Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33332d3333203d3e20323732363134.roa
File:                     323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (raw, json)
Hash identifier:          Cx4646zrPKq6xD6iBJPkGxFHe6jY6KpJK0fDkBl/7Jo=
Subject key identifier:   CA:D7:5C:3F:89:28:41:49:6B:B5:3E:B2:F7:7A:56:47:2A:81:70:13
Certificate issuer:       /CN=8AD497903AB3566443C9C794694A61EFE427FA7A
Certificate serial:       1BAB4E31F6ECF93063B0990942EDC7E2AAB9A9DA
Authority key identifier: 8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33332d3333203d3e20323732363134.roa
Signing time:             Thu 27 Feb 2025 19:59:51 +0000
ROA not before:           Thu 27 Feb 2025 19:54:51 +0000
ROA not after:            Thu 26 Feb 2026 19:59:51 +0000
asID:                     272614
IP address blocks:        2804:8604::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl
                          rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ab:4e:31:f6:ec:f9:30:63:b0:99:09:42:ed:c7:e2:aa:b9:a9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
        Validity
            Not Before: Feb 27 19:54:51 2025 GMT
            Not After : Feb 26 19:59:51 2026 GMT
        Subject: CN=CAD75C3F892841496BB53EB2F77A56472A817013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:1b:7b:13:3c:a4:aa:04:69:98:bd:bc:f8:
                    8e:06:a7:e8:2d:6c:32:ed:7c:dd:23:92:9e:68:e4:
                    f2:19:60:f5:dd:3c:f5:b0:24:58:b1:96:2d:c3:97:
                    5c:dc:e9:a6:56:89:59:99:58:76:f4:cc:e6:b1:f5:
                    24:a9:37:71:32:5f:e3:c5:d5:8f:dc:87:94:f4:a1:
                    4f:26:9c:f1:5d:6b:b2:7b:88:86:72:48:ed:62:64:
                    68:31:38:ff:28:d7:e3:eb:6c:d4:3e:f1:fb:2e:66:
                    5c:5e:61:3e:ff:9e:48:7a:01:2c:97:30:4f:ee:49:
                    66:77:59:60:e5:d2:36:1d:6b:5c:ad:6b:35:d1:cf:
                    43:ac:77:e6:7d:3b:99:32:93:d0:bd:0d:3b:5c:df:
                    c4:fb:05:d2:e6:02:24:f7:20:17:a1:0c:f0:05:13:
                    d3:c1:c7:08:dc:24:94:ce:29:b5:70:16:2c:42:47:
                    c8:0d:35:2c:7c:16:50:b9:68:20:d1:62:77:47:6d:
                    a1:5e:56:0e:e5:ab:75:0a:17:08:93:eb:b9:82:af:
                    19:31:fb:c8:38:4d:7b:28:d4:05:c6:a2:35:e6:53:
                    56:59:cb:4a:02:9a:86:96:5f:e6:4a:08:24:86:a5:
                    ab:29:e4:15:2d:2c:31:ab:f0:56:7e:c8:aa:70:9c:
                    70:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D7:5C:3F:89:28:41:49:6B:B5:3E:B2:F7:7A:56:47:2A:81:70:13
            X509v3 Authority Key Identifier:
                keyid:8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/323830343a383630343a3a2f33332d3333203d3e20323732363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8604::/33

    Signature Algorithm: sha256WithRSAEncryption
         53:75:b9:0c:96:e7:ed:2b:c6:25:33:f5:a8:70:ff:1d:24:2d:
         8c:8d:da:95:38:56:1d:ea:df:fb:ec:63:1a:fe:d7:67:bb:60:
         4d:b6:70:81:7e:75:a1:08:1f:6d:08:36:cd:47:3c:a1:09:e0:
         5f:e8:b8:4a:3e:c4:83:f0:03:cc:27:da:3d:ef:be:13:f4:e2:
         3b:ca:46:dd:b6:2d:9d:2d:6e:08:23:c0:c3:4d:f4:49:4c:1f:
         84:06:31:8a:df:55:7b:e5:21:e5:8b:c2:92:8a:aa:6e:a0:ec:
         b8:bb:0c:9a:f5:0b:8b:b4:39:f3:1d:22:af:91:86:da:34:90:
         d8:ce:d4:fd:96:03:ca:e7:9c:e6:c0:1a:9e:56:e6:24:31:d3:
         05:e7:8f:4c:9a:e4:71:0a:bb:75:a4:45:f8:d9:20:10:98:34:
         cd:73:52:2e:75:b6:ac:53:a0:89:e6:f5:41:4c:fe:85:19:65:
         16:30:0d:f0:ec:df:9d:aa:4c:d8:ac:1f:e6:27:7b:10:c1:bc:
         c0:35:bc:a7:a2:0b:23:06:fa:e1:26:85:fe:f1:f2:34:5c:0d:
         c6:c0:5f:9d:c1:da:ce:ca:52:f3:74:1c:cf:be:9b:3e:e3:30:
         9e:f9:5e:d0:60:14:9d:c9:90:25:15:fc:f0:dd:c5:5d:e0:b6:
         19:06:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:40:44 2025 by rpki-client