Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/323830343a323766383a3a2f33322d3438203d3e20323633393332.roa
File:                     323830343a323766383a3a2f33322d3438203d3e20323633393332.roa (raw, json)
Hash identifier:          T7nYDmCeag0z+Va+sZOdCJrB50L9dlVkTRXGy4aqYLA=
Subject key identifier:   AA:18:18:78:B0:C2:CE:95:05:48:D0:FB:71:0A:92:68:D6:73:A8:73
Certificate issuer:       /CN=DC2E44207997D76B55B0EE905DAC1F10B2550C4E
Certificate serial:       49C8386BBCA22750F63CE746E6D01F2C33BDA762
Authority key identifier: DC:2E:44:20:79:97:D7:6B:55:B0:EE:90:5D:AC:1F:10:B2:55:0C:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/323830343a323766383a3a2f33322d3438203d3e20323633393332.roa
Signing time:             Thu 06 Mar 2025 13:52:03 +0000
ROA not before:           Thu 06 Mar 2025 13:47:03 +0000
ROA not after:            Thu 05 Mar 2026 13:52:03 +0000
asID:                     263932
IP address blocks:        2804:27f8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.crl
                          rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 02:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c8:38:6b:bc:a2:27:50:f6:3c:e7:46:e6:d0:1f:2c:33:bd:a7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC2E44207997D76B55B0EE905DAC1F10B2550C4E
        Validity
            Not Before: Mar  6 13:47:03 2025 GMT
            Not After : Mar  5 13:52:03 2026 GMT
        Subject: CN=AA181878B0C2CE950548D0FB710A9268D673A873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:d4:cb:da:94:15:ac:59:40:48:bf:8d:7e:
                    b5:6d:c5:02:5c:1d:1c:3f:08:9b:4b:13:0d:4d:47:
                    93:61:c9:2c:2d:18:64:04:c1:53:41:5c:8e:ad:67:
                    c8:db:ff:01:ec:fe:77:8d:83:41:3d:61:3f:05:ed:
                    c7:d5:62:e3:70:60:81:33:16:1d:10:2a:db:c2:8c:
                    ec:28:70:ff:33:23:87:5f:46:06:fe:04:c6:f0:c3:
                    4c:cd:b4:78:8a:1c:cf:21:ca:72:ff:90:9d:02:12:
                    41:4b:88:a8:5d:94:74:55:0c:00:b3:f2:ec:86:80:
                    e2:a9:7e:43:4d:e8:7b:1a:f0:7b:c9:e7:87:74:fd:
                    f4:1e:fc:ee:73:c3:ad:a5:14:4c:77:cf:20:82:16:
                    26:8b:da:26:35:63:4e:0c:37:7a:d4:d4:6f:2f:06:
                    e6:f1:5b:dd:d0:a0:d1:e4:e7:ee:0d:04:2e:33:70:
                    c9:05:7b:02:c0:4b:a7:fa:66:27:38:04:b5:5b:89:
                    f1:86:84:f5:71:74:4f:e7:f8:fa:e7:e4:92:c6:30:
                    d9:8b:6a:88:6c:83:7f:0f:c4:8d:7c:ec:0f:f9:28:
                    04:64:3a:90:8f:67:ba:3a:f1:81:54:c8:11:de:d9:
                    49:d3:e1:0e:61:aa:e1:98:61:e6:ba:2c:55:46:d7:
                    84:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:18:18:78:B0:C2:CE:95:05:48:D0:FB:71:0A:92:68:D6:73:A8:73
            X509v3 Authority Key Identifier:
                keyid:DC:2E:44:20:79:97:D7:6B:55:B0:EE:90:5D:AC:1F:10:B2:55:0C:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2E44207997D76B55B0EE905DAC1F10B2550C4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/1/323830343a323766383a3a2f33322d3438203d3e20323633393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:e6:99:a1:f2:a0:84:7a:70:90:6f:c6:39:e9:e9:80:c6:a2:
         39:21:ec:28:23:b4:1e:77:f1:05:25:27:82:d1:aa:3c:12:d7:
         cc:1f:c6:dd:36:8d:a5:50:30:ec:52:2e:78:ff:46:89:23:ac:
         42:38:ed:98:02:e3:65:af:34:35:ec:b7:4c:55:0d:76:c2:55:
         42:31:18:82:a8:ad:3d:2b:78:85:c0:d8:cf:ee:5c:99:6c:ed:
         ec:97:14:01:eb:c4:c8:80:44:fb:10:c9:ca:b5:01:e9:a6:46:
         3e:a0:63:4d:ba:98:e8:ee:5b:b0:4f:ca:f3:5a:e9:59:20:c1:
         cb:39:92:b8:6d:d6:06:6a:c1:8c:70:e0:d8:59:08:0b:16:11:
         61:8c:5a:e1:dc:3b:18:20:22:77:3c:cb:8b:b4:00:8d:71:22:
         79:eb:ee:0d:75:c0:c2:36:ff:a2:4f:b8:c8:da:8d:63:d3:86:
         89:a1:2a:d6:7d:a9:e5:07:a0:88:ed:70:5a:e9:99:54:0b:64:
         21:47:82:7f:c7:7f:f4:55:a5:3a:05:9c:18:3a:15:3c:0b:d9:
         45:1b:e8:fd:ec:48:7f:e0:ef:96:7e:f5:9c:43:0b:d7:01:1a:
         fc:71:13:73:ef:4e:79:71:7a:d9:be:8a:84:c9:de:50:0b:e8:
         56:03:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:38:33 2025 by rpki-client