Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/323830343a373430303a633030303a3a2f34302d3430203d3e20323730393531.roa
File:                     323830343a373430303a633030303a3a2f34302d3430203d3e20323730393531.roa (raw, json)
Hash identifier:          +mB7+Ln3v26C5H7k/9q3QiKkmQNWgXA//LXEnTHml5k=
Subject key identifier:   D3:3A:85:2B:C8:05:39:87:89:01:11:8E:28:A7:11:F5:0B:59:7A:41
Certificate issuer:       /CN=2855A71E150CFAB4453167F74DEE4613F739EA02
Certificate serial:       3C15BFEE9BB1AC504C7045789003941D78CA1580
Authority key identifier: 28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/323830343a373430303a633030303a3a2f34302d3430203d3e20323730393531.roa
Signing time:             Fri 09 May 2025 16:54:34 +0000
ROA not before:           Fri 09 May 2025 16:49:34 +0000
ROA not after:            Fri 08 May 2026 16:54:34 +0000
asID:                     270951
IP address blocks:        2804:7400:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl
                          rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 May 2025 18:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:15:bf:ee:9b:b1:ac:50:4c:70:45:78:90:03:94:1d:78:ca:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855A71E150CFAB4453167F74DEE4613F739EA02
        Validity
            Not Before: May  9 16:49:34 2025 GMT
            Not After : May  8 16:54:34 2026 GMT
        Subject: CN=D33A852BC80539878901118E28A711F50B597A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1c:45:88:c2:05:c2:bb:51:42:33:66:5f:b7:
                    e5:e0:f3:a2:57:fe:5e:6b:ab:1f:93:32:7a:07:5d:
                    37:ec:7e:ce:45:99:11:a9:c1:2c:31:f0:be:0a:1a:
                    00:ed:f3:2d:12:4d:27:26:61:b3:b3:fc:96:ca:d4:
                    27:b8:52:85:51:9c:5b:e4:25:05:66:81:04:c1:52:
                    82:77:4b:41:25:d1:e3:da:a2:0d:11:75:2c:84:dc:
                    04:21:a6:37:84:06:a0:42:f8:ee:24:f0:af:ee:91:
                    ac:f9:56:3e:f9:8e:e9:8a:7f:e8:40:19:ff:0e:05:
                    90:46:99:8a:a3:99:0f:1e:c2:dc:be:47:4c:46:9c:
                    1e:53:fc:3e:24:c2:b5:69:40:35:6f:b0:b9:ad:fa:
                    12:93:5e:81:4d:f8:0e:ad:91:4e:d7:bf:22:69:f4:
                    2d:e5:b6:0c:4d:2c:cb:3b:6a:ef:00:de:0b:ea:d6:
                    c5:89:34:86:d1:3f:53:4f:17:0a:36:f7:04:1d:db:
                    4f:1a:d4:fd:5d:3f:d2:b9:11:6d:1a:38:4b:c2:31:
                    b7:8c:ee:98:19:d2:2c:40:93:76:24:62:29:ee:fb:
                    de:5b:e1:66:ce:03:d5:18:c5:1a:56:4b:8d:a1:85:
                    73:61:77:d3:64:f0:e3:2a:01:05:24:67:d0:99:dd:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3A:85:2B:C8:05:39:87:89:01:11:8E:28:A7:11:F5:0B:59:7A:41
            X509v3 Authority Key Identifier:
                keyid:28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/323830343a373430303a633030303a3a2f34302d3430203d3e20323730393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7400:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         cf:c2:db:3d:69:a9:df:28:11:07:61:cf:ad:11:09:cb:98:f2:
         03:3a:98:18:6d:ba:29:19:be:2c:d5:5c:db:29:02:25:da:ab:
         e4:4a:85:7b:b1:96:77:9a:90:58:81:aa:07:56:1b:51:d5:b9:
         29:6f:58:2b:63:10:6c:bd:91:9a:1a:dc:fe:50:51:08:8e:28:
         20:5d:82:48:b4:93:15:81:14:c9:ed:42:9a:e5:e1:de:34:f5:
         9e:9d:27:7b:65:30:7d:71:49:d8:10:d4:04:18:82:b5:2f:9c:
         e1:1e:69:05:b5:4b:9c:10:a6:b8:9d:51:c6:97:0b:0c:40:de:
         3e:33:63:53:95:53:15:a1:77:49:d1:d8:05:42:02:e6:12:41:
         36:03:7e:13:72:9f:59:66:a1:a1:6a:04:03:a7:5b:de:2c:17:
         ad:d8:7a:cd:45:68:5d:ec:e4:68:fe:36:95:c0:60:8f:72:80:
         29:74:85:9f:3e:31:7f:b3:cb:8a:89:64:7b:10:1f:75:70:85:
         39:67:6e:7c:d1:da:30:98:70:20:fe:00:f6:ed:2a:79:ed:6d:
         d1:39:47:f8:48:be:06:96:62:66:6e:03:74:a8:dd:53:8b:37:
         5e:5d:dd:bb:d0:81:ba:07:d5:db:89:f6:a6:39:78:ca:43:6d:
         c8:d0:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:53:11 2025 by rpki-client