Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a396330303a3a2f33382d3338203d3e20323733333039.roa
File:                     323830343a386337633a396330303a3a2f33382d3338203d3e20323733333039.roa (raw, json)
Hash identifier:          GVmIrg4zmWG6R2zYHqyG5mrnnK132vtZqVHBPIb1yrA=
Subject key identifier:   DE:8D:91:2C:78:26:5F:44:D2:68:B8:B1:E1:11:EF:EA:E8:3E:9B:2D
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       3F91325ECF11EA9E6A3B28DB4E66E462C7E7AA31
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a396330303a3a2f33382d3338203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:40 +0000
ROA not before:           Wed 09 Apr 2025 13:48:40 +0000
ROA not after:            Wed 08 Apr 2026 13:53:40 +0000
asID:                     273309
IP address blocks:        2804:8c7c:9c00::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:91:32:5e:cf:11:ea:9e:6a:3b:28:db:4e:66:e4:62:c7:e7:aa:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:40 2025 GMT
            Not After : Apr  8 13:53:40 2026 GMT
        Subject: CN=DE8D912C78265F44D268B8B1E111EFEAE83E9B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f2:06:d0:1a:05:cc:bc:6d:c5:bb:da:6d:76:
                    30:35:8e:e4:1d:9e:56:df:10:50:18:5a:cf:ae:8b:
                    a6:d0:27:79:00:c8:a8:bf:dc:cc:3e:11:56:43:8e:
                    c8:f3:44:e5:07:3a:1c:13:11:21:b2:d2:e2:93:87:
                    8a:f2:45:39:10:f6:15:a9:73:25:4e:1c:35:aa:2c:
                    31:cd:44:33:53:f5:97:47:ee:5d:bd:91:63:0f:30:
                    dd:e3:7f:37:9e:5d:10:23:83:d4:31:13:f5:98:de:
                    ca:4b:66:41:6a:83:e5:87:13:47:d4:00:10:01:45:
                    75:62:6b:ba:87:31:50:0b:27:62:db:0e:93:c5:26:
                    ba:95:4e:c2:4f:9f:85:aa:47:4a:55:2a:18:36:c5:
                    bb:10:eb:ea:4c:20:3d:fb:0e:30:ed:f6:64:f4:c3:
                    30:1c:4a:a8:09:54:52:bf:3c:43:9d:2b:51:bc:92:
                    5a:2a:d4:9b:57:69:a9:82:f9:3c:ce:eb:7e:06:2a:
                    4c:34:ed:86:2c:ca:68:86:b8:82:a8:f5:8f:e9:17:
                    38:c8:55:2c:00:d9:a5:e7:c6:4d:7e:3b:1e:67:25:
                    5a:c3:8e:9c:bd:fd:9c:a6:9d:82:02:ba:10:18:08:
                    fa:87:28:6a:d3:eb:9d:05:c3:90:fd:7f:6c:95:1f:
                    05:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8D:91:2C:78:26:5F:44:D2:68:B8:B1:E1:11:EF:EA:E8:3E:9B:2D
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a396330303a3a2f33382d3338203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:9c00::/38

    Signature Algorithm: sha256WithRSAEncryption
         8a:65:45:dc:8c:bc:19:59:8d:88:69:ee:e9:35:25:d7:97:ba:
         d5:d0:ce:27:7c:cf:94:7d:cf:e2:76:f1:50:44:c7:f2:9c:58:
         da:36:19:3d:5d:f9:97:33:56:47:27:01:46:fc:6e:89:f5:39:
         5c:30:8c:fa:61:80:32:3b:c9:91:05:05:9d:8b:90:0b:0c:77:
         95:0c:5c:a8:ca:8e:66:6b:63:57:2d:9b:f3:2e:30:93:cb:b7:
         45:44:5a:9d:98:bd:9f:cf:45:98:da:be:f7:cc:3b:89:fd:62:
         d8:70:17:be:e9:77:a9:76:d0:60:ee:dd:d2:b1:c2:08:13:2b:
         ca:12:3a:ad:09:88:54:f9:e6:d1:30:25:0f:40:02:50:cc:07:
         50:71:0f:71:e7:a3:73:cb:b7:dc:22:91:ec:d0:1f:c5:b3:f0:
         44:9c:89:e7:9b:b9:73:86:d4:fc:fe:d0:30:27:4b:5f:8f:90:
         bf:dc:8e:0d:bb:46:f1:6e:f2:1b:8a:26:ca:ca:89:f1:e6:3f:
         87:2a:7b:90:11:21:95:14:5b:f4:2c:ea:a6:47:03:7e:77:75:
         b8:35:dc:c8:a3:d6:eb:77:a3:14:64:5b:3d:c5:52:bc:b8:8e:
         7b:d0:74:a3:7d:3d:79:fe:b6:54:50:0e:c7:30:3a:37:fd:6d:
         0c:0f:09:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:43:38 2025 by rpki-client