Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33322d3332203d3e20323637353536.roa
File:                     323830343a343333383a3a2f33322d3332203d3e20323637353536.roa (raw, json)
Hash identifier:          fIfM1GpPTVNS4bZtgiMVU6TkVfick45RC26IzSELAFY=
Subject key identifier:   BE:65:2E:92:49:B4:82:72:8E:82:82:24:CC:17:DA:02:92:4D:E1:83
Certificate issuer:       /CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
Certificate serial:       10798333C63338C4F208ADBF4EE157D329CB5A2A
Authority key identifier: 23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33322d3332203d3e20323637353536.roa
Signing time:             Tue 01 Apr 2025 12:49:39 +0000
ROA not before:           Tue 01 Apr 2025 12:44:39 +0000
ROA not after:            Tue 31 Mar 2026 12:49:39 +0000
asID:                     267556
IP address blocks:        2804:4338::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.crl
                          rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 08:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:79:83:33:c6:33:38:c4:f2:08:ad:bf:4e:e1:57:d3:29:cb:5a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E
        Validity
            Not Before: Apr  1 12:44:39 2025 GMT
            Not After : Mar 31 12:49:39 2026 GMT
        Subject: CN=BE652E9249B482728E828224CC17DA02924DE183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6f:72:4c:5b:5f:c4:46:9e:fe:f8:07:df:ca:
                    77:2c:39:8a:4a:6e:64:77:ef:99:8b:a1:89:31:f2:
                    b8:93:9c:48:cf:fe:c4:e5:8a:fb:52:9d:54:ab:79:
                    f5:70:64:d9:cc:aa:f4:12:93:20:52:1e:1f:bb:09:
                    fb:7f:51:54:79:7b:8d:32:94:38:37:77:65:e3:58:
                    0a:e2:56:94:fc:35:78:5c:93:6a:9f:53:44:76:96:
                    f3:3d:4a:86:98:b6:8b:0a:16:2e:6b:94:cf:3b:78:
                    3d:96:aa:a4:94:d3:73:7c:c4:42:80:12:2e:c5:44:
                    ab:77:97:9b:6e:57:0e:e3:29:a8:35:a9:ce:99:09:
                    ca:33:09:fc:05:c0:8b:52:bf:d0:45:9c:03:85:0d:
                    26:0a:1c:2c:be:01:f1:1e:03:99:d6:8a:0d:42:c5:
                    ec:dc:aa:50:96:64:ac:21:a8:11:93:95:86:16:0a:
                    8d:57:35:db:da:5b:8d:a0:8d:7d:f9:ac:ae:be:5e:
                    0e:44:de:95:43:4f:e4:e4:44:04:89:e7:8d:69:87:
                    00:2a:4b:ab:ef:d7:87:60:a6:a6:fc:87:87:af:67:
                    57:e3:84:99:d2:9f:62:a4:07:8d:e9:5c:0c:71:7c:
                    42:5e:19:8a:61:b7:49:a6:4c:4c:48:f7:f0:83:2a:
                    cf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:65:2E:92:49:B4:82:72:8E:82:82:24:CC:17:DA:02:92:4D:E1:83
            X509v3 Authority Key Identifier:
                keyid:23:83:B3:AF:A3:5A:DB:2A:36:38:A9:F2:AE:0D:9C:27:AF:B5:C5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2383B3AFA35ADB2A3638A9F2AE0D9C27AFB5C50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EyYdudEtfsFPH8btWdWacPzS353goTkH4vF7dsGAU3x/0/323830343a343333383a3a2f33322d3332203d3e20323637353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4338::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:23:dc:e2:36:1b:b5:68:92:9e:f8:f4:72:b3:fd:8e:a1:fd:
         31:44:38:60:6d:51:60:57:13:5a:a0:63:df:db:fd:4b:47:03:
         dd:86:3e:36:d0:a9:fd:9c:21:2d:10:21:a8:7c:32:0f:8c:e1:
         47:80:7e:b7:68:9c:07:bd:ab:ef:3d:22:d7:0b:81:42:84:96:
         35:cd:dd:0d:cf:a8:59:5d:cd:c0:ab:7a:04:81:ef:b4:ce:cc:
         5e:8d:38:76:01:56:80:52:74:d8:b2:fe:e5:6f:cf:63:64:7d:
         69:2a:02:52:49:37:7f:57:e2:ca:e4:e0:ef:b0:54:2b:b5:d4:
         2b:1e:79:2f:11:ca:2f:60:15:93:29:4a:78:71:9e:f3:43:fd:
         59:ff:49:78:87:35:88:6b:dd:db:8b:53:df:66:b0:67:71:af:
         1a:65:4a:d3:52:40:7d:32:a7:30:bd:62:8f:b3:53:65:20:ff:
         e9:86:0c:20:1a:bb:71:9e:44:5d:8b:38:0c:4e:74:9e:ea:4d:
         59:a4:23:be:30:6e:56:1a:2f:b5:7e:e0:1c:5b:5c:c2:c5:1c:
         3a:47:ef:3d:10:a3:fc:dd:05:cc:26:8c:e3:da:42:3c:2a:92:
         d0:46:57:a1:e9:92:8a:8d:4a:b1:9b:ef:1e:93:81:b1:a6:50:
         c5:cc:d0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:53:36 2025 by rpki-client