Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/323830343a316435303a3a2f33322d3332203d3e20323634333630.roa
File:                     323830343a316435303a3a2f33322d3332203d3e20323634333630.roa (raw, json)
Hash identifier:          73Fw42pwexn9BGzeAZ+QOti9q8ZzZFPJUAMO0xg+z+4=
Subject key identifier:   69:92:8F:30:FB:E0:11:22:3E:A2:79:1D:75:83:64:C6:05:2F:DF:3C
Certificate issuer:       /CN=2F0B79B6E473982D91807611066BFFF4312B1B2D
Certificate serial:       1DFF8C292C3EEE2467E312C4DFC2D9CB5E03B523
Authority key identifier: 2F:0B:79:B6:E4:73:98:2D:91:80:76:11:06:6B:FF:F4:31:2B:1B:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0B79B6E473982D91807611066BFFF4312B1B2D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/323830343a316435303a3a2f33322d3332203d3e20323634333630.roa
Signing time:             Wed 07 May 2025 13:04:07 +0000
ROA not before:           Wed 07 May 2025 12:59:07 +0000
ROA not after:            Wed 06 May 2026 13:04:07 +0000
asID:                     264360
IP address blocks:        2804:1d50::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/2F0B79B6E473982D91807611066BFFF4312B1B2D.crl
                          rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/2F0B79B6E473982D91807611066BFFF4312B1B2D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0B79B6E473982D91807611066BFFF4312B1B2D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 21:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ff:8c:29:2c:3e:ee:24:67:e3:12:c4:df:c2:d9:cb:5e:03:b5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F0B79B6E473982D91807611066BFFF4312B1B2D
        Validity
            Not Before: May  7 12:59:07 2025 GMT
            Not After : May  6 13:04:07 2026 GMT
        Subject: CN=69928F30FBE011223EA2791D758364C6052FDF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:fe:29:f9:d6:d7:37:6d:77:37:de:a8:8f:
                    12:0b:2b:8f:0b:54:70:4b:38:49:63:50:1b:b1:3e:
                    69:b4:d1:10:20:66:72:fd:b0:ab:2f:dd:32:93:bc:
                    21:ec:f2:8e:93:02:d8:1f:9d:b6:f3:65:b1:b2:67:
                    4c:1b:4b:d1:d5:7d:fe:2f:df:6f:43:d6:3f:68:4c:
                    0f:92:44:6b:82:bd:b2:46:44:4b:7a:2c:19:9a:41:
                    b1:3b:b8:93:35:95:1e:92:21:08:a7:6b:80:88:40:
                    6c:d5:2b:74:33:5c:cd:d2:8a:47:a4:9d:78:b7:19:
                    ed:7b:23:d2:d7:24:23:94:55:93:5a:b5:17:dd:c7:
                    a2:0c:21:b6:1c:cb:f5:c9:2f:6c:9f:50:b6:61:7e:
                    25:49:83:72:1d:a6:63:be:9c:3d:14:96:2d:1c:a1:
                    34:30:43:69:bf:28:90:1c:c3:1d:57:80:fe:ac:14:
                    8c:d7:f0:ec:da:e9:38:cc:2d:46:dd:63:d8:be:53:
                    8d:b4:f6:8c:a3:ef:de:c2:a0:b9:08:82:65:2e:cc:
                    52:1a:27:aa:74:d9:a9:4f:e0:3e:23:6e:10:a3:a8:
                    b7:74:6f:0e:fd:5c:89:a6:7d:e6:2f:08:f7:25:e5:
                    bb:e9:b8:ca:73:0d:91:c8:c0:20:0c:19:31:15:52:
                    88:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:92:8F:30:FB:E0:11:22:3E:A2:79:1D:75:83:64:C6:05:2F:DF:3C
            X509v3 Authority Key Identifier:
                keyid:2F:0B:79:B6:E4:73:98:2D:91:80:76:11:06:6B:FF:F4:31:2B:1B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/2F0B79B6E473982D91807611066BFFF4312B1B2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0B79B6E473982D91807611066BFFF4312B1B2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/323830343a316435303a3a2f33322d3332203d3e20323634333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d50::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:5c:ad:f5:f6:23:83:8b:a3:f8:4c:e7:a0:a7:23:86:1d:42:
         d1:2f:e1:7f:22:d0:c0:18:b1:93:c9:b1:b7:a2:c6:fe:a1:b8:
         5d:78:db:64:12:ca:03:ea:b6:0f:9c:a6:90:92:ce:a3:b1:80:
         65:27:22:c3:cb:be:2d:1f:1e:39:90:b1:8c:15:fe:25:8d:0e:
         ee:bf:fb:77:e7:61:57:44:2f:f9:7e:6e:8a:c6:95:01:5b:71:
         73:e7:34:1b:9a:32:3f:cf:24:58:62:40:3f:fa:b3:fe:78:a0:
         7e:1e:b5:47:ab:20:1e:2e:12:7d:ef:59:bd:a7:48:eb:82:6d:
         88:4c:4b:95:18:32:b8:4d:df:d3:03:69:1b:2a:f9:d7:9b:13:
         93:88:d4:e2:4b:74:35:61:49:a7:9b:43:88:60:08:6b:e3:30:
         1e:ce:91:c9:5a:d5:25:0d:d0:a0:18:13:ed:82:a9:23:4f:58:
         7c:30:57:be:21:66:2e:73:b9:d3:bf:77:3f:1e:a8:91:aa:50:
         15:c9:48:9e:4c:a8:43:dc:38:a7:f3:3d:9e:d8:e4:aa:b3:a8:
         23:74:96:5d:ea:26:b5:ff:3b:36:c9:fa:68:47:77:69:5e:96:
         05:62:09:1a:ef:8d:d9:26:09:ec:46:aa:29:3d:8e:8e:a9:f9:
         7e:12:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:07:57 2025 by rpki-client