Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/323830343a3830633a3a2f33322d3438203d3e20323632333433.roa
File:                     323830343a3830633a3a2f33322d3438203d3e20323632333433.roa (raw, json)
Hash identifier:          WkDXinBlhSpzEvUc/HOjtx0nayVUYKfHQ1jGnnUDwSE=
Subject key identifier:   F9:33:03:21:1E:A4:BB:4D:56:DE:8C:E3:FF:B7:F3:2F:7B:B4:F9:91
Certificate issuer:       /CN=A5455EE25C6FEB15A12789F15E975474289CE800
Certificate serial:       650CB1C46D78C647BF6833EE2C2F1DEE0E9D91E7
Authority key identifier: A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/323830343a3830633a3a2f33322d3438203d3e20323632333433.roa
Signing time:             Thu 06 Mar 2025 09:00:37 +0000
ROA not before:           Thu 06 Mar 2025 08:55:37 +0000
ROA not after:            Thu 05 Mar 2026 09:00:37 +0000
asID:                     262343
IP address blocks:        2804:80c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl
                          rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0c:b1:c4:6d:78:c6:47:bf:68:33:ee:2c:2f:1d:ee:0e:9d:91:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5455EE25C6FEB15A12789F15E975474289CE800
        Validity
            Not Before: Mar  6 08:55:37 2025 GMT
            Not After : Mar  5 09:00:37 2026 GMT
        Subject: CN=F93303211EA4BB4D56DE8CE3FFB7F32F7BB4F991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:58:3c:f4:26:1d:04:05:3f:46:54:e0:95:
                    89:2e:48:64:21:23:0b:13:d4:b0:99:41:fe:74:d0:
                    8d:87:0e:2e:1c:5d:33:ca:dc:8f:dc:cc:68:8e:bb:
                    7f:2f:43:d9:f9:d5:eb:02:3b:99:a8:51:4c:79:a0:
                    63:f4:3d:36:b7:1a:e4:4e:88:81:62:09:8b:c0:a9:
                    fb:bb:0b:78:9a:09:4b:0a:d2:52:cc:14:9d:46:7f:
                    e2:c5:10:b0:72:ca:b2:dc:e8:f1:42:27:0d:6f:5b:
                    f3:0c:60:3d:26:98:d1:5d:44:a6:16:08:9f:43:2a:
                    6f:36:e3:83:3f:32:7b:19:29:91:9c:aa:4c:c6:0d:
                    fb:41:d2:d9:23:e8:6e:d9:a8:fe:cd:9f:24:b8:93:
                    5e:91:4d:9d:24:f1:16:8f:26:76:71:1b:7d:f2:fd:
                    64:b4:26:98:cf:28:20:2f:ca:3c:7c:a2:f4:6a:55:
                    f1:ae:9c:d8:56:5c:fd:0c:25:b6:df:52:00:4d:fd:
                    18:06:3f:ab:70:1d:8e:fe:cc:ee:25:a5:8a:70:0d:
                    0c:b6:c4:46:62:d2:33:b9:eb:0c:c5:78:f8:20:be:
                    dd:4a:d4:c7:0f:92:83:42:32:82:bd:4d:89:9f:36:
                    4c:5c:e5:a2:4f:cd:5f:06:d4:fa:3e:fb:f1:5b:55:
                    c2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:33:03:21:1E:A4:BB:4D:56:DE:8C:E3:FF:B7:F3:2F:7B:B4:F9:91
            X509v3 Authority Key Identifier:
                keyid:A5:45:5E:E2:5C:6F:EB:15:A1:27:89:F1:5E:97:54:74:28:9C:E8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/A5455EE25C6FEB15A12789F15E975474289CE800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5455EE25C6FEB15A12789F15E975474289CE800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dk34xg5AYjNn1vSfZ7zw4KrywzZD8v6YE7yo34vKpWoj/2/323830343a3830633a3a2f33322d3438203d3e20323632333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80c::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:10:aa:a9:fb:df:5d:21:4f:c9:d9:c9:26:88:ce:06:d0:1e:
         10:e6:2c:8b:b1:c9:8c:0c:42:84:ba:1e:e3:0a:db:c0:3c:8f:
         a5:43:95:5e:2c:75:3e:ee:fb:df:cf:e3:cf:24:b2:c6:2f:1a:
         1c:f7:03:4b:f6:dd:84:95:a1:d6:31:e9:fb:d4:4b:f9:4f:1f:
         c6:0d:d0:6e:5a:28:dd:0f:9e:90:e4:0a:6b:b4:0f:b4:cb:53:
         7d:46:b4:5a:71:42:d8:ce:85:b1:b9:27:3b:f5:97:a1:d2:32:
         c6:95:ec:dd:52:a8:15:bb:19:1d:22:7b:8d:f6:bb:5e:02:08:
         70:14:33:5e:04:05:92:74:a1:7e:e6:37:4d:c8:6f:e3:36:cf:
         2b:cb:38:7a:75:c4:ce:49:4f:4c:2f:98:09:16:b1:43:b7:45:
         51:ef:3d:d4:6d:ad:99:85:d4:a8:3d:7f:34:44:b5:b2:f1:dd:
         57:e9:2e:70:48:d7:31:58:a9:1f:cf:e3:70:0c:b8:6b:8d:c5:
         db:29:24:6d:e3:2c:82:c3:ad:5f:2b:27:32:a9:65:41:43:76:
         40:20:c8:38:5d:18:16:e4:38:01:9e:2c:b9:24:c0:4a:fc:be:
         90:16:a5:77:47:8d:20:5c:53:d7:7e:2f:41:cb:32:54:cf:d6:
         50:5d:95:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:38 2025 by rpki-client