Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/323830343a333635303a3a2f33322d3438203d3e20323636333431.roa
File:                     323830343a333635303a3a2f33322d3438203d3e20323636333431.roa (raw, json)
Hash identifier:          NPoEvucmg7gk/rHkLdAoTXuA7M1Mvusbw5RdqYB0WKI=
Subject key identifier:   9D:8A:0E:99:B7:D4:D7:87:A5:62:3F:EE:BF:3F:B8:01:F7:E0:97:D6
Certificate issuer:       /CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6
Certificate serial:       2B36BDDC5E449D3B4F46AA1422CA30223BA1E1B9
Authority key identifier: A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/323830343a333635303a3a2f33322d3438203d3e20323636333431.roa
Signing time:             Thu 06 Mar 2025 04:01:05 +0000
ROA not before:           Thu 06 Mar 2025 03:56:05 +0000
ROA not after:            Thu 05 Mar 2026 04:01:05 +0000
asID:                     266341
IP address blocks:        2804:3650::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl
                          rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 02:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:36:bd:dc:5e:44:9d:3b:4f:46:aa:14:22:ca:30:22:3b:a1:e1:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5E6C409853C4DBC508D4E124F03B1EA2710A0A6
        Validity
            Not Before: Mar  6 03:56:05 2025 GMT
            Not After : Mar  5 04:01:05 2026 GMT
        Subject: CN=9D8A0E99B7D4D787A5623FEEBF3FB801F7E097D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fa:75:73:82:13:0e:ef:f9:6a:d0:e1:ce:8f:
                    15:b5:f8:2e:9f:26:62:d9:f9:96:05:ab:ab:2d:3a:
                    86:8d:5b:81:67:d1:39:5d:45:87:85:f0:62:33:a6:
                    f9:ac:93:2b:b4:e9:68:49:56:5a:33:f5:01:83:cf:
                    97:45:85:2e:ee:2a:4b:ee:c1:55:58:82:50:80:94:
                    ff:b8:6f:e1:dc:13:c7:7f:5e:64:eb:37:ee:a0:49:
                    51:c6:53:40:3a:ea:a7:5c:8a:a1:5b:8f:32:f5:3c:
                    22:e8:b5:f6:36:20:d7:ed:9c:6c:c5:3a:0c:3b:93:
                    6a:49:2a:d5:2d:86:af:8c:ba:be:cc:c8:78:75:4e:
                    e1:41:a5:29:d4:99:f8:2d:25:75:4e:f8:e3:2f:2f:
                    77:be:f9:3b:99:4c:41:89:2c:57:71:f3:36:8d:9b:
                    65:27:58:a5:0e:38:02:69:3b:53:fd:c4:60:73:ef:
                    7b:2f:a4:bf:3b:e4:da:f8:ef:c4:29:0f:d5:45:ae:
                    25:d5:66:b5:cc:49:b5:be:2e:5d:53:de:2e:ce:71:
                    45:79:5c:81:20:f0:98:b2:af:fa:9c:25:e9:51:c8:
                    fa:ce:01:ac:a1:7c:80:bd:82:82:fb:04:0d:15:81:
                    94:92:9d:d4:62:38:cd:c4:5d:21:e1:3a:07:aa:c0:
                    f0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8A:0E:99:B7:D4:D7:87:A5:62:3F:EE:BF:3F:B8:01:F7:E0:97:D6
            X509v3 Authority Key Identifier:
                keyid:A5:E6:C4:09:85:3C:4D:BC:50:8D:4E:12:4F:03:B1:EA:27:10:A0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5E6C409853C4DBC508D4E124F03B1EA2710A0A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/1/323830343a333635303a3a2f33322d3438203d3e20323636333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3650::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:6b:7a:4d:28:67:23:06:8a:59:da:6e:8f:77:71:08:bd:5b:
         03:1c:9d:85:5c:bb:62:c6:4b:27:bb:95:18:de:09:3d:a9:9f:
         5a:5e:20:70:54:75:f4:9c:10:27:68:da:94:d4:47:58:40:13:
         9d:2b:50:46:50:7e:25:4a:30:54:b2:82:40:08:f5:84:bd:58:
         5e:9b:b8:5a:eb:e1:b5:84:77:95:1f:8a:55:98:77:7b:3d:c8:
         b3:a7:1b:99:e0:07:b3:da:a0:a9:51:06:e7:a5:11:ab:1a:db:
         0a:b9:36:d3:b7:ad:8d:18:bc:0c:ce:8e:de:4d:3b:d7:6a:7f:
         32:17:a5:72:5e:e4:85:7a:9d:5a:5e:b8:4f:42:4e:f8:28:ee:
         23:7b:0b:d4:03:25:bb:bb:2a:ae:4e:73:ba:8d:f3:0b:8e:9d:
         26:7f:09:63:f1:52:9e:d5:55:57:a2:78:8f:81:49:85:25:ad:
         36:94:fa:72:d6:9a:ef:f0:d5:71:d8:ea:e2:b5:50:79:d3:f1:
         1e:60:6c:66:85:32:97:dc:70:99:16:dc:da:f7:71:b4:49:0d:
         66:38:e2:89:3f:55:f5:5b:df:5a:ef:ab:aa:ad:eb:68:15:62:
         4f:41:55:66:96:01:b3:98:9a:c7:6f:10:f7:da:64:7c:a6:ab:
         f5:05:ae:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:48:05 2025 by rpki-client