Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/323830343a373339303a3a2f33322d3438203d3e20323730393233.roa
File:                     323830343a373339303a3a2f33322d3438203d3e20323730393233.roa (raw, json)
Hash identifier:          Iq5WCwuvz0rLCwvWBiWtBI9QmiixD6hDdHX1VCgdhF0=
Subject key identifier:   43:17:21:13:CB:7C:E5:6A:53:BE:DA:F4:C6:B7:C8:A9:25:3E:E7:48
Certificate issuer:       /CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075
Certificate serial:       6C956ECEF533FBDC2C7FC8261645D4B66A1AD2DA
Authority key identifier: 3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/323830343a373339303a3a2f33322d3438203d3e20323730393233.roa
Signing time:             Thu 06 Mar 2025 04:01:04 +0000
ROA not before:           Thu 06 Mar 2025 03:56:04 +0000
ROA not after:            Thu 05 Mar 2026 04:01:04 +0000
asID:                     270923
IP address blocks:        2804:7390::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl
                          rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 20:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:95:6e:ce:f5:33:fb:dc:2c:7f:c8:26:16:45:d4:b6:6a:1a:d2:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CC3B561B55927E9A677FB6AF85569BCDF4FF075
        Validity
            Not Before: Mar  6 03:56:04 2025 GMT
            Not After : Mar  5 04:01:04 2026 GMT
        Subject: CN=43172113CB7CE56A53BEDAF4C6B7C8A9253EE748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9b:b4:bc:6b:f4:0d:64:ef:a8:16:e2:b4:b0:
                    31:b2:e4:c0:28:8a:07:2e:95:e7:6a:56:cf:d7:55:
                    39:d7:8c:58:fe:f7:0d:c4:4b:dc:87:b2:ae:74:1f:
                    41:d1:2c:e2:55:d4:07:cf:7c:d4:35:2d:d3:31:b6:
                    07:50:21:3e:ca:61:5d:27:7a:f7:f9:11:e4:9c:38:
                    ce:07:f3:4f:33:69:96:00:50:3f:c7:35:dc:cc:c4:
                    5f:cf:73:49:cb:34:09:62:e7:17:09:74:59:ec:fa:
                    5a:b1:cd:68:d5:2b:2d:94:91:e5:7e:44:52:25:73:
                    de:16:15:5f:f4:a2:88:a3:b0:c8:bd:ac:e5:c8:37:
                    1f:c3:09:cf:23:c8:62:49:b3:ec:26:02:ad:d7:b0:
                    ed:84:3b:16:67:46:b5:a8:aa:3d:a5:06:c8:b0:97:
                    c0:f0:27:58:17:c7:fd:63:f2:24:79:93:99:a0:26:
                    05:c7:6a:3a:6f:8a:99:f7:d1:e6:72:03:69:81:4b:
                    2c:81:f4:1c:6a:49:46:b7:d3:ff:f6:80:70:c3:62:
                    13:8c:29:1f:89:21:3f:22:ea:2d:de:1f:ec:4a:6c:
                    7e:11:60:d4:f0:8c:4f:3f:74:7f:1d:e1:65:70:b2:
                    68:b6:77:9a:6a:fd:54:0c:a3:ed:73:83:8b:99:d9:
                    c3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:17:21:13:CB:7C:E5:6A:53:BE:DA:F4:C6:B7:C8:A9:25:3E:E7:48
            X509v3 Authority Key Identifier:
                keyid:3C:C3:B5:61:B5:59:27:E9:A6:77:FB:6A:F8:55:69:BC:DF:4F:F0:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CC3B561B55927E9A677FB6AF85569BCDF4FF075.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DE4Du37MvUkMvD3WdQyxt6hDdTgjkvtqZ2H2eDjnKTWv/1/323830343a373339303a3a2f33322d3438203d3e20323730393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7390::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:49:10:f7:7a:53:5e:9a:15:da:26:51:81:7a:51:db:0b:d1:
         5b:99:53:56:b7:0f:32:89:36:29:09:ce:f1:a4:74:27:2e:e3:
         b4:de:cb:4a:83:14:48:16:33:a0:a1:de:0e:38:0c:eb:72:96:
         a2:ca:ec:eb:ab:44:4d:a0:35:05:50:59:02:0a:47:c1:87:cd:
         70:7c:06:08:91:c3:ef:fb:aa:3f:0d:56:65:ac:08:db:7e:3b:
         f7:1c:5e:63:89:50:09:c1:32:2a:17:77:0e:66:b6:50:ea:47:
         31:a5:75:fd:bd:fd:b0:62:d0:71:96:20:a5:21:19:f4:73:e9:
         5f:a2:79:86:fc:10:3d:71:97:91:a1:ec:3e:dd:ac:ef:65:9f:
         bf:81:0f:c9:16:ae:b1:a2:53:d6:75:fb:e3:9b:ba:20:ca:5b:
         4b:bc:37:57:0e:94:2e:8c:ec:2c:a4:e1:aa:2e:45:9c:1c:6d:
         0a:b6:86:a0:f4:e3:2f:10:3e:38:22:e2:ce:af:91:65:94:bc:
         fe:a5:a9:17:3b:56:be:48:58:97:fb:12:55:bf:82:43:ad:e7:
         86:f9:c8:7c:09:26:6d:89:54:18:a6:25:45:a2:da:0a:8c:01:
         12:ad:47:01:a6:e8:7a:f7:46:0d:a6:6e:25:4c:2c:c9:8b:60:
         7b:3b:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:52 2025 by rpki-client