Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/323830343a356432303a3a2f33322d3335203d3e20323638393532.roa
File:                     323830343a356432303a3a2f33322d3335203d3e20323638393532.roa (raw, json)
Hash identifier:          CzsiDQsxUsen7aCgQ5wvKD9dfKUQucEL7izH9lufr24=
Subject key identifier:   9D:98:2C:92:4E:CE:8D:E6:99:CB:FB:94:9C:B5:CA:D1:20:9B:19:95
Certificate issuer:       /CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026
Certificate serial:       4660DB558D64395D9D23DA6F3B0EEB8430A7A9C4
Authority key identifier: CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/323830343a356432303a3a2f33322d3335203d3e20323638393532.roa
Signing time:             Thu 06 Mar 2025 19:00:00 +0000
ROA not before:           Thu 06 Mar 2025 18:55:00 +0000
ROA not after:            Fri 06 Mar 2026 19:00:00 +0000
asID:                     268952
IP address blocks:        2804:5d20::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.crl
                          rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:60:db:55:8d:64:39:5d:9d:23:da:6f:3b:0e:eb:84:30:a7:a9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDBBBC8A21B569B8C13657EE73CC93CA9577A026
        Validity
            Not Before: Mar  6 18:55:00 2025 GMT
            Not After : Mar  6 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:60:2a:f5:4c:bb:d7:f5:30:2e:71:79:1d:
                    ca:05:cb:be:1c:29:02:6a:64:99:aa:41:b0:ca:6c:
                    91:1c:03:7a:ad:62:b7:88:04:6d:2e:56:a5:11:bf:
                    47:13:67:f3:d4:c6:bd:f8:3d:74:9d:86:aa:6f:ce:
                    61:48:b0:b5:02:ac:ea:12:30:23:57:72:0b:5e:7b:
                    58:56:18:ad:31:e0:16:1d:e0:4c:a4:ae:68:7a:42:
                    14:5e:f9:f5:d8:11:36:af:bb:13:b9:68:28:c9:4f:
                    5d:b6:94:fb:5a:89:51:79:a4:85:a2:4d:6a:86:d9:
                    35:24:bb:ba:bd:2a:fb:f0:21:c4:85:b5:89:ff:1c:
                    35:3b:61:93:0c:7c:9d:e4:f3:a8:d8:59:7c:99:17:
                    8f:38:70:04:8e:67:0e:62:99:b4:d1:5d:e1:82:22:
                    ba:b2:91:96:8e:d2:9b:9a:a9:c7:43:43:bc:62:42:
                    27:fd:81:ec:11:50:1c:b8:55:4d:79:7d:6e:2e:78:
                    a9:5e:f9:2b:78:db:23:76:df:42:ff:3a:f6:d5:cd:
                    d0:8f:32:c2:50:6d:5b:64:12:df:b8:d0:48:87:9e:
                    7b:18:10:41:5c:74:e2:9e:64:de:7c:34:15:0e:90:
                    f7:20:95:28:23:65:39:43:89:52:19:1f:d5:ac:45:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:98:2C:92:4E:CE:8D:E6:99:CB:FB:94:9C:B5:CA:D1:20:9B:19:95
            X509v3 Authority Key Identifier:
                keyid:CD:BB:BC:8A:21:B5:69:B8:C1:36:57:EE:73:CC:93:CA:95:77:A0:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDBBBC8A21B569B8C13657EE73CC93CA9577A026.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/1/323830343a356432303a3a2f33322d3335203d3e20323638393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:1b:00:07:0e:b8:6b:37:07:eb:bd:09:76:8c:b2:4b:73:58:
         6b:33:b9:ad:da:e7:88:b2:28:be:30:23:03:c8:d0:1e:2c:a2:
         0d:ec:e8:e8:0f:53:f4:2e:fe:1b:02:26:5a:72:e5:8b:e4:be:
         12:91:e1:6c:74:5b:a3:a0:fe:07:f4:3e:2a:68:dd:71:2e:c6:
         08:d6:d1:03:93:73:ec:71:42:a9:2a:72:57:db:13:25:e3:c4:
         9d:98:8a:2c:6d:38:6d:8d:50:97:ff:af:e0:a3:b9:95:32:3b:
         75:8d:27:f6:d1:9c:44:64:a8:42:ee:41:99:00:13:95:40:34:
         20:dd:6a:60:2d:72:8c:fc:2b:fe:59:96:77:fe:c0:a0:ca:bf:
         be:cf:1e:22:15:81:7f:62:cb:af:7e:bd:85:99:4f:4e:02:b1:
         56:83:26:c8:ec:39:4d:13:c5:8a:58:26:1f:38:0f:f8:cc:d7:
         dd:80:d5:48:12:97:ba:28:9c:4e:75:77:fc:63:f0:c5:a1:63:
         0e:7a:0c:f8:38:5a:1d:36:ab:b3:4a:94:97:bb:de:ea:af:0e:
         4a:98:77:eb:71:5e:f6:ba:7b:0f:bf:67:86:55:42:8b:af:6d:
         77:a1:4b:e0:9e:7b:f1:8b:e4:b7:3d:56:1d:7e:53:36:30:b1:
         fc:c6:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:07:02 2025 by rpki-client