Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/323830343a3434383a3a2f33322d3438203d3e20323632343237.roa
File:                     323830343a3434383a3a2f33322d3438203d3e20323632343237.roa (raw, json)
Hash identifier:          oY3wmOqpzLkG3r9DljD4e0hIEN7701lByHA3sXDkwxg=
Subject key identifier:   2B:1A:3E:51:92:83:14:2D:54:34:7A:23:16:69:54:DB:EA:0A:C9:39
Certificate issuer:       /CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
Certificate serial:       5C6C6C09D09F30734AFF7D078F812DEA70D90A24
Authority key identifier: A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/323830343a3434383a3a2f33322d3438203d3e20323632343237.roa
Signing time:             Thu 06 Mar 2025 05:19:30 +0000
ROA not before:           Thu 06 Mar 2025 05:14:30 +0000
ROA not after:            Thu 05 Mar 2026 05:19:30 +0000
asID:                     262427
IP address blocks:        2804:448::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl
                          rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6c:6c:09:d0:9f:30:73:4a:ff:7d:07:8f:81:2d:ea:70:d9:0a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
        Validity
            Not Before: Mar  6 05:14:30 2025 GMT
            Not After : Mar  5 05:19:30 2026 GMT
        Subject: CN=2B1A3E519283142D54347A23166954DBEA0AC939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:c9:ec:17:e7:53:37:9d:36:39:05:37:f5:
                    1f:ec:fa:43:62:dc:e4:4a:61:70:88:b9:16:48:28:
                    79:fc:4b:1e:e4:0f:38:e9:9f:4d:55:50:c8:27:9c:
                    0b:25:41:73:7d:c4:44:fe:95:50:a9:01:41:bc:48:
                    dd:a5:0c:aa:0c:4c:4a:72:6d:d3:c5:0a:29:d9:5a:
                    7a:61:12:73:87:4d:07:c6:4f:b9:81:24:80:ce:fc:
                    d1:cd:73:75:d2:96:4e:b1:27:ef:35:97:7b:bf:30:
                    18:0f:8b:a0:9c:23:c5:11:13:4b:15:ce:9d:ee:6b:
                    56:82:e0:8a:12:6b:65:d4:1e:74:ad:77:4f:61:2f:
                    8e:1a:f4:c3:a8:80:3a:7c:22:f7:64:f8:95:9e:11:
                    d6:ac:5a:32:f2:57:bc:6f:8a:ac:82:f8:e6:03:a3:
                    96:70:d2:17:b4:88:fc:0b:62:be:2a:bd:85:9b:06:
                    fb:f6:09:fe:dd:71:3b:e7:55:5a:8b:2b:70:69:fb:
                    b5:9c:11:e5:59:88:04:77:85:72:b5:98:b9:15:c5:
                    5b:f5:b5:bf:e7:39:93:69:b6:44:d2:c8:cb:b7:ef:
                    f6:c6:ed:6e:f6:89:b9:d1:53:bb:c9:a2:f5:94:71:
                    eb:3b:59:a1:8a:d5:15:df:11:dc:05:e2:c7:49:d2:
                    2f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1A:3E:51:92:83:14:2D:54:34:7A:23:16:69:54:DB:EA:0A:C9:39
            X509v3 Authority Key Identifier:
                keyid:A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/323830343a3434383a3a2f33322d3438203d3e20323632343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:448::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:1f:3f:eb:76:c3:10:27:a8:a0:d0:cf:ab:9f:4c:e1:ca:87:
         fe:40:1c:b0:c4:cd:3d:a9:f4:05:89:df:16:b9:de:55:66:90:
         40:fe:80:9a:35:9f:7a:c1:80:88:d5:ae:e9:47:1b:28:af:af:
         13:c4:18:52:6f:5c:22:b0:13:98:5e:f7:f2:54:c1:54:7a:ab:
         cb:82:6e:a6:95:10:67:33:12:fd:20:cc:63:c7:49:b1:13:70:
         be:62:1f:af:7e:6d:3a:31:0d:d7:d8:a0:b6:de:52:f4:c6:a3:
         35:95:4f:94:81:9f:6c:87:34:6f:4f:da:88:09:1d:d1:60:48:
         d6:15:4a:0c:83:bf:7c:e7:56:04:7f:7b:a9:5a:8b:14:12:ab:
         6d:c4:09:07:76:11:ae:51:60:3d:8c:b1:bc:44:65:99:19:09:
         63:1e:51:f5:9e:0a:64:0a:86:15:71:61:3c:04:12:26:30:98:
         4c:b9:39:3e:e1:70:73:61:d5:75:91:aa:88:71:a9:c2:64:3e:
         5f:e0:d1:96:e9:68:46:4a:05:fb:7c:e8:12:0a:d5:82:33:25:
         7a:1f:b7:2f:9b:cd:2b:78:97:05:9d:d0:e9:6c:39:e3:23:5b:
         a3:7f:73:7c:b8:33:a1:9f:af:e3:fb:30:67:70:e3:69:95:a9:
         fd:90:97:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:45:35 2025 by rpki-client