Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa
File:                     323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa (raw, json)
Hash identifier:          p+tiLooqfNvykHBiRTNNzroZG0pHHKyehY7oKzm/vng=
Subject key identifier:   71:79:49:6C:83:66:A8:2D:38:C0:EF:89:77:32:59:F2:25:39:03:EE
Certificate issuer:       /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial:       3AC5DE72DD991627592C5BDAB0DD921835269301
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa
Signing time:             Thu 06 Mar 2025 13:00:35 +0000
ROA not before:           Thu 06 Mar 2025 12:55:35 +0000
ROA not after:            Thu 05 Mar 2026 13:00:35 +0000
asID:                     266312
IP address blocks:        2804:35e0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
                          rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c5:de:72:dd:99:16:27:59:2c:5b:da:b0:dd:92:18:35:26:93:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
        Validity
            Not Before: Mar  6 12:55:35 2025 GMT
            Not After : Mar  5 13:00:35 2026 GMT
        Subject: CN=7179496C8366A82D38C0EF89773259F2253903EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:e4:79:b9:67:7a:40:2a:8c:a2:d5:24:b5:
                    e5:b4:8d:58:67:2f:bc:c9:e7:50:6f:80:9d:0b:0a:
                    c7:f9:81:82:93:24:33:4a:27:f7:bc:ba:7f:c7:1b:
                    85:11:0c:ba:b5:06:e8:b6:a3:a7:3c:aa:4a:ae:31:
                    b4:38:18:35:56:02:61:5d:3a:4d:73:12:8d:d5:85:
                    b0:da:64:aa:30:a1:c3:1e:4d:fb:b9:d1:dd:3c:82:
                    05:97:82:09:1d:21:5f:90:96:72:e4:db:50:7f:55:
                    5d:a7:ec:7a:28:94:52:36:cd:f2:78:94:d8:15:1c:
                    bd:e3:98:f7:e9:36:c6:73:1b:21:c3:ce:41:60:b8:
                    d5:12:e1:4d:dc:6a:4a:c8:76:42:f0:a5:8f:cb:4a:
                    ed:21:30:4a:b9:52:52:4a:89:0a:92:2a:a1:51:80:
                    1a:5d:fd:07:d6:27:33:fe:94:23:f7:d9:a8:cf:21:
                    3a:7d:22:64:62:f7:1b:78:ce:43:cb:b1:16:22:19:
                    3b:0c:d4:4c:e9:25:f2:43:32:c3:6a:bf:e2:39:f7:
                    e3:62:36:8f:42:a8:58:88:13:66:bb:68:53:d7:1f:
                    a7:f7:1e:cb:c1:16:87:59:fc:f7:f1:44:76:73:4b:
                    7b:2b:7a:4f:54:44:f8:29:f8:56:50:f9:32:6a:0c:
                    5f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:79:49:6C:83:66:A8:2D:38:C0:EF:89:77:32:59:F2:25:39:03:EE
            X509v3 Authority Key Identifier:
                keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a323030303a3a2f33362d3336203d3e20323636333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35e0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:71:94:e7:54:0a:5e:69:22:4d:2e:84:92:91:26:3f:52:
         e7:ed:49:95:7a:f3:08:43:7e:39:25:54:22:a1:b5:6d:2d:cd:
         69:0f:c0:c9:51:16:a2:1e:0a:36:2f:8e:7d:ea:54:5f:74:62:
         9c:80:65:4a:15:18:1e:ad:32:34:f8:4d:e8:c0:d3:78:2e:0b:
         78:07:b9:86:29:43:24:67:ba:7d:5d:bd:23:2e:8e:db:91:f5:
         9b:bc:8a:0f:96:2d:49:83:06:e6:1f:9c:5c:c9:81:41:46:b1:
         6f:b7:8d:c1:43:f1:fe:03:29:80:40:1d:7b:90:eb:4a:92:b8:
         64:a4:f3:68:3a:8a:18:11:1d:79:26:64:d1:1d:2f:05:95:4a:
         9b:b7:fa:2b:39:58:b1:9c:d7:d3:10:3e:e9:3d:e0:90:e4:9a:
         8f:5f:19:05:fd:12:0e:be:e6:3a:07:8f:2b:96:00:a4:e1:75:
         5e:ea:cd:2e:b2:5f:1a:2a:73:6d:a9:e4:33:24:22:42:7a:7d:
         c4:98:7f:1e:a7:53:6c:10:73:51:0c:59:6b:d1:ee:e1:e1:df:
         f3:1c:63:e3:3a:23:16:4e:ac:d9:f2:05:b9:f6:11:59:70:62:
         cc:16:2b:51:f6:63:fd:42:65:a9:b4:4f:e0:ce:68:2a:8c:34:
         fd:89:26:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:33:27 2025 by rpki-client