Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/323830343a316462303a3a2f33322d3438203d3e20323634333836.roa
File:                     323830343a316462303a3a2f33322d3438203d3e20323634333836.roa (raw, json)
Hash identifier:          SuPeGxxO5wAeBb+YxrQkduz7TjexbkD0jj7peGH2l8Y=
Subject key identifier:   76:CD:A6:8C:F1:3D:97:46:5E:DC:76:DF:54:4F:AB:8C:A1:E5:EB:9A
Certificate issuer:       /CN=CC038C42F33B3D558931769A27D97E3412751117
Certificate serial:       2D8862B58C6757A686D48D8C55F1AA92E95A29A7
Authority key identifier: CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/323830343a316462303a3a2f33322d3438203d3e20323634333836.roa
Signing time:             Thu 20 Mar 2025 18:52:25 +0000
ROA not before:           Thu 20 Mar 2025 18:47:25 +0000
ROA not after:            Thu 19 Mar 2026 18:52:25 +0000
asID:                     264386
IP address blocks:        2804:1db0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 04:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:88:62:b5:8c:67:57:a6:86:d4:8d:8c:55:f1:aa:92:e9:5a:29:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC038C42F33B3D558931769A27D97E3412751117
        Validity
            Not Before: Mar 20 18:47:25 2025 GMT
            Not After : Mar 19 18:52:25 2026 GMT
        Subject: CN=76CDA68CF13D97465EDC76DF544FAB8CA1E5EB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:f0:67:38:97:ac:d5:c9:55:48:1e:69:4c:
                    bc:bd:6c:35:86:b2:83:e1:95:c9:32:c6:25:4d:22:
                    55:50:a1:b5:b8:a6:84:dc:c2:4f:1f:fe:17:5d:c5:
                    93:52:21:37:c7:76:64:6d:93:a7:80:32:6f:72:f3:
                    59:9f:b4:44:d6:70:b1:5b:ff:81:75:7c:fa:79:01:
                    be:60:25:da:a7:72:81:56:ee:6f:bd:ae:8c:b8:1d:
                    02:02:66:06:65:a6:c7:d1:a4:25:2c:f3:c5:a7:f5:
                    5b:bb:7c:8c:b6:18:08:e2:2b:0f:b2:c9:ef:fd:51:
                    8a:3d:68:72:98:70:42:72:2f:c3:53:1c:55:16:07:
                    76:83:d6:69:bb:7a:c3:9e:60:91:c4:59:33:d4:bf:
                    b4:45:03:fd:fb:23:e2:53:a8:0b:b2:5d:2e:78:3b:
                    d6:05:23:07:38:2b:f7:59:23:44:12:e9:5b:65:e3:
                    6c:78:b5:c9:30:44:3e:ca:98:84:ce:79:7d:c0:f6:
                    32:14:e8:10:83:f3:48:57:1c:b1:40:62:ee:b3:56:
                    85:44:02:55:b6:a8:3f:f6:bb:da:33:a9:d4:a3:e0:
                    96:60:b0:eb:03:05:54:06:f1:7c:01:7c:01:36:d8:
                    87:54:5b:e0:f1:e9:03:63:71:7d:58:2e:d7:bc:e0:
                    b4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CD:A6:8C:F1:3D:97:46:5E:DC:76:DF:54:4F:AB:8C:A1:E5:EB:9A
            X509v3 Authority Key Identifier:
                keyid:CC:03:8C:42:F3:3B:3D:55:89:31:76:9A:27:D9:7E:34:12:75:11:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/CC038C42F33B3D558931769A27D97E3412751117.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC038C42F33B3D558931769A27D97E3412751117.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/1/323830343a316462303a3a2f33322d3438203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1db0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:75:b4:34:39:a8:b8:75:04:46:3e:b1:e2:ef:e2:9a:24:
         43:77:4d:c2:50:e1:df:bc:00:1a:79:77:51:49:74:97:7a:f9:
         a2:fa:cd:7c:68:7e:15:c5:38:61:a6:15:38:c2:b6:1b:8c:19:
         2a:d2:65:73:ec:cf:62:a8:47:b9:bf:39:9e:0a:2c:70:22:41:
         52:65:10:e6:f2:07:b3:46:24:70:43:e0:99:0f:82:b5:71:aa:
         85:04:73:36:ee:c8:50:e6:d3:51:39:b6:2e:84:fb:9e:b6:f4:
         19:86:d8:e1:c3:ce:e3:08:32:3d:38:81:db:15:f8:d7:01:32:
         6a:40:40:11:21:35:b6:ff:80:9a:2d:91:84:df:ac:76:bb:1a:
         d6:91:22:47:60:32:00:8f:e0:2a:06:0f:98:c6:d7:e5:8d:2d:
         97:e7:58:38:27:e1:61:d9:e2:d2:53:09:4e:5f:8c:7e:54:02:
         7d:24:87:bd:76:bb:92:c7:e1:a4:a7:48:bc:c8:78:d0:b9:2a:
         af:47:ba:f9:e5:84:1d:38:11:d4:26:c9:8e:b5:cd:4a:18:df:
         74:9a:ce:de:8a:d0:cd:6a:d7:1d:bc:78:94:e3:d5:44:ca:a0:
         6b:f4:50:ce:54:e4:90:a8:38:d9:fa:ba:66:45:93:aa:43:6f:
         2a:c1:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:28:12 2025 by rpki-client