Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33322d313238203d3e203532393434.roa
File:                     323830343a6232383a3a2f33322d313238203d3e203532393434.roa (raw, json)
Hash identifier:          x65BWlOoCAbrDjaszH0KOeUyQ8b4rtwmb8HD16EqrzM=
Subject key identifier:   B9:99:BC:09:64:3C:F7:66:99:77:60:1D:52:75:D8:A5:AC:02:CC:DB
Certificate issuer:       /CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Certificate serial:       72058EBBD38B4A79DD3416B3208C4C59EE133A8E
Authority key identifier: 2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33322d313238203d3e203532393434.roa
Signing time:             Tue 11 Mar 2025 20:29:02 +0000
ROA not before:           Tue 11 Mar 2025 20:24:02 +0000
ROA not after:            Tue 10 Mar 2026 20:29:02 +0000
asID:                     52944
IP address blocks:        2804:b28::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl
                          rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 06:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:05:8e:bb:d3:8b:4a:79:dd:34:16:b3:20:8c:4c:59:ee:13:3a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
        Validity
            Not Before: Mar 11 20:24:02 2025 GMT
            Not After : Mar 10 20:29:02 2026 GMT
        Subject: CN=B999BC09643CF7669977601D5275D8A5AC02CCDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a5:fc:be:21:3d:0e:94:e7:6f:b3:ea:8f:75:
                    56:8f:c6:54:aa:2c:24:6e:e2:f1:35:9d:57:62:f0:
                    b4:18:81:b6:66:b1:7b:a8:1e:55:f5:25:ee:d5:8b:
                    dc:2c:ea:41:02:a0:53:26:e9:7e:0e:a6:27:06:79:
                    94:23:ca:dd:e0:a3:d7:3f:8c:56:c0:8c:f5:28:5e:
                    6c:b7:87:98:e7:a4:e2:0e:de:17:f1:7d:e1:bb:6b:
                    5f:4d:9d:dc:18:23:90:2c:1d:b6:ea:54:92:fa:55:
                    89:e7:89:71:80:b6:2e:a5:6d:ff:54:c2:fd:36:85:
                    15:ec:1f:a7:fc:43:8f:9a:41:49:34:60:c1:28:ea:
                    d5:2c:24:6f:25:e5:09:57:dd:a5:e4:70:48:c3:eb:
                    74:92:ce:78:42:17:e7:65:ed:e5:21:37:7d:1a:0e:
                    1a:b3:9d:74:92:12:30:ba:aa:10:64:db:3e:24:b3:
                    e6:f1:d0:2e:af:b1:37:81:25:75:36:3b:4b:9f:97:
                    73:c5:b7:e7:d9:31:b6:e5:8b:95:48:dd:6d:6b:98:
                    8e:ba:64:24:ee:5f:c9:94:b5:7f:c9:ad:96:6a:52:
                    a7:60:c8:40:57:c0:8e:ab:87:ef:d2:f5:54:e3:5e:
                    09:fb:69:0b:b5:c6:44:63:89:e2:8a:ca:ab:70:2c:
                    8a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:99:BC:09:64:3C:F7:66:99:77:60:1D:52:75:D8:A5:AC:02:CC:DB
            X509v3 Authority Key Identifier:
                keyid:2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33322d313238203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b28::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:da:16:84:01:47:f9:89:ce:10:c4:cc:a4:56:32:54:c7:b4:
         07:63:8d:37:dc:7d:bf:41:e9:ed:09:d5:21:e9:d1:3f:bf:2b:
         9e:e1:0d:1c:55:ec:b0:5b:27:4c:4d:e1:69:0b:75:e8:4c:06:
         2e:e5:5f:05:de:d0:50:a5:d8:ca:67:f9:2f:e4:1c:87:b9:72:
         8f:c3:0e:4e:b4:56:3c:d8:b3:92:dd:5a:79:fc:58:6d:17:39:
         e0:a6:2d:6a:81:b3:2d:f1:f7:3f:34:75:cc:2f:0f:92:f2:ec:
         58:2f:f8:c6:b5:a0:70:ab:70:6f:df:29:f9:1e:1e:e5:4f:8b:
         71:7d:84:45:80:43:0d:2f:d1:9b:cd:35:f2:c5:f0:2d:7d:8f:
         7e:71:0e:31:92:d7:c8:2b:a8:81:4b:70:62:0d:31:ad:67:ad:
         67:67:56:9b:69:fe:ac:eb:87:9f:ef:7f:0c:92:be:16:1b:d2:
         8c:93:9a:41:70:20:cc:dd:2a:53:78:e7:67:76:94:b4:30:bd:
         cb:50:44:e3:df:36:43:98:cd:45:4a:b1:69:3e:05:b5:37:8f:
         ca:02:63:d5:1f:84:b1:7d:6b:89:c5:01:b6:25:96:4d:f0:af:
         42:c8:c8:5c:49:24:36:33:44:cb:79:cf:26:f5:27:ad:de:5b:
         af:42:f0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:35 2025 by rpki-client