:07:f2:41:75:78:51:2c:
                    32:4a:1d:ab:45:98:45:88:47:27:64:12:ba:19:c4:
                    76:01:e8:e9:78:3c:67:87:50:99:bc:92:a8:6e:76:
                    03:6a:4a:cf:17:ee:e1:b5:77:cd:14:0a:e2:c4:c9:
                    90:9e:17:0e:ca:3f:ba:92:ab:cf:ad:c5:67:dd:ce:
                    01:64:96:5c:97:6a:97:59:4a:89:df:99:c3:15:73:
                    7b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:40:B4:EA:8E:DE:F0:7A:64:A2:E6:B1:90:EC:08:0D:C0:5F:FA:09
            X509v3 Authority Key Identifier:
                keyid:41:3D:EE:2A:24:22:56:C5:C1:A9:56:6F:D1:8C:03:EC:F2:F0:F5:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413DEE2A242256C5C1A9566FD18C03ECF2F0F586.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9b3Wn88JXtWQPmLKjqPtRuCNHgfRqNrmdxkXRU31UCQ/1/323830343a363463633a3a2f33322d3334203d3e20323639343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:ea:c6:a4:6d:b3:d1:f0:80:5a:f0:2a:d7:da:7c:9d:62:22:
         e0:45:3d:70:b1:62:b9:1c:d3:8a:8f:3b:4c:b5:2d:6b:cb:d2:
         32:3d:2b:0c:6e:df:63:71:72:e1:ee:7a:e7:32:2d:77:7e:2b:
         00:92:d1:5f:46:62:88:a0:0c:2a:ec:b2:2d:2f:58:22:26:df:
         41:0b:35:55:6c:8e:9b:1c:2e:bb:0f:38:56:8d:a9:74:9b:98:
         f1:f3:4f:c5:16:20:d2:71:7a:fb:1c:2b:e2:cc:48:39:a4:83:
         e3:2b:4d:6b:84:d7:f9:f8:f5:2b:50:c9:d3:59:a6:6e:58:2f:
         69:6e:70:3c:79:e5:70:28:8b:5e:41:a8:55:23:f9:92:c8:90:
         4c:8c:07:c5:6b:5b:dd:cb:d0:52:7d:a0:8e:98:5c:ca:81:79:
         b4:42:9c:6f:1e:b7:ec:01:47:03:c0:77:29:c8:3d:a1:37:f1:
         ab:30:18:3d:71:55:8f:1b:af:bc:49:0f:a0:11:f3:ad:8b:c8:
         f8:3f:1f:fe:59:2a:d9:90:5c:fc:e6:7e:b2:49:b4:85:80:03:
         d4:09:47:89:32:d3:80:57:ee:28:f3:e3:9c:81:c8:53:77:ef:
         5b:16:3c:f9:22:4a:a3:fe:1a:de:26:75:b3:e4:3f:9a:2d:0c:
         1a:15:ac:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:35 2025 by rpki-client