Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/323830343a383932633a3a2f33322d3332203d3e20323733353836.roa
File:                     323830343a383932633a3a2f33322d3332203d3e20323733353836.roa (raw, json)
Hash identifier:          7bu3fIW9y40UXydsjVEpOvNaSja+baaxMjylmonjsqU=
Subject key identifier:   EE:DD:BE:C8:49:87:24:D9:6F:2C:AA:A5:2A:32:A5:37:97:3C:4C:DB
Certificate issuer:       /CN=D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73
Certificate serial:       4209DC6D43521DB1972D0C52605F175BD1E19271
Authority key identifier: D6:AE:F6:5B:FA:D5:7D:5A:BD:97:3A:D0:7D:0B:AC:7D:94:9F:BC:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/323830343a383932633a3a2f33322d3332203d3e20323733353836.roa
Signing time:             Wed 30 Apr 2025 21:15:06 +0000
ROA not before:           Wed 30 Apr 2025 21:10:06 +0000
ROA not after:            Wed 29 Apr 2026 21:15:06 +0000
asID:                     273586
IP address blocks:        2804:892c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.crl
                          rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 07:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:09:dc:6d:43:52:1d:b1:97:2d:0c:52:60:5f:17:5b:d1:e1:92:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73
        Validity
            Not Before: Apr 30 21:10:06 2025 GMT
            Not After : Apr 29 21:15:06 2026 GMT
        Subject: CN=EEDDBEC8498724D96F2CAAA52A32A537973C4CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:11:9f:37:94:01:93:4a:47:1f:7d:f1:82:
                    fc:c6:3f:b6:82:c3:42:2b:49:d4:b4:10:4a:74:8b:
                    36:35:2c:cc:7f:36:93:87:79:4b:1d:02:ec:05:aa:
                    34:5b:25:92:a3:14:9c:94:81:0e:e8:8a:af:07:b1:
                    20:ee:fe:7d:a3:0d:6d:46:89:3c:08:40:e6:85:3a:
                    56:10:a0:e0:b8:22:2a:f6:33:27:9b:82:69:4f:37:
                    4a:f4:38:e9:79:df:f4:a4:91:43:c8:ea:06:48:e3:
                    76:90:d4:7c:e0:84:59:c7:a4:1e:54:d3:8d:99:3e:
                    ce:03:03:77:b0:c7:46:d3:f1:10:6a:9c:e5:49:23:
                    2e:9b:35:bf:10:6c:0c:70:c8:e3:58:67:93:04:9b:
                    c5:1e:d5:e9:84:58:b3:54:01:cf:28:4e:05:30:7e:
                    01:2a:32:b8:1f:a9:85:49:ab:bb:73:93:05:59:ec:
                    36:91:0f:9c:6e:fb:35:90:4f:c8:34:fe:41:14:30:
                    e8:63:74:20:24:71:7c:2b:1c:95:70:40:6b:1f:7c:
                    5f:40:1d:26:1f:2a:62:fd:6a:a3:42:e9:89:cd:01:
                    33:ae:e4:b3:2e:2e:d1:98:ea:1b:62:63:b7:9a:57:
                    25:af:26:51:a5:2f:47:97:e7:8d:06:69:9b:b8:80:
                    51:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DD:BE:C8:49:87:24:D9:6F:2C:AA:A5:2A:32:A5:37:97:3C:4C:DB
            X509v3 Authority Key Identifier:
                keyid:D6:AE:F6:5B:FA:D5:7D:5A:BD:97:3A:D0:7D:0B:AC:7D:94:9F:BC:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6AEF65BFAD57D5ABD973AD07D0BAC7D949FBC73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44A4UCMKnYS2beYXNszaSXVe2FjUbNcizRkqfyshYH6Q/0/323830343a383932633a3a2f33322d3332203d3e20323733353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:892c::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:27:a2:b8:df:e7:c0:7a:79:ab:ab:b5:0d:78:6a:04:5e:01:
         c5:5e:70:29:0e:33:d4:8a:0f:39:7b:4c:52:8a:7b:8d:da:f6:
         a5:a2:68:b8:4e:f8:f6:6f:64:f4:0f:84:43:c7:b0:fd:ab:3f:
         28:51:32:db:bc:57:3d:24:64:d8:00:17:19:37:95:bc:6c:ec:
         d2:71:94:7b:2b:14:e5:ba:3b:8e:bc:90:36:fe:4d:b0:f8:00:
         3d:04:fe:51:b9:3d:e3:dc:d1:cb:2a:da:9b:20:53:52:23:10:
         3f:34:2c:63:17:fa:19:dd:c9:81:0f:a2:bb:51:3d:f1:b0:4b:
         e5:b8:aa:dc:b2:61:db:1e:d1:c9:81:13:4a:ad:ca:6d:8b:d2:
         bf:06:4e:60:51:1e:53:b1:d6:31:7d:d2:4e:c5:ba:ee:6b:8f:
         f5:67:f5:80:1b:a5:a2:f4:91:9a:1f:da:1c:00:10:35:49:30:
         24:05:75:da:dc:25:d3:38:5b:83:e5:5e:a4:81:64:30:e8:94:
         d0:34:f6:8c:10:8e:e8:d7:6c:eb:72:10:89:fd:87:7e:aa:0e:
         5f:28:51:bf:67:b8:4b:cb:68:3f:3e:72:1c:57:e1:71:f4:b5:
         a0:8b:37:db:93:a8:0d:8d:b6:f9:f0:4f:d1:fb:7c:6d:10:cf:
         e4:02:e1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:00:43 2025 by rpki-client