Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33322d3438203d3e20323638323632.roa
File:                     323830343a346537343a3a2f33322d3438203d3e20323638323632.roa (raw, json)
Hash identifier:          /VCzucGfHlqNTkfJXTq1xxcOLzuuIwZ1U/QtbROwaEI=
Subject key identifier:   21:97:3E:21:C4:AE:B8:EF:3B:E5:9D:9B:BB:E7:94:09:A9:FC:62:BA
Certificate issuer:       /CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
Certificate serial:       039A65C1A59EB473034C556E7C8DE446F252E024
Authority key identifier: DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33322d3438203d3e20323638323632.roa
Signing time:             Wed 07 May 2025 20:31:24 +0000
ROA not before:           Wed 07 May 2025 20:26:24 +0000
ROA not after:            Wed 06 May 2026 20:31:24 +0000
asID:                     268262
IP address blocks:        2804:4e74::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl
                          rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 10:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9a:65:c1:a5:9e:b4:73:03:4c:55:6e:7c:8d:e4:46:f2:52:e0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69
        Validity
            Not Before: May  7 20:26:24 2025 GMT
            Not After : May  6 20:31:24 2026 GMT
        Subject: CN=21973E21C4AEB8EF3BE59D9BBBE79409A9FC62BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:1b:34:c3:c9:87:5f:ea:0b:68:3c:10:1e:
                    91:b4:27:ff:c7:3e:c7:d2:34:13:07:df:6b:42:f0:
                    a7:9e:dc:06:b0:f6:01:66:6a:90:dd:46:11:5b:8c:
                    bb:b6:ef:d9:fe:d9:db:a3:38:56:57:d4:13:32:db:
                    85:1d:67:a6:f3:06:92:a0:c1:56:f6:3d:92:9e:23:
                    b6:da:27:22:df:86:f6:c7:e6:cc:a6:cd:cb:6e:52:
                    7f:14:49:18:f7:6d:1c:12:2d:28:4a:cf:2b:b2:b3:
                    5a:a1:b6:8e:3c:56:45:55:e0:02:e6:a9:1f:96:38:
                    49:13:d0:70:25:31:43:bd:d0:f9:ef:d7:f9:08:4a:
                    1b:c5:ab:c7:5b:96:d6:f6:e3:98:10:a2:8b:9c:41:
                    99:51:42:c1:3a:88:f0:85:02:f4:f2:cc:e9:4b:3c:
                    ab:10:83:45:0e:ff:2a:ac:dc:1b:42:dd:eb:a5:91:
                    d4:86:9d:13:1a:4b:76:aa:ad:6f:b6:a9:5a:d7:51:
                    83:bf:30:88:ff:49:5e:c9:33:1c:d0:bd:b2:61:b4:
                    58:86:37:95:72:ed:d9:a2:7c:9d:1e:24:a0:39:0f:
                    17:55:07:75:9f:3b:5e:cc:29:74:d3:a1:4c:9f:d5:
                    1f:e2:0b:6f:6a:e3:82:b1:bf:0e:b7:99:97:3f:67:
                    4c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:97:3E:21:C4:AE:B8:EF:3B:E5:9D:9B:BB:E7:94:09:A9:FC:62:BA
            X509v3 Authority Key Identifier:
                keyid:DF:BB:E5:3A:A4:0A:CB:45:ED:76:DA:C0:E6:F8:33:B2:8B:ED:8A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFBBE53AA40ACB45ED76DAC0E6F833B28BED8A69.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/323830343a346537343a3a2f33322d3438203d3e20323638323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e74::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:5d:ef:9f:a7:4d:be:83:92:e7:b0:47:0f:3e:eb:48:a5:91:
         cf:1c:dd:dd:41:85:76:8d:4f:d3:f3:be:0f:a3:a9:7b:c7:e9:
         8f:af:7c:a5:e7:9d:72:12:aa:fe:b9:be:cf:ce:97:dd:44:1e:
         41:f8:54:68:1d:16:eb:fd:0b:11:81:08:3b:67:b8:46:0f:e8:
         0a:e9:9f:b1:ec:ee:53:c8:bc:0c:80:19:56:07:d2:08:78:7b:
         22:46:3d:5d:45:4c:b1:06:b1:49:56:95:05:c8:15:6c:86:5e:
         fd:a8:e5:73:df:dd:be:94:41:29:34:23:55:82:9f:e6:2b:cf:
         d5:79:fe:8d:0d:8f:6c:4f:30:02:c5:18:66:ed:75:95:27:14:
         37:48:e0:b7:93:47:ad:70:6f:9d:0d:dd:fc:90:8d:7d:e5:1b:
         ec:85:a2:44:51:f7:c6:9e:23:1a:33:4a:44:5e:2e:71:e7:39:
         e4:65:a6:0f:44:d3:1f:3c:4a:c2:5a:8b:66:69:33:31:c2:cf:
         ce:65:d1:59:3b:57:24:47:c5:b8:76:c1:b0:5d:30:51:51:b8:
         26:77:54:38:d3:fc:34:19:aa:4a:0a:41:3e:86:82:4b:40:46:
         2e:de:65:2f:95:dc:48:be:ec:e3:74:d1:17:de:80:b7:7f:45:
         6f:16:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:06:15 2025 by rpki-client