Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/323830343a6233383a3a2f33322d3438203d3e203532373538.roa
File:                     323830343a6233383a3a2f33322d3438203d3e203532373538.roa (raw, json)
Hash identifier:          yBdVZCTFlwpkFzAvhNVvWztlMRMqASLdr7Zulx/xGLA=
Subject key identifier:   41:EE:B8:11:B7:E1:57:56:9A:FB:29:6C:FA:A6:2C:83:31:6F:8B:CB
Certificate issuer:       /CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
Certificate serial:       54088CF8975B807FCC1316781919302F4219E2DD
Authority key identifier: B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/323830343a6233383a3a2f33322d3438203d3e203532373538.roa
Signing time:             Fri 07 Mar 2025 14:41:01 +0000
ROA not before:           Fri 07 Mar 2025 14:36:01 +0000
ROA not after:            Fri 06 Mar 2026 14:41:01 +0000
asID:                     52758
IP address blocks:        2804:b38::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl
                          rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 20:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:08:8c:f8:97:5b:80:7f:cc:13:16:78:19:19:30:2f:42:19:e2:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E45FF3FD21FB775F75030B7B24C024E370C6DB
        Validity
            Not Before: Mar  7 14:36:01 2025 GMT
            Not After : Mar  6 14:41:01 2026 GMT
        Subject: CN=41EEB811B7E157569AFB296CFAA62C83316F8BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:87:82:10:4e:d3:18:ea:1c:40:ca:bb:3d:ce:
                    36:73:1d:a3:2f:89:bc:8a:f2:6d:7f:2a:87:50:2d:
                    84:28:fd:b5:34:1a:53:56:b3:36:e6:bf:dc:fb:a0:
                    94:e1:fb:e5:91:fc:4a:93:88:76:37:50:45:ea:4a:
                    58:be:75:80:da:a2:40:67:fa:28:1e:cd:39:64:79:
                    a4:a6:30:53:c9:d8:48:47:e9:32:2b:7b:bc:dc:35:
                    0d:c9:cf:8a:a1:06:0e:2d:f6:3e:88:94:55:a7:42:
                    28:d9:7f:c1:86:89:71:2c:4b:72:4b:8a:cc:8f:eb:
                    03:58:35:5e:c7:5f:41:c9:12:ef:c9:60:b4:33:d4:
                    38:f9:b7:75:7a:0e:af:46:fe:1c:3c:86:67:66:4f:
                    02:34:85:8f:a2:4b:5b:5d:97:b3:59:c6:2b:40:52:
                    57:22:03:64:b3:d1:6f:e5:dc:6b:27:ad:d4:a4:73:
                    cd:f6:89:f7:7d:29:3b:26:93:67:cf:b1:64:e8:8e:
                    66:bf:46:62:fd:da:68:48:23:b0:1e:6a:5c:54:d3:
                    5f:87:9c:d1:71:62:d9:39:46:24:69:91:b1:f6:4f:
                    87:dd:d2:b4:db:15:d6:41:0b:6d:6a:94:b7:26:9b:
                    81:ac:f7:43:d8:ff:ac:5b:5f:61:0c:a4:8b:bb:97:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EE:B8:11:B7:E1:57:56:9A:FB:29:6C:FA:A6:2C:83:31:6F:8B:CB
            X509v3 Authority Key Identifier:
                keyid:B3:E4:5F:F3:FD:21:FB:77:5F:75:03:0B:7B:24:C0:24:E3:70:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E45FF3FD21FB775F75030B7B24C024E370C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnrDE617qkji7j485mutu9dW6AawpoVSyS3jaTxb4ush/1/323830343a6233383a3a2f33322d3438203d3e203532373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:47:9f:d3:95:1a:b5:86:e2:45:8c:7c:f8:ff:47:fa:fc:f7:
         6e:2c:75:96:0c:e4:5c:33:6d:dd:83:05:c2:d0:e0:ab:5d:2a:
         57:18:c5:24:53:61:d8:23:a5:ea:97:03:20:34:b3:58:84:0c:
         7f:cf:75:67:f9:16:6b:63:54:70:d4:c5:15:8d:69:5b:dd:39:
         c7:aa:cd:c6:27:75:d6:26:22:8b:17:71:71:32:0f:27:90:76:
         a2:17:a0:03:3a:93:7f:13:1c:ac:47:e1:bc:58:d4:64:f2:f1:
         d4:b9:b4:4d:a9:3d:38:18:04:42:7b:d0:d7:b5:c7:6d:1b:d7:
         71:f0:ab:ac:ef:0f:ea:3b:9b:5c:76:9d:dd:ca:83:27:f7:f0:
         6f:65:42:4a:15:23:7f:e0:20:35:17:a1:b9:70:73:36:00:1d:
         99:41:7d:c8:ab:da:f2:97:a0:d4:2f:6e:53:69:54:46:d9:40:
         3d:24:23:8e:6e:7b:ff:7c:27:9c:e5:fb:67:5f:c5:2f:82:2f:
         42:fd:a3:e8:b2:fa:04:e6:7f:9a:62:0f:bc:e6:95:6b:4e:85:
         ff:37:78:15:b9:64:22:8c:4b:29:a0:cb:76:68:48:54:93:6b:
         53:ba:0d:c1:af:a6:6c:4f:a3:a9:3d:8a:73:73:35:b3:ff:9b:
         14:0d:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:06:34 2025 by rpki-client