Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3438203d3e20323634343134.roa
File:                     323830343a316533343a3a2f33322d3438203d3e20323634343134.roa (raw, json)
Hash identifier:          RHzfWlmyT+GDNaub4ZdnDTBPhmfhXe6ZfuhuThBP/EE=
Subject key identifier:   CC:9C:AD:B6:6B:F8:DB:15:E9:8D:7A:49:A3:17:FA:AE:74:79:D7:85
Certificate issuer:       /CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
Certificate serial:       7C9CC1E574AC35186E7F378777FB18870301F57D
Authority key identifier: 0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3438203d3e20323634343134.roa
Signing time:             Wed 07 May 2025 19:31:22 +0000
ROA not before:           Wed 07 May 2025 19:26:22 +0000
ROA not after:            Wed 06 May 2026 19:31:22 +0000
asID:                     264414
IP address blocks:        2804:1e34::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl
                          rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 01:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9c:c1:e5:74:ac:35:18:6e:7f:37:87:77:fb:18:87:03:01:f5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F0B8A867772B2436759E0F012765DC77C12ACB5
        Validity
            Not Before: May  7 19:26:22 2025 GMT
            Not After : May  6 19:31:22 2026 GMT
        Subject: CN=CC9CADB66BF8DB15E98D7A49A317FAAE7479D785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:5f:cf:fd:49:f2:33:e4:ed:a4:c5:7e:9c:
                    8d:09:2a:96:ea:0b:2d:ec:2f:3f:6a:58:6d:03:fc:
                    37:4c:9f:3e:28:8e:61:52:ad:3e:ba:28:00:aa:58:
                    c2:4d:6f:92:4b:ef:4c:dc:fb:f5:96:2c:06:77:67:
                    bf:d2:01:7d:51:a0:8f:07:ef:c0:3f:b3:0d:47:df:
                    80:88:2b:32:91:de:b1:b8:c2:43:95:78:78:c5:98:
                    c5:bf:91:2f:e8:42:4d:00:ee:0e:0e:f7:39:0c:ac:
                    b4:39:c7:85:52:fc:87:77:6e:f3:8c:bb:37:2f:83:
                    90:db:19:fc:79:0e:65:b6:b3:13:47:2d:57:b8:15:
                    4e:bc:87:77:08:d7:1b:8e:ef:e0:44:18:1d:4b:93:
                    50:53:6c:3c:1e:d9:cf:d6:02:3b:7d:d5:b3:e6:04:
                    5e:ee:ca:3b:28:41:7c:d1:c5:62:77:99:b9:6c:42:
                    77:4b:16:f6:fe:60:01:ba:cd:3b:cf:fb:4a:e1:bd:
                    ab:68:26:0f:23:f0:c2:05:cf:91:0f:22:4c:42:fa:
                    34:0b:c7:3a:b5:81:21:50:04:1d:71:de:23:99:98:
                    2c:01:20:94:14:a5:2b:65:bd:37:ef:25:3c:86:2b:
                    1e:b2:60:d4:b0:00:49:da:76:22:5c:c7:41:72:88:
                    3a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9C:AD:B6:6B:F8:DB:15:E9:8D:7A:49:A3:17:FA:AE:74:79:D7:85
            X509v3 Authority Key Identifier:
                keyid:0F:0B:8A:86:77:72:B2:43:67:59:E0:F0:12:76:5D:C7:7C:12:AC:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/0F0B8A867772B2436759E0F012765DC77C12ACB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F0B8A867772B2436759E0F012765DC77C12ACB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tEzfY4omMtJx34LFuyKWojk48tBuDTM8wtLjExjfa8M/0/323830343a316533343a3a2f33322d3438203d3e20323634343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e34::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:73:26:ae:e1:ed:b9:0b:4d:75:13:e3:e1:0a:87:7a:61:9c:
         3f:f5:01:ca:19:6d:a4:b1:be:aa:c8:ee:dc:26:d4:60:86:6a:
         fb:d8:02:a5:14:a1:8e:32:6b:e5:0d:32:0e:ec:1b:f1:86:5d:
         8f:f7:ff:7e:6f:3f:b0:37:9f:74:4c:0f:93:36:b9:40:74:1c:
         24:b4:50:30:46:91:65:30:41:94:d2:e0:0d:4e:21:50:fa:60:
         02:7c:1b:96:9e:1d:07:e8:24:b2:a8:d5:52:1e:ba:f0:cf:5e:
         17:81:07:63:ad:a2:60:61:aa:ba:9d:8d:8f:18:d7:93:4f:fc:
         85:18:0d:e1:23:77:5a:28:50:7d:1a:39:07:f6:69:87:ff:2b:
         a1:3d:5c:23:80:d3:d5:cc:6e:4e:ce:91:a9:cf:35:e5:31:44:
         87:c3:32:8f:a5:31:6d:5a:e2:ba:1f:f9:a9:f5:e5:20:2a:16:
         e1:12:ef:1c:14:11:e2:6e:d2:1e:b3:f9:26:b2:73:83:cb:eb:
         4b:24:da:a3:37:d9:42:ec:c6:80:3d:a3:89:f9:43:da:d3:6c:
         f3:00:86:32:ed:5b:f3:fb:3c:85:b5:da:f4:2f:80:c8:de:72:
         b1:f9:1a:7a:bf:b0:67:26:68:4c:e5:e4:5d:1e:40:2f:2b:40:
         61:a6:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:50:53 2025 by rpki-client