Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a3a2f33322d3438203d3e20323634393030.roa
File:                     323830343a326639343a3a2f33322d3438203d3e20323634393030.roa (raw, json)
Hash identifier:          vhvxSeJd+tzRkEzkUqJfnoWG2u32D84RmUUxjVexbJA=
Subject key identifier:   24:75:7A:CD:C8:A8:F2:22:4F:1D:F2:F5:06:D2:BC:14:2C:69:63:6C
Certificate issuer:       /CN=CDB34CF4AFC01721153990AE1A10D922F7507546
Certificate serial:       3408D0C963E3CC227D8C0CDBBBE0A575F3E2DEFD
Authority key identifier: CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a3a2f33322d3438203d3e20323634393030.roa
Signing time:             Wed 07 May 2025 19:31:22 +0000
ROA not before:           Wed 07 May 2025 19:26:22 +0000
ROA not after:            Wed 06 May 2026 19:31:22 +0000
asID:                     264900
IP address blocks:        2804:2f94::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl
                          rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 08:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:08:d0:c9:63:e3:cc:22:7d:8c:0c:db:bb:e0:a5:75:f3:e2:de:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDB34CF4AFC01721153990AE1A10D922F7507546
        Validity
            Not Before: May  7 19:26:22 2025 GMT
            Not After : May  6 19:31:22 2026 GMT
        Subject: CN=24757ACDC8A8F2224F1DF2F506D2BC142C69636C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2d:b8:20:2c:a6:ca:c0:30:7a:0a:ac:4e:d5:
                    11:dd:f9:5e:f3:84:5c:74:87:33:b6:6d:4c:c7:91:
                    c5:1e:db:13:fa:d6:98:9e:c1:fd:ab:0b:4e:b3:31:
                    21:f8:8e:c3:26:bd:44:ed:4f:45:e4:68:af:cb:6e:
                    84:35:2c:88:7c:c7:26:0a:3d:12:99:8f:05:22:aa:
                    7e:5a:a1:59:a5:32:b4:9c:ca:cd:90:c0:be:2a:e1:
                    26:97:eb:bb:55:d6:25:af:5e:fe:58:28:74:8f:af:
                    a2:c2:15:85:1c:5c:e6:1b:e1:67:5b:aa:79:92:cd:
                    00:b7:75:95:45:3e:06:eb:2a:5d:39:55:af:15:f5:
                    be:6d:b3:d9:1f:ba:83:be:0d:25:52:47:05:f1:44:
                    06:58:1f:3a:b7:f3:7b:4e:b3:1d:f0:71:7f:07:d7:
                    4a:62:88:5d:51:21:e2:14:fa:d1:be:60:91:68:70:
                    bf:7e:36:af:fc:11:e0:62:8d:b7:73:9a:72:31:7d:
                    24:01:1f:c8:ec:8f:c5:bd:8a:a6:d8:b7:87:4d:42:
                    4c:a5:fc:17:45:4f:4e:1f:57:9c:47:ff:c5:b1:84:
                    3a:bb:48:c1:12:dd:25:4c:3e:24:b6:1b:4d:c7:71:
                    8b:1b:af:69:c4:5b:1f:31:f1:10:88:93:18:e4:c9:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:75:7A:CD:C8:A8:F2:22:4F:1D:F2:F5:06:D2:BC:14:2C:69:63:6C
            X509v3 Authority Key Identifier:
                keyid:CD:B3:4C:F4:AF:C0:17:21:15:39:90:AE:1A:10:D9:22:F7:50:75:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/CDB34CF4AFC01721153990AE1A10D922F7507546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CDB34CF4AFC01721153990AE1A10D922F7507546.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/323830343a326639343a3a2f33322d3438203d3e20323634393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f94::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:a3:4d:b7:67:4f:da:12:e0:e6:fd:41:23:e8:b1:a5:af:e8:
         5b:c5:d5:43:cb:75:5e:5f:6c:db:1d:97:84:20:12:ca:7e:f7:
         92:67:c8:2d:40:85:3c:0a:5c:5a:2b:39:88:37:b3:ed:59:88:
         cc:f0:ac:65:4b:a9:6c:f8:14:d7:e3:8c:e6:a0:51:70:08:9d:
         f8:32:4a:5a:90:f6:83:6b:4b:d5:8b:62:7e:03:aa:fa:9f:bc:
         c6:84:b6:e7:c0:8e:a3:fe:76:42:ba:ca:ee:bc:8b:39:68:cd:
         0d:db:08:8c:77:e5:75:ea:ba:c7:a6:f9:c8:87:9f:c5:47:70:
         79:d8:24:38:62:f1:aa:fd:a2:08:ee:b1:59:e3:5f:3a:f0:b5:
         26:83:85:fe:25:0d:a7:24:dc:c0:a3:e4:29:37:a8:ca:97:e8:
         c2:ab:b2:70:35:e5:d7:88:85:e6:fe:34:18:85:28:a5:8c:58:
         96:9b:75:ee:e7:9c:bf:72:cd:51:a5:a5:1d:72:ea:be:cd:45:
         58:a7:51:e9:72:d2:2a:30:d3:d3:5e:af:3e:30:d6:6f:b9:ea:
         15:87:13:93:2e:0d:f7:46:7c:5b:14:11:db:90:94:ac:1f:cd:
         8d:7d:30:dc:d4:5c:e3:df:b4:fd:4b:cf:d7:f5:05:84:99:39:
         65:52:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:27:46 2025 by rpki-client