Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33342d3334203d3e20323638373930.roa
File:                     323830343a356162343a383030303a3a2f33342d3334203d3e20323638373930.roa (raw, json)
Hash identifier:          Vl9l1J/2y0DYoe1D59uJfaQLoM8lWhVvlESaUNB9bI0=
Subject key identifier:   B3:C6:A8:7E:72:E2:91:6E:87:13:0C:2D:C6:E0:1B:46:AF:65:BC:C9
Certificate issuer:       /CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
Certificate serial:       43E0D64E4FB66AD9594CA528FC41BA160B36DD73
Authority key identifier: D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33342d3334203d3e20323638373930.roa
Signing time:             Tue 15 Apr 2025 22:36:08 +0000
ROA not before:           Tue 15 Apr 2025 22:31:08 +0000
ROA not after:            Tue 14 Apr 2026 22:36:08 +0000
asID:                     268790
IP address blocks:        2804:5ab4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl
                          rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 08:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e0:d6:4e:4f:b6:6a:d9:59:4c:a5:28:fc:41:ba:16:0b:36:dd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B4C91EBE07D707EE775A157AA582BF4B533C62
        Validity
            Not Before: Apr 15 22:31:08 2025 GMT
            Not After : Apr 14 22:36:08 2026 GMT
        Subject: CN=3082010A0282010100E472534DA4EF26E304D8E887E2356F723552AC0AA23DCF3DBAD1ED8F82AC0107FDF61A6BA761C4AA5CA6C24A24459F1C5F1F4281FD8C70A07138616B0A708096DEAE77F1F9AA09EC57C4A8667643F15F58E4887AEBA5E9D29F21502D30117D4F8F647AA5062EDD724F1F51F4BDA5D71EE79AC03A168DA9EAC414E2BDCB1E7598323941AD45AD3A313AD59342E4B7207CB84ED26E5C3057935CCDEA64DD979A4ACF7A8341E503310CF1EBFC2F98647510E1122BAFACD512121E32B5890C3ADD586341B730D1D968108EA5C6DAA274236A1161125F482E3DE3F456AC02D9C03B4393F6C5DE9086B49AD539DC5CF6C4DB2C146AE5FFD0C94EB96CA2C35A0DFBA7790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:72:53:4d:a4:ef:26:e3:04:d8:e8:87:e2:35:
                    6f:72:35:52:ac:0a:a2:3d:cf:3d:ba:d1:ed:8f:82:
                    ac:01:07:fd:f6:1a:6b:a7:61:c4:aa:5c:a6:c2:4a:
                    24:45:9f:1c:5f:1f:42:81:fd:8c:70:a0:71:38:61:
                    6b:0a:70:80:96:de:ae:77:f1:f9:aa:09:ec:57:c4:
                    a8:66:76:43:f1:5f:58:e4:88:7a:eb:a5:e9:d2:9f:
                    21:50:2d:30:11:7d:4f:8f:64:7a:a5:06:2e:dd:72:
                    4f:1f:51:f4:bd:a5:d7:1e:e7:9a:c0:3a:16:8d:a9:
                    ea:c4:14:e2:bd:cb:1e:75:98:32:39:41:ad:45:ad:
                    3a:31:3a:d5:93:42:e4:b7:20:7c:b8:4e:d2:6e:5c:
                    30:57:93:5c:cd:ea:64:dd:97:9a:4a:cf:7a:83:41:
                    e5:03:31:0c:f1:eb:fc:2f:98:64:75:10:e1:12:2b:
                    af:ac:d5:12:12:1e:32:b5:89:0c:3a:dd:58:63:41:
                    b7:30:d1:d9:68:10:8e:a5:c6:da:a2:74:23:6a:11:
                    61:12:5f:48:2e:3d:e3:f4:56:ac:02:d9:c0:3b:43:
                    93:f6:c5:de:90:86:b4:9a:d5:39:dc:5c:f6:c4:db:
                    2c:14:6a:e5:ff:d0:c9:4e:b9:6c:a2:c3:5a:0d:fb:
                    a7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C6:A8:7E:72:E2:91:6E:87:13:0C:2D:C6:E0:1B:46:AF:65:BC:C9
            X509v3 Authority Key Identifier:
                keyid:D2:B4:C9:1E:BE:07:D7:07:EE:77:5A:15:7A:A5:82:BF:4B:53:3C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B4C91EBE07D707EE775A157AA582BF4B533C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ryoGSZ4ncZ7Mc8dhCUbs5VhsAkTC2oyC1h6mNC8HVZX/1/323830343a356162343a383030303a3a2f33342d3334203d3e20323638373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ab4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:e8:f6:22:10:07:f6:18:a1:89:4a:e7:d2:cc:fc:c1:82:19:
         f0:e8:ab:3a:75:14:c7:c3:0a:e0:87:be:38:4c:fe:01:2b:d8:
         bd:25:09:67:20:86:2b:81:b7:6e:81:37:ff:e2:94:4b:31:82:
         26:fc:e5:ae:5b:b0:4d:2b:8f:79:7a:eb:18:af:8d:9d:11:27:
         d9:18:a0:5e:9e:31:58:19:d3:86:1c:2a:a9:8a:fa:48:12:3a:
         86:9b:ba:06:9d:dd:c7:15:dd:cc:fe:35:cf:3e:ea:0f:82:24:
         55:58:2d:85:87:4b:0b:57:99:1a:d8:88:a6:ad:d9:15:11:12:
         c3:eb:59:5b:05:ec:37:de:40:09:a7:90:45:d0:b8:a9:a1:b5:
         55:40:fe:e2:85:a8:ca:d1:90:c1:25:13:0c:a4:5a:8a:3a:de:
         55:64:68:03:11:c6:a3:78:b4:01:57:ea:f7:4f:34:cf:b2:e5:
         a8:a7:0a:f0:dc:f9:e8:40:d9:c4:c0:f5:a3:c7:7b:c7:55:30:
         65:99:24:c3:51:a0:ee:46:d1:b2:dc:ee:e4:47:5a:2b:79:e4:
         be:92:33:5a:3c:fe:43:8e:3a:cf:2e:d8:20:af:6d:0d:d0:79:
         be:3a:65:61:b4:dd:ec:1c:30:9b:18:91:8f:85:bb:1b:65:e9:
         ff:ad:02:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 17:44:22 2025 by rpki-client