Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa
File:                     323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa (raw, json)
Hash identifier:          7xU6ituJjsQwDGXxIYek/Gh69lTlhYjWHLrJgsf6g9I=
Subject key identifier:   E3:60:A6:89:90:4B:AA:54:45:95:19:AA:B8:F2:5D:DA:6F:F1:55:42
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       41637F56DCEE8027C5426AA2802FD3062C4F296E
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:38 +0000
ROA not before:           Fri 25 Apr 2025 14:45:38 +0000
ROA not after:            Fri 24 Apr 2026 14:50:38 +0000
asID:                     52721
IP address blocks:        2804:2664:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 19:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:63:7f:56:dc:ee:80:27:c5:42:6a:a2:80:2f:d3:06:2c:4f:29:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:38 2025 GMT
            Not After : Apr 24 14:50:38 2026 GMT
        Subject: CN=E360A689904BAA54459519AAB8F25DDA6FF15542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:4b:ba:df:60:3f:1d:f3:83:24:7b:86:29:
                    4e:9f:0f:d2:bf:d4:42:43:51:9e:72:90:34:a6:b3:
                    5e:e9:1b:84:d9:74:ec:08:e5:0d:33:e4:87:3d:ed:
                    69:8c:c2:ac:90:f0:b0:f5:d1:7d:a4:a0:d0:a4:18:
                    c5:67:e6:fc:25:01:4f:87:58:6d:a7:54:b3:a2:58:
                    77:ca:79:ef:9c:0c:c7:ef:34:cd:31:73:62:64:c9:
                    62:fa:36:c3:45:2b:75:71:34:cc:75:d6:1d:a4:2e:
                    0e:95:08:6f:83:37:73:3a:2a:0b:22:20:0c:f8:8d:
                    27:1b:6d:b8:46:82:66:11:ad:35:b1:5f:b0:3f:49:
                    b9:e2:67:83:dc:af:a3:98:e3:f3:7a:21:40:66:72:
                    d4:07:a0:35:da:25:b3:b2:e2:2e:4d:07:55:6d:2a:
                    2a:29:90:fd:51:ba:0d:2a:4a:fb:7a:c7:6a:03:52:
                    ee:ec:f8:1d:7d:f7:44:0b:5c:fe:21:7f:34:12:4b:
                    5e:45:b0:7a:75:f3:43:23:40:b5:c0:cf:7c:04:51:
                    56:d9:55:f5:a0:1a:20:11:ea:73:70:aa:f7:99:f5:
                    34:55:11:d8:1c:fc:96:16:29:cd:fd:18:f0:0f:92:
                    f2:a2:dd:76:75:52:a0:2f:8f:d9:45:20:da:38:c8:
                    3c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:60:A6:89:90:4B:AA:54:45:95:19:AA:B8:F2:5D:DA:6F:F1:55:42
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2664:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:53:ca:2a:70:92:63:a1:e0:05:37:62:d1:43:4b:ab:3e:ba:
         51:b7:c4:c4:2e:4d:52:be:42:d1:54:b2:d6:7d:06:5c:e2:c6:
         66:ab:aa:ab:57:48:a4:b7:07:f1:d7:d1:a1:3b:20:b6:75:0f:
         0d:f7:ce:d1:f2:38:39:8b:68:42:fe:f8:dd:26:69:16:f9:12:
         de:12:38:2f:fa:1d:e9:b6:d4:7e:94:69:49:1d:e8:03:46:14:
         3c:5a:22:35:fd:5c:d8:29:20:41:c9:84:f2:f3:90:d8:eb:e5:
         18:68:aa:d0:91:74:05:57:63:4b:9b:e3:e1:8b:6b:6e:3f:c8:
         73:99:33:97:7e:bf:9b:07:f2:32:84:7a:94:ea:be:e8:3d:10:
         81:79:27:cc:62:9b:8a:ea:c3:4a:1d:44:5c:88:69:4a:e2:50:
         4f:e1:39:44:34:67:be:3d:97:05:8a:3e:04:70:e2:b7:40:f8:
         56:f9:b4:f3:3f:cd:48:0a:5a:34:e2:8e:b2:26:6e:df:ea:9b:
         d7:4f:fe:53:9b:d1:12:d6:59:8c:27:63:68:20:1b:35:6c:ae:
         aa:34:6a:cf:d2:3c:56:89:23:21:6b:77:02:16:a6:df:5a:db:
         fd:db:96:21:22:a8:01:d2:4c:7a:84:11:ac:e4:e9:5e:08:42:
         f5:85:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:03:45 2025 by rpki-client