Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/1/323830343a333537343a3a2f33322d3438203d3e20323636323837.roa
File:                     323830343a333537343a3a2f33322d3438203d3e20323636323837.roa (raw, json)
Hash identifier:          ejTdoyV5jiOu2+jPwKEbu0ofbGbnepdKMOzykdNYcns=
Subject key identifier:   A8:69:C1:B5:20:AE:BB:ED:D7:2B:35:30:D6:65:40:9B:74:59:6E:8F
Certificate issuer:       /CN=4478F2E563AE0EF528070FBFA4422FE0B7926F26
Certificate serial:       637B7877AAECAB1480858D3E285F85C4952C8BC5
Authority key identifier: 44:78:F2:E5:63:AE:0E:F5:28:07:0F:BF:A4:42:2F:E0:B7:92:6F:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/1/323830343a333537343a3a2f33322d3438203d3e20323636323837.roa
Signing time:             Thu 06 Mar 2025 03:53:50 +0000
ROA not before:           Thu 06 Mar 2025 03:48:50 +0000
ROA not after:            Thu 05 Mar 2026 03:53:50 +0000
asID:                     266287
IP address blocks:        2804:3574::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.crl
                          rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 02:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7b:78:77:aa:ec:ab:14:80:85:8d:3e:28:5f:85:c4:95:2c:8b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4478F2E563AE0EF528070FBFA4422FE0B7926F26
        Validity
            Not Before: Mar  6 03:48:50 2025 GMT
            Not After : Mar  5 03:53:50 2026 GMT
        Subject: CN=A869C1B520AEBBEDD72B3530D665409B74596E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:6a:e5:73:a5:19:c0:ec:4d:f3:c8:e9:0f:
                    0f:72:d6:64:52:76:07:14:2b:5f:eb:bd:de:c6:3b:
                    54:1f:b2:63:84:26:8a:65:a6:6c:f1:e8:69:bb:8a:
                    51:53:94:6d:88:73:96:ca:7b:65:85:47:f4:53:48:
                    84:ae:9c:62:c2:cd:98:61:95:0b:fe:88:f9:9a:6e:
                    2d:b9:88:36:e2:2f:bf:5a:af:4f:ff:a1:ff:01:b4:
                    de:34:00:03:e8:7e:34:26:ac:05:77:73:03:52:26:
                    cd:f8:bf:e8:5e:de:d7:4a:02:5b:28:8e:98:7b:d0:
                    d4:05:fe:84:8c:a3:d1:88:84:2f:88:d7:cc:be:3e:
                    a8:a0:6b:b5:d7:0b:98:79:91:95:e1:22:cf:89:b9:
                    6e:99:3f:b3:76:d8:70:b4:d5:83:35:40:97:ae:a7:
                    fb:49:f9:61:01:69:6f:01:dd:ce:96:09:78:b1:24:
                    d9:33:a5:db:6a:d3:87:83:0a:39:58:59:57:50:e7:
                    60:75:55:90:65:76:92:c2:fa:e2:a4:04:3f:97:c4:
                    be:6c:8c:84:ed:ce:9b:b9:fe:1b:3c:49:a6:38:a1:
                    54:d9:75:d1:85:82:f7:09:dc:1e:41:4c:31:ae:7a:
                    e7:15:c4:10:99:2c:93:8f:51:b1:9a:6c:af:df:e3:
                    28:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:69:C1:B5:20:AE:BB:ED:D7:2B:35:30:D6:65:40:9B:74:59:6E:8F
            X509v3 Authority Key Identifier:
                keyid:44:78:F2:E5:63:AE:0E:F5:28:07:0F:BF:A4:42:2F:E0:B7:92:6F:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4478F2E563AE0EF528070FBFA4422FE0B7926F26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/1/323830343a333537343a3a2f33322d3438203d3e20323636323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3574::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:41:dc:2a:8d:c6:0f:c4:58:49:b0:f5:de:38:50:dd:1c:11:
         e6:79:3e:f1:fc:55:b5:93:a0:b2:34:b3:d9:a4:6d:0e:75:da:
         70:00:75:a9:9e:a0:f7:31:64:e9:5e:7e:50:a6:a6:99:1d:9e:
         56:d2:f1:2f:88:38:94:7e:47:fe:3f:66:83:f7:02:dc:a6:ec:
         78:9e:6f:55:b3:5b:29:35:b5:72:26:d2:f9:f0:d1:30:2b:91:
         15:c6:48:be:80:93:38:f8:86:f3:0b:c2:5a:44:f0:22:78:6b:
         b3:48:23:fb:f0:42:de:13:7b:5e:91:12:29:c8:80:ab:1c:da:
         78:89:9f:1f:90:9b:b8:a1:4a:01:61:90:f6:06:95:53:f1:f1:
         fb:a5:48:ae:76:d0:25:54:c9:3f:d0:c7:2d:ac:28:ca:4a:56:
         8a:73:7a:66:2a:34:15:ee:51:2f:e4:31:44:25:c6:12:3d:62:
         15:e5:77:15:bd:bd:9d:7b:f8:56:cf:20:3c:c9:44:28:4c:51:
         e3:36:76:32:21:62:28:b0:08:71:89:cc:25:f4:7d:b1:72:60:
         70:2d:af:0a:56:ea:4e:5a:94:ef:47:29:d7:cb:04:01:8f:4a:
         34:19:57:79:da:e6:32:8a:f9:a7:fe:e4:71:48:6a:85:b3:54:
         e3:22:8a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:23:16 2025 by rpki-client