Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a3a2f33322d3332203d3e20323638313337.roa
File:                     323830343a353839343a3a2f33322d3332203d3e20323638313337.roa (raw, json)
Hash identifier:          ZncDmcAcmVngk0k7rmyCWcOwvgcmWcP/2o1TDjTZmhw=
Subject key identifier:   92:02:5C:DC:06:9C:00:A9:81:E1:30:5F:0F:74:D9:2B:A5:2F:E1:E9
Certificate issuer:       /CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
Certificate serial:       2DC584B6EC9B0C6A84247B7B8FAA0D4142139A6E
Authority key identifier: 3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a3a2f33322d3332203d3e20323638313337.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     268137
IP address blocks:        2804:5894::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl
                          rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 13:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c5:84:b6:ec:9b:0c:6a:84:24:7b:7b:8f:aa:0d:41:42:13:9a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=92025CDC069C00A981E1305F0F74D92BA52FE1E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:2f:e5:af:ca:7a:e0:98:60:85:10:91:5f:
                    89:68:07:de:a1:0e:19:f2:db:a1:04:e7:3d:0f:b2:
                    8d:d8:16:3b:60:71:6f:39:14:06:cb:6d:74:d7:97:
                    69:23:13:27:8a:af:1b:a1:f4:2a:87:82:14:ce:3b:
                    46:ca:38:8a:bf:7a:78:25:ec:b9:18:51:e2:dc:5d:
                    a8:62:bf:a0:21:97:60:e0:66:04:f9:85:32:9f:b5:
                    a3:ec:b8:db:b9:ba:ee:61:ef:00:ea:da:03:4c:f3:
                    4f:55:7b:cb:5e:71:f5:fd:6b:b0:44:af:d8:aa:c7:
                    cf:41:89:dd:bf:8e:38:00:35:19:b0:a5:6d:8b:78:
                    27:0f:e4:b1:ad:59:b4:d8:f9:e1:cf:20:ca:f4:a2:
                    7a:d6:cd:a1:87:ea:9d:a4:f0:ad:6e:8a:02:c3:0c:
                    b8:35:94:bb:3a:32:fe:2f:80:f8:6f:a8:f5:05:f3:
                    ad:60:97:56:7d:ee:49:b4:7e:97:b5:6d:51:dd:c8:
                    f5:ad:f9:30:4c:12:1b:20:d6:34:a6:72:dc:a3:0f:
                    83:bc:fc:29:42:62:f3:d4:4b:4d:87:70:ef:f2:13:
                    41:d9:62:af:88:70:9c:aa:39:76:6c:b0:cc:3d:bb:
                    da:36:9a:ef:d4:07:a1:35:6e:e3:a2:93:22:c7:4e:
                    e0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:02:5C:DC:06:9C:00:A9:81:E1:30:5F:0F:74:D9:2B:A5:2F:E1:E9
            X509v3 Authority Key Identifier:
                keyid:3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/323830343a353839343a3a2f33322d3332203d3e20323638313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5894::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:87:fa:35:54:35:57:ef:d0:07:a7:f5:87:60:fd:7a:8a:19:
         f3:3d:b1:16:ea:71:de:11:25:d8:57:25:91:68:9e:ac:63:76:
         72:1c:87:7f:cd:da:5b:23:25:da:c0:5a:1e:cb:d5:f9:31:77:
         7e:f9:f4:79:1a:b0:f3:72:7c:6d:a5:1b:f6:0b:08:ef:45:c3:
         8e:a8:c8:af:ce:b9:8e:ab:1a:25:15:01:23:af:ff:b7:d7:b9:
         a0:57:02:ef:4a:4c:6a:a7:fe:93:c8:a7:ba:89:d7:47:1b:5a:
         b5:64:cb:f1:41:a7:1d:63:7f:1a:c0:a4:38:02:5d:7e:80:d9:
         2e:ff:42:0d:b7:67:71:e4:1b:e7:46:76:e2:2f:3d:cc:84:38:
         8d:23:5e:cb:d0:ab:fa:33:62:ad:ae:33:b3:15:58:fc:06:0f:
         73:81:c0:62:8e:ef:5f:98:28:18:80:9d:06:ed:13:12:af:16:
         58:42:f7:3a:84:14:89:42:ed:06:0a:be:d2:c9:ce:a9:45:c0:
         aa:60:1a:21:36:d5:4b:62:44:ee:d6:63:03:79:77:9a:c1:85:
         78:9e:30:43:3d:ae:a1:a3:94:79:a4:27:94:3b:a0:77:ca:e3:
         8d:c6:ec:d1:9f:01:b5:c0:bf:43:78:f1:9c:ad:92:75:71:f9:
         61:8d:51:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:48:42 2025 by rpki-client