Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a663030303a3a2f33362d3336203d3e20323634313337.roa
File:                     323830343a323330343a663030303a3a2f33362d3336203d3e20323634313337.roa (raw, json)
Hash identifier:          0EqB0DvYTzkzNN50i3xYhq8eF04l9EWa8RGZzIz5u2g=
Subject key identifier:   E0:BC:FB:84:0F:67:97:FB:C0:1F:8B:7A:38:C7:50:6E:3A:5C:CE:FB
Certificate issuer:       /CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
Certificate serial:       2D0ABFF8653A095D2F8EB2DFB68C91EA7BC44F7E
Authority key identifier: D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a663030303a3a2f33362d3336203d3e20323634313337.roa
Signing time:             Thu 06 Mar 2025 08:09:47 +0000
ROA not before:           Thu 06 Mar 2025 08:04:47 +0000
ROA not after:            Thu 05 Mar 2026 08:09:47 +0000
asID:                     264137
IP address blocks:        2804:2304:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl
                          rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 22:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:0a:bf:f8:65:3a:09:5d:2f:8e:b2:df:b6:8c:91:ea:7b:c4:4f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7080B960E96CCD866F1D9C57D82B5BA55120E0A
        Validity
            Not Before: Mar  6 08:04:47 2025 GMT
            Not After : Mar  5 08:09:47 2026 GMT
        Subject: CN=E0BCFB840F6797FBC01F8B7A38C7506E3A5CCEFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:74:d9:4e:4d:98:3a:6d:7f:df:34:05:83:00:
                    77:16:94:71:60:4b:1e:59:96:ec:96:76:88:a8:b5:
                    ba:38:59:a5:66:59:12:83:3a:f5:84:9a:5b:10:18:
                    4d:cb:ec:a5:62:35:38:ac:d4:5e:cc:5a:7e:8f:3d:
                    01:98:a0:2a:7f:29:6e:65:48:74:d4:73:e5:24:27:
                    d8:f1:61:02:9d:05:72:d8:44:54:e5:da:fb:a4:6b:
                    d4:5c:dc:65:28:c4:8d:00:a2:2a:eb:9d:00:13:17:
                    5f:9e:5f:87:5e:13:12:8c:29:37:51:c6:31:a6:1f:
                    56:a1:8e:85:83:ed:7c:ee:59:2c:a8:38:38:91:1b:
                    01:42:2a:31:b5:cf:60:e1:4c:e6:59:61:44:6b:3c:
                    0c:d8:90:9e:28:3e:28:7b:65:c5:60:6c:01:bc:f9:
                    5c:36:fb:6d:70:40:15:0a:c9:84:c2:81:8e:0f:a4:
                    ba:3a:57:f5:81:a8:1c:40:a6:4e:ab:b8:62:60:2a:
                    99:fd:16:07:c4:8d:94:c0:87:87:e7:cf:cb:58:0e:
                    6c:a3:1b:ca:44:c9:36:ab:ba:88:f4:03:6d:39:d8:
                    0f:52:c2:07:81:06:c2:90:fb:7c:9d:73:7a:72:a0:
                    98:60:a7:d6:1b:4e:14:0c:10:3e:9d:04:d4:a8:29:
                    87:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BC:FB:84:0F:67:97:FB:C0:1F:8B:7A:38:C7:50:6E:3A:5C:CE:FB
            X509v3 Authority Key Identifier:
                keyid:D7:08:0B:96:0E:96:CC:D8:66:F1:D9:C5:7D:82:B5:BA:55:12:0E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7080B960E96CCD866F1D9C57D82B5BA55120E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/1/323830343a323330343a663030303a3a2f33362d3336203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2304:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         81:08:00:aa:4d:58:3f:8d:2e:38:42:da:ef:8a:01:6e:7f:2b:
         99:6a:f0:d1:bf:d9:c2:3e:52:59:b7:85:bf:cb:d1:ba:05:b0:
         88:3f:ec:65:03:d5:e3:dc:c2:b6:97:46:65:94:b5:e1:7e:0d:
         59:32:c2:cb:71:3d:99:d9:4f:30:05:f4:e3:77:15:db:fb:39:
         76:ce:0c:e8:04:24:79:d6:01:eb:1d:39:27:0c:e2:dd:2c:29:
         a3:58:5d:18:1c:90:33:c7:0e:47:9f:db:57:d1:42:f0:81:35:
         31:87:c8:0d:4b:46:7b:66:ac:3b:3f:12:66:20:f1:83:69:ad:
         55:52:c6:95:a4:65:97:62:d1:53:a4:61:4c:9f:f7:3d:e4:10:
         35:df:85:85:d2:72:9b:aa:eb:bd:1b:0c:12:86:80:ab:d3:0f:
         03:38:fb:33:1b:9a:8f:2b:87:ad:ea:b2:7e:ae:09:ba:7f:e9:
         4f:1a:5a:cf:80:c4:d9:8a:74:41:d5:d4:58:d3:2b:00:a6:38:
         77:d1:b6:63:fb:bd:dc:8e:bd:32:49:de:37:c9:50:a6:82:d4:
         f5:0e:3d:40:9d:c6:40:e3:ef:fc:27:7c:f7:80:eb:45:37:1e:
         70:b9:a6:85:ac:e4:19:b0:ac:f0:ed:72:be:51:5d:54:58:21:
         fd:85:79:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:43 2025 by rpki-client