Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/323830343a383332343a3a2f33322d313238203d3e20323732313739.roa
File:                     323830343a383332343a3a2f33322d313238203d3e20323732313739.roa (raw, json)
Hash identifier:          R4oug1DNEvU9N+Xrabj+S/juBljosbJV0Rq52lm4TIk=
Subject key identifier:   9F:67:E5:71:7B:5A:71:04:B0:7C:38:CF:41:D6:51:75:A4:31:AE:C6
Certificate issuer:       /CN=9FA538F973CB18AB688469E52C0575A71BEA5AC8
Certificate serial:       3A8E48F22530363D0E63D5AC5D70B330D0524453
Authority key identifier: 9F:A5:38:F9:73:CB:18:AB:68:84:69:E5:2C:05:75:A7:1B:EA:5A:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA538F973CB18AB688469E52C0575A71BEA5AC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/323830343a383332343a3a2f33322d313238203d3e20323732313739.roa
Signing time:             Mon 19 May 2025 14:37:34 +0000
ROA not before:           Mon 19 May 2025 14:32:34 +0000
ROA not after:            Mon 18 May 2026 14:37:34 +0000
asID:                     272179
IP address blocks:        2804:8324::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/9FA538F973CB18AB688469E52C0575A71BEA5AC8.crl
                          rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/9FA538F973CB18AB688469E52C0575A71BEA5AC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA538F973CB18AB688469E52C0575A71BEA5AC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 17:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:8e:48:f2:25:30:36:3d:0e:63:d5:ac:5d:70:b3:30:d0:52:44:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA538F973CB18AB688469E52C0575A71BEA5AC8
        Validity
            Not Before: May 19 14:32:34 2025 GMT
            Not After : May 18 14:37:34 2026 GMT
        Subject: CN=9F67E5717B5A7104B07C38CF41D65175A431AEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:bf:27:bc:76:5f:6e:bd:b7:c3:85:60:8e:
                    1d:bc:d9:c5:d5:50:ef:ce:1d:f5:14:36:0e:c9:24:
                    33:2f:94:5a:97:be:c8:6b:e6:c0:7c:d2:5c:21:be:
                    99:98:0b:7e:33:93:bd:e2:ff:cb:02:ec:c7:6d:95:
                    06:9e:28:35:0a:78:1d:6a:68:a7:ad:fd:9c:83:c9:
                    57:7f:7e:cf:e4:f9:2c:50:8c:40:83:29:fa:08:b7:
                    da:8c:d5:29:69:f9:75:56:1c:90:85:d3:9e:dd:2b:
                    e2:34:5e:83:c3:6b:bf:30:6a:2a:3c:31:2e:05:54:
                    b9:f1:45:b1:21:02:63:be:9d:e1:77:63:bf:38:e7:
                    a7:ad:ef:81:26:20:af:dc:5c:24:80:10:4f:b4:3d:
                    8e:5e:a6:ce:19:a4:b3:91:e8:0f:06:38:32:f0:20:
                    03:5e:32:61:1e:33:11:1d:aa:dc:1e:83:94:14:6a:
                    57:9d:e8:ea:f6:76:46:fc:8e:95:38:d3:85:53:35:
                    44:2e:24:26:e5:24:28:e8:02:35:fe:36:73:e3:6b:
                    3f:6b:09:1e:04:23:8a:da:ad:1c:c8:ff:e4:7e:b6:
                    89:c7:25:ab:a7:a1:31:85:d3:1b:54:3b:81:30:6d:
                    80:21:58:5a:a2:c7:d5:63:52:c8:3c:a3:04:e3:56:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:67:E5:71:7B:5A:71:04:B0:7C:38:CF:41:D6:51:75:A4:31:AE:C6
            X509v3 Authority Key Identifier:
                keyid:9F:A5:38:F9:73:CB:18:AB:68:84:69:E5:2C:05:75:A7:1B:EA:5A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/9FA538F973CB18AB688469E52C0575A71BEA5AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9FA538F973CB18AB688469E52C0575A71BEA5AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhRSLStPpUAxjrQB7TdHhSUf9uSu1KCUA2MLimGrHTvf/0/323830343a383332343a3a2f33322d313238203d3e20323732313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8324::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:b6:ab:db:b1:49:b9:9b:47:65:7c:ac:72:be:8d:76:fa:b2:
         7c:03:e0:4c:fd:84:c5:ca:13:e4:24:da:28:50:4e:87:ae:15:
         26:04:c2:f7:fa:d7:44:41:c7:3f:c5:e2:6f:ec:49:b9:4d:84:
         c1:d6:9f:2c:27:32:f4:f0:92:24:03:15:6c:c1:9d:d2:67:9c:
         2d:37:ac:f4:18:75:ac:d3:a0:ba:3b:5b:ba:b1:93:90:c4:c8:
         6a:83:6c:9b:e2:ed:f0:f6:2b:a4:ac:19:85:e1:65:bc:1e:d1:
         27:6a:d8:3a:f1:c7:a8:69:e1:65:64:f8:d1:83:fc:1f:61:31:
         41:d9:0a:de:f0:30:9e:8b:35:d2:28:20:95:cc:50:37:20:f4:
         34:82:eb:ef:60:93:c6:9e:0b:77:62:6d:9d:66:bf:d0:a4:8a:
         42:f5:8d:76:b4:4b:fc:9c:5f:7e:e0:8d:4f:84:9d:53:58:6e:
         71:51:e6:34:07:65:8e:22:94:1a:a3:28:c1:82:14:71:d3:c9:
         1a:2a:9e:b7:ab:e8:17:af:79:54:08:e1:23:44:7d:4c:3e:b9:
         73:5b:71:f6:dd:e6:e4:e8:6f:bc:86:c4:4d:48:0b:f4:4b:45:
         fe:84:0c:0a:8a:3a:c9:00:db:1a:ae:f4:15:b3:b9:98:a1:cf:
         15:28:c5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:03:30 2025 by rpki-client