Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3438203d3e20323731313636.roa
File:                     323830343a373734343a3a2f33322d3438203d3e20323731313636.roa (raw, json)
Hash identifier:          7K0s8oCBXvoVfQTbl17i+uuOaW3UZZ4rfPn6FdB3Uxg=
Subject key identifier:   8B:26:2F:F5:06:99:2C:01:22:A0:33:8F:C7:30:13:E0:63:43:7E:0F
Certificate issuer:       /CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
Certificate serial:       13754F18C6D248028402C7D2A22248F04D2E98CD
Authority key identifier: 2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3438203d3e20323731313636.roa
Signing time:             Thu 10 Apr 2025 13:14:58 +0000
ROA not before:           Thu 10 Apr 2025 13:09:58 +0000
ROA not after:            Thu 09 Apr 2026 13:14:58 +0000
asID:                     271166
IP address blocks:        2804:7744::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl
                          rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:75:4f:18:c6:d2:48:02:84:02:c7:d2:a2:22:48:f0:4d:2e:98:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC
        Validity
            Not Before: Apr 10 13:09:58 2025 GMT
            Not After : Apr  9 13:14:58 2026 GMT
        Subject: CN=8B262FF506992C0122A0338FC73013E063437E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:a6:8c:b5:fc:ce:c4:62:3f:f7:ca:71:30:
                    4d:db:f2:18:d1:c3:7f:e6:1d:3b:e4:40:ce:d2:e8:
                    26:60:f3:bd:b3:77:4f:c7:bf:50:8a:e9:3a:7d:0a:
                    0b:51:ee:bb:86:1e:07:1b:aa:53:f6:c8:33:67:e6:
                    42:f6:d4:3e:5d:4c:34:6e:dd:31:61:c6:2e:f7:28:
                    00:60:a3:0a:9a:44:51:a2:09:a5:79:fe:aa:1d:79:
                    21:b8:c8:dc:b3:4c:5d:10:29:31:5b:4d:45:59:f0:
                    07:b8:c7:71:f1:85:b3:89:36:13:13:74:42:f9:f2:
                    a5:c3:06:0b:bd:c4:56:13:3b:25:aa:34:17:bf:55:
                    6b:95:ce:77:d7:b4:ed:15:52:36:57:cb:0e:bf:39:
                    ac:22:6a:97:0b:84:b0:b7:9e:38:47:de:27:5e:ea:
                    40:bf:52:da:02:55:89:17:cb:55:0c:5d:7e:12:2f:
                    f1:45:75:1f:08:0b:c8:d8:60:29:89:b3:19:40:f0:
                    ee:fe:de:71:81:d3:f1:c0:92:07:d3:5a:91:d9:b3:
                    49:93:50:b7:18:0d:1e:19:6d:40:cd:74:b9:20:5b:
                    15:c8:31:92:91:3c:9b:b2:2f:95:cf:87:af:db:2b:
                    a0:43:47:29:a3:ba:fa:83:00:4b:61:46:9d:b9:b6:
                    f7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:26:2F:F5:06:99:2C:01:22:A0:33:8F:C7:30:13:E0:63:43:7E:0F
            X509v3 Authority Key Identifier:
                keyid:2E:88:86:F9:D3:C3:B9:E0:35:3D:B7:C7:2D:18:4C:7D:C5:02:65:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8886F9D3C3B9E0353DB7C72D184C7DC50265FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/323830343a373734343a3a2f33322d3438203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7744::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:ba:33:27:86:1d:4e:09:ab:b9:cd:7e:94:af:12:05:17:f9:
         25:1a:3c:3d:56:10:13:c0:32:50:d7:fd:fb:a7:42:59:a4:06:
         1a:5c:01:93:84:a2:7a:47:2b:a4:b1:fe:05:17:ef:1b:da:eb:
         70:f5:68:08:71:34:a9:6f:90:f0:8a:cd:48:d7:3f:4b:ea:92:
         ae:5b:d5:89:c7:6a:0d:e4:1a:42:be:60:b1:ec:ad:20:91:ee:
         1a:ea:b4:46:a6:c4:66:70:36:3b:33:e6:f2:a9:ba:8f:d8:6c:
         fa:8b:93:58:f7:63:6e:12:9f:29:f5:d3:2b:6a:6f:20:15:62:
         d7:76:a3:5b:a7:d7:3d:2d:cd:7b:c8:3d:81:42:ae:3e:4c:da:
         c6:57:02:44:1d:93:69:29:18:ba:4f:2a:f9:b7:05:21:4b:cd:
         61:50:69:df:86:43:a8:c2:cf:99:2a:b6:61:33:ae:da:a1:a7:
         f6:6d:a5:f7:72:36:a9:2e:57:fe:63:a9:14:62:f0:58:e7:3b:
         49:3d:82:60:32:c9:7c:02:57:0f:36:4e:14:cc:f4:cd:46:74:
         ff:98:bf:1f:67:1b:6a:37:16:3f:5a:a3:ba:04:9e:c5:89:b1:
         89:fb:1a:9e:07:1b:ba:61:aa:a2:7d:c6:07:36:cf:9d:19:ad:
         3a:96:1a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:30:42 2025 by rpki-client