Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/323830343a316433343a3a2f33322d3438203d3e20323634333534.roa
File:                     323830343a316433343a3a2f33322d3438203d3e20323634333534.roa (raw, json)
Hash identifier:          a3N/V8aHqktmXHIi586Wg0nt7SnrzILQK/aIuH3xgL8=
Subject key identifier:   F9:11:3E:6D:1C:03:E5:0D:30:81:7E:60:CB:A7:D1:E7:FB:A0:5E:D4
Certificate issuer:       /CN=3701790BFCD740698BF2D59FB7800495728B1041
Certificate serial:       58D3B0584D2A5FF14706A120982513818CF6FDB0
Authority key identifier: 37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/323830343a316433343a3a2f33322d3438203d3e20323634333534.roa
Signing time:             Thu 06 Mar 2025 05:55:24 +0000
ROA not before:           Thu 06 Mar 2025 05:50:24 +0000
ROA not after:            Thu 05 Mar 2026 05:55:24 +0000
asID:                     264354
IP address blocks:        2804:1d34::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl
                          rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d3:b0:58:4d:2a:5f:f1:47:06:a1:20:98:25:13:81:8c:f6:fd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3701790BFCD740698BF2D59FB7800495728B1041
        Validity
            Not Before: Mar  6 05:50:24 2025 GMT
            Not After : Mar  5 05:55:24 2026 GMT
        Subject: CN=F9113E6D1C03E50D30817E60CBA7D1E7FBA05ED4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:37:17:37:ad:4d:40:07:b7:00:98:5f:8b:
                    ae:3d:84:3e:d2:fd:5a:44:b0:a0:39:28:f3:b7:79:
                    8f:6b:f7:35:6e:9f:9c:1b:3c:b3:b2:59:c4:ae:7f:
                    eb:d3:94:2d:52:73:4e:b7:a6:1f:95:20:74:7b:cc:
                    b8:d7:c3:50:d4:01:d5:01:41:cd:80:8a:03:d0:e5:
                    00:b1:0a:3e:b8:7e:4d:dc:2d:98:83:4e:2a:2f:29:
                    6a:d8:9a:b1:48:52:97:0b:3a:17:30:ec:24:1b:ae:
                    29:54:8e:40:c0:6b:56:4e:5f:d7:4c:9f:6d:2f:61:
                    28:10:6b:5d:fb:ce:d4:61:d1:6f:d0:6d:a1:9b:12:
                    a6:06:d8:e9:90:8a:93:22:4c:a1:d0:e3:02:34:13:
                    37:b0:c2:7d:fb:7a:2b:07:f5:72:39:fb:0e:ca:0f:
                    40:f1:b2:c8:fa:90:fe:f6:3c:15:c4:ad:6b:23:19:
                    a0:9f:7c:3a:32:5b:b3:57:cb:3c:c3:7d:16:d9:19:
                    e7:4c:97:8c:a9:88:6c:df:c0:c4:03:c7:3f:06:0e:
                    c2:61:5f:dc:a3:62:fb:59:ad:b3:40:54:69:d4:0c:
                    d7:1a:1b:34:eb:bb:e0:fc:5d:f2:85:81:a3:9a:63:
                    ca:a8:ba:35:f5:c8:00:84:6e:de:54:87:63:1a:cd:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:11:3E:6D:1C:03:E5:0D:30:81:7E:60:CB:A7:D1:E7:FB:A0:5E:D4
            X509v3 Authority Key Identifier:
                keyid:37:01:79:0B:FC:D7:40:69:8B:F2:D5:9F:B7:80:04:95:72:8B:10:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/3701790BFCD740698BF2D59FB7800495728B1041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3701790BFCD740698BF2D59FB7800495728B1041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/odX2xJL2T7Eh3ptkU4v3LinCDUhzKT2xyFgeWPBrshS/1/323830343a316433343a3a2f33322d3438203d3e20323634333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d34::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:65:0d:96:e5:57:5c:e1:fa:5d:52:53:fc:9b:44:12:64:07:
         47:d3:43:6e:77:78:cd:c0:4b:b7:54:c0:16:e7:ba:7c:c5:08:
         e4:c3:4d:5e:c9:39:f0:7f:3b:04:1b:dd:3d:ab:cc:5e:9e:34:
         4c:ea:5b:48:eb:34:7d:59:78:3c:95:87:2a:88:c5:8d:08:b4:
         33:07:20:ce:77:05:5a:8b:18:e0:25:f5:6e:1b:6f:dc:0d:d4:
         13:de:d5:c6:de:01:e5:d5:51:d9:a4:e6:85:03:3b:91:f1:0b:
         99:5f:7a:08:33:d2:ef:2a:d8:94:99:cd:81:a6:68:6c:a5:ab:
         aa:6a:bf:2e:c5:06:7e:8c:a6:fb:ed:e4:a7:c6:66:1f:95:76:
         0a:1e:9e:72:75:86:9f:0a:84:2c:ad:eb:c9:4b:c6:59:51:7f:
         bb:97:37:59:1d:e2:92:92:3d:59:02:ef:32:f9:c9:23:31:f2:
         a8:5b:1e:6e:c1:7f:eb:fa:9a:79:20:9b:56:98:c3:f5:57:15:
         de:c3:a3:70:d3:5f:cc:f9:40:62:a0:54:50:73:5e:da:60:17:
         7a:eb:3e:ff:ee:88:ce:34:54:85:de:33:0e:f5:f1:d3:e2:cb:
         c9:1f:bc:6a:d4:fa:10:48:4b:07:7d:02:17:3e:70:d8:1e:67:
         21:e0:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:17:43 2025 by rpki-client