Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          1GmChiGhOojx4MboIuVnYx+bjseiUPrAqS4uBcN5jDw=
Subject key identifier:   B3:58:A6:BF:70:FD:21:56:25:ED:43:A2:03:CB:CD:C7:79:0C:FA:63
Certificate issuer:       /CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Certificate serial:       4D02B4241FB8D06D0D228A833C777C4C1BEAEFB9
Authority key identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Fri 28 Feb 2025 14:55:06 +0000
ROA not before:           Fri 28 Feb 2025 14:50:06 +0000
ROA not after:            Fri 27 Feb 2026 14:55:06 +0000
asID:                     265919
IP address blocks:        2804:3fd8:9000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 23:25:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:02:b4:24:1f:b8:d0:6d:0d:22:8a:83:3c:77:7c:4c:1b:ea:ef:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
        Validity
            Not Before: Feb 28 14:50:06 2025 GMT
            Not After : Feb 27 14:55:06 2026 GMT
        Subject: CN=B358A6BF70FD215625ED43A203CBCDC7790CFA63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3b:6a:47:f6:9c:b9:5a:a2:30:87:a5:34:a5:
                    05:34:94:84:fc:0b:c4:8f:96:ad:95:64:ac:d5:f2:
                    ec:95:6f:57:6c:07:83:ac:77:4b:17:60:44:f4:f1:
                    0b:ff:36:a5:3f:ba:5b:26:b2:73:38:d1:76:86:8c:
                    d4:63:96:18:0d:9d:00:a9:34:a8:bb:9d:47:29:2e:
                    82:7d:1f:5b:f9:64:40:11:2d:6b:c8:89:2f:fe:a2:
                    cd:4d:39:76:cf:12:65:0a:4d:de:2c:2b:3c:41:43:
                    89:ba:8b:b1:39:8c:1c:74:78:11:8a:ea:06:c1:50:
                    28:ed:09:70:14:09:49:0c:92:40:a3:a8:87:fb:81:
                    db:e1:1d:c8:51:4f:0f:c0:90:81:ab:0f:c8:25:ef:
                    43:93:3e:17:74:e2:58:a2:14:be:a5:53:66:24:53:
                    f8:d9:6a:25:cb:36:cc:67:1a:f3:4f:c7:71:f2:eb:
                    00:dd:8b:f6:20:94:d3:84:e0:3c:9d:f7:9a:ef:e2:
                    67:bc:bf:b1:c1:c9:cb:f8:78:71:8b:2c:93:fe:08:
                    45:9f:25:63:5f:12:ec:1a:f6:b9:f8:6f:37:19:79:
                    56:ff:88:93:9f:98:88:22:9a:61:44:1a:8f:20:17:
                    ca:2e:94:27:5b:5e:bd:cf:db:8a:ee:e4:86:6d:f1:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:58:A6:BF:70:FD:21:56:25:ED:43:A2:03:CB:CD:C7:79:0C:FA:63
            X509v3 Authority Key Identifier:
                keyid:1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:fc:ef:51:b2:3e:91:d2:6e:46:05:dc:89:c8:77:fb:60:94:
         a6:1d:83:24:db:e8:19:52:c1:5c:f9:81:04:20:98:a6:83:b2:
         bc:75:81:e1:46:77:61:37:8c:e9:9f:a1:39:c1:6d:84:e5:54:
         97:b9:c1:f6:99:e9:23:5f:d4:9c:38:12:29:59:c1:78:ec:cd:
         47:2d:4e:21:db:e6:b0:8c:46:d1:51:d1:04:52:22:40:aa:89:
         28:ec:b1:e7:f9:01:7f:a1:63:7e:65:9b:b5:55:5c:4a:5b:f8:
         13:d0:e6:5a:e6:f9:94:0e:f5:d0:2a:5a:1a:ec:43:37:d6:46:
         08:58:b8:8a:5b:09:22:f6:be:0c:81:23:bb:b0:40:a3:17:aa:
         65:35:2d:11:ba:ec:ca:d0:66:64:92:5e:a7:ab:68:d1:0c:f4:
         5e:a8:e2:0e:3e:3a:4f:25:81:dc:ed:52:99:8e:0f:61:0b:f9:
         c8:d2:c4:0b:97:8d:0a:29:6a:75:3d:92:66:e3:b5:27:c9:ec:
         63:29:b3:c9:a8:f6:0f:38:ac:5f:bd:5a:03:18:09:5e:b0:f5:
         63:bd:15:a7:b7:4f:e0:39:12:9d:08:70:55:d2:ed:7f:c0:dc:
         ec:c3:1f:2f:98:92:05:30:b7:80:7c:aa:1a:79:9f:48:27:f9:
         83:3b:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:20 2025 by rpki-client