Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33342d3334203d3e20323639323534.roa
File:                     323830343a363163303a3a2f33342d3334203d3e20323639323534.roa (raw, json)
Hash identifier:          X06jJ6i+ESSx/OU9p9xyNsO+1vWsVJG6D5oMo0I9N+8=
Subject key identifier:   ED:4E:45:78:5D:32:9C:9E:F4:D5:6B:88:B0:E9:9C:60:D4:7B:03:FE
Certificate issuer:       /CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
Certificate serial:       27F9101B765E94E6919677666B4E4F260BCA1C57
Authority key identifier: 04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33342d3334203d3e20323639323534.roa
Signing time:             Mon 10 Mar 2025 13:49:47 +0000
ROA not before:           Mon 10 Mar 2025 13:44:47 +0000
ROA not after:            Mon 09 Mar 2026 13:49:47 +0000
asID:                     269254
IP address blocks:        2804:61c0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl
                          rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 18:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f9:10:1b:76:5e:94:e6:91:96:77:66:6b:4e:4f:26:0b:ca:1c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CD905DA8053D1666B20B2E6866FAFDFAAD10FE
        Validity
            Not Before: Mar 10 13:44:47 2025 GMT
            Not After : Mar  9 13:49:47 2026 GMT
        Subject: CN=ED4E45785D329C9EF4D56B88B0E99C60D47B03FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:60:a9:f6:73:14:1b:1f:45:87:6c:c7:0f:
                    44:30:2f:62:f9:56:e8:81:9d:a7:dc:cd:e3:c5:f1:
                    d9:38:8f:10:0f:50:3c:dd:6d:2a:c3:ed:7d:c6:eb:
                    48:38:d8:9d:e3:62:d4:b1:02:3d:75:78:77:71:8a:
                    dc:ac:be:f6:8a:e9:12:97:52:eb:43:55:d3:fc:25:
                    86:9b:36:6d:63:42:63:33:69:4a:4e:e7:47:e3:45:
                    7f:81:25:1b:bc:5c:ab:71:2f:e1:4b:5e:1f:38:93:
                    ac:6a:dd:2a:bd:a1:1b:1b:f0:9a:a3:1b:6c:64:48:
                    a7:fc:57:5e:83:fa:a4:db:a5:f4:a1:2d:c6:37:3c:
                    69:fb:ad:9c:cd:1d:5a:82:36:3e:a6:93:95:52:22:
                    85:04:ee:a2:46:9e:56:56:5d:00:55:67:3e:14:87:
                    ec:73:01:00:d5:8d:29:cd:0f:e0:83:00:9a:f3:30:
                    16:d1:c6:ed:1b:af:70:8d:34:25:bf:93:98:75:28:
                    57:b3:28:40:1c:5b:a2:51:29:39:c1:66:93:91:88:
                    5f:f0:da:65:a9:34:4a:ef:38:2f:8e:a2:ac:79:d9:
                    9f:a9:74:9e:43:6b:70:0a:fc:99:60:ec:3f:81:d7:
                    13:03:33:49:e1:17:95:bb:9e:f0:d7:67:8a:87:2f:
                    50:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4E:45:78:5D:32:9C:9E:F4:D5:6B:88:B0:E9:9C:60:D4:7B:03:FE
            X509v3 Authority Key Identifier:
                keyid:04:CD:90:5D:A8:05:3D:16:66:B2:0B:2E:68:66:FA:FD:FA:AD:10:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04CD905DA8053D1666B20B2E6866FAFDFAAD10FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/323830343a363163303a3a2f33342d3334203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61c0::/34

    Signature Algorithm: sha256WithRSAEncryption
         b4:12:22:31:29:84:bb:4b:87:66:a9:5e:1a:c1:ed:5e:a4:b5:
         17:a7:e3:73:98:4f:c2:64:6d:20:de:48:27:4e:54:16:9f:76:
         5c:d5:b9:a9:ab:c2:29:83:01:43:38:be:be:21:3f:da:dd:9e:
         f1:f8:c1:f5:98:af:40:a0:52:f9:cc:2c:df:9c:11:a0:11:42:
         80:b8:78:df:d6:65:0e:92:bf:1f:ba:c8:46:59:8d:82:f1:b1:
         d9:fa:9d:79:b3:90:59:6d:7c:54:83:8f:53:8a:61:3c:77:cb:
         09:82:6f:4a:79:4d:38:68:06:0e:fb:2b:f2:ab:a0:dd:d6:b0:
         4b:8b:bb:f9:25:be:05:ba:ae:0e:a7:c3:e2:a3:6f:8c:43:8c:
         1d:ca:1f:c2:ff:6f:c9:6f:2c:a8:bf:02:c2:f1:9e:ea:87:fd:
         56:f4:dd:51:7d:1a:13:33:0d:df:e6:f7:08:10:7e:5d:9d:3d:
         89:5f:0a:ce:ea:b3:10:3f:c8:3a:e7:cb:16:9d:84:19:1a:7c:
         d0:32:e0:8c:8c:69:20:11:00:05:49:3f:b3:c7:57:9c:d7:26:
         1b:c3:7d:ba:ff:3d:b1:b0:e7:db:02:86:a8:f3:bc:7f:89:e5:
         4f:62:28:46:fd:8c:9a:ae:2e:50:94:27:51:b9:2d:da:de:3f:
         fc:0d:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:37:27 2025 by rpki-client