Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a633030303a3a2f33342d3334203d3e203532373231.roa
File:                     323830343a323636343a633030303a3a2f33342d3334203d3e203532373231.roa (raw, json)
Hash identifier:          D1RSS/HiWXNeLkyP8Jy7vouvus/i2HaOiLYGFMPGNoo=
Subject key identifier:   49:00:05:9D:EF:5D:4A:03:7C:9A:A9:A4:C2:7A:32:86:74:57:44:2D
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       30EF79B5EF5A02CA088AA6487680BB2C06003732
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a633030303a3a2f33342d3334203d3e203532373231.roa
Signing time:             Fri 25 Apr 2025 14:50:37 +0000
ROA not before:           Fri 25 Apr 2025 14:45:37 +0000
ROA not after:            Fri 24 Apr 2026 14:50:37 +0000
asID:                     52721
IP address blocks:        2804:2664:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ef:79:b5:ef:5a:02:ca:08:8a:a6:48:76:80:bb:2c:06:00:37:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:37 2025 GMT
            Not After : Apr 24 14:50:37 2026 GMT
        Subject: CN=4900059DEF5D4A037C9AA9A4C27A32867457442D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:23:d9:84:ad:4e:c0:1a:d3:0f:fe:9b:18:0b:
                    00:4a:71:b7:99:65:01:26:49:57:99:0f:19:2d:d0:
                    73:6c:55:e6:8d:63:3c:87:e0:f4:6e:bb:e2:7d:8b:
                    54:37:e3:43:90:d2:05:e3:0d:9b:aa:db:75:e7:b8:
                    ba:18:d7:92:6d:72:ea:dc:dd:55:98:ed:29:c5:82:
                    4a:2c:9d:e4:1c:c1:68:16:87:43:72:06:64:07:d0:
                    35:f2:84:15:a1:fc:16:53:98:3b:f1:8e:e8:21:2e:
                    63:fe:3e:ff:9e:b3:5a:ee:d2:46:1b:0f:4e:82:9b:
                    e0:d9:a1:3f:6d:7a:9c:b0:ea:a0:de:c1:af:59:e2:
                    6d:70:9e:ad:c8:76:0a:fa:86:9c:45:41:bd:1a:b5:
                    61:11:58:c4:f9:b2:e8:3d:9a:f4:6a:7a:82:95:6c:
                    a3:6d:ca:5f:f4:a2:51:51:f2:0e:34:17:10:b3:a8:
                    58:27:05:ee:a4:40:62:66:71:fa:49:7d:4b:b1:34:
                    ee:9a:2e:bc:41:49:19:a7:9d:5a:de:37:86:51:74:
                    23:6a:ce:1b:90:2c:5f:5f:ce:d6:be:d3:e0:a1:1d:
                    a9:1d:c7:da:67:c0:28:11:74:35:7c:d7:2c:38:1f:
                    2a:99:c8:b8:76:fa:62:d5:51:9a:f8:1d:e5:7f:7f:
                    e6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:00:05:9D:EF:5D:4A:03:7C:9A:A9:A4:C2:7A:32:86:74:57:44:2D
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a633030303a3a2f33342d3334203d3e203532373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2664:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:18:e6:f2:b0:57:68:8d:47:a2:0a:3d:64:1e:87:b8:f9:
         31:41:a9:6a:0b:1f:6b:e9:f4:af:b2:7c:c4:62:bc:7a:a1:ab:
         1d:ac:71:6e:4d:92:7f:70:86:c1:78:96:9c:1f:91:2e:a2:e6:
         84:e2:1b:29:16:91:0e:43:d8:2a:bc:4b:e0:92:e1:0f:50:63:
         e8:63:79:6e:81:51:4b:12:15:00:39:8d:f8:03:de:42:da:c4:
         5b:14:5e:c0:34:04:02:65:9a:1a:b4:ac:33:ab:98:47:e2:6e:
         eb:61:fe:1a:2b:61:3a:a6:c2:dc:e8:3a:d3:16:77:3b:bb:80:
         4f:18:95:8c:e3:9d:41:d7:50:ae:e0:6b:43:3a:86:49:c4:8a:
         1e:e0:d5:08:4a:aa:46:cd:15:48:38:4f:8e:ca:cb:95:43:ff:
         d7:39:71:a5:b9:b3:33:b5:81:1c:e5:09:86:0e:ec:d3:7a:2f:
         58:37:e5:dd:1a:39:73:1e:c1:45:90:37:bd:f9:68:7e:e3:60:
         1c:11:a7:05:69:cc:0e:10:98:ac:6f:3d:75:b6:6d:c3:f7:31:
         14:84:b5:b8:89:ff:8b:2a:ad:7e:5a:eb:15:94:c9:ac:76:91:
         1c:54:58:13:8a:33:ea:89:40:db:21:87:60:5a:43:5f:07:3a:
         21:13:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:36:47 2025 by rpki-client