Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa
File:                     323830343a333434383a3a2f33322d313238203d3e20323635343437.roa (raw, json)
Hash identifier:          BqwvR1FtOVFV+w0C2sDj34uM3ZQQO6Tnix6/00HCSPU=
Subject key identifier:   46:7D:0B:19:A2:61:4F:49:D9:F0:78:8D:EC:9A:BE:71:1C:2F:E6:50
Certificate issuer:       /CN=37898D289E6CB57451BCE99712B6273334A80F13
Certificate serial:       7C15F484BD12F3038749CFBCC494DF2F0259F3AB
Authority key identifier: 37:89:8D:28:9E:6C:B5:74:51:BC:E9:97:12:B6:27:33:34:A8:0F:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa
Signing time:             Wed 30 Apr 2025 20:08:47 +0000
ROA not before:           Wed 30 Apr 2025 20:03:47 +0000
ROA not after:            Wed 29 Apr 2026 20:08:47 +0000
asID:                     265447
IP address blocks:        2804:3448::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.crl
                          rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 22:39:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:15:f4:84:bd:12:f3:03:87:49:cf:bc:c4:94:df:2f:02:59:f3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37898D289E6CB57451BCE99712B6273334A80F13
        Validity
            Not Before: Apr 30 20:03:47 2025 GMT
            Not After : Apr 29 20:08:47 2026 GMT
        Subject: CN=467D0B19A2614F49D9F0788DEC9ABE711C2FE650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:f8:20:89:ca:92:8c:48:6c:9f:1b:86:1b:
                    fb:d3:d7:ae:0c:6a:37:59:1f:56:3d:8e:4e:e4:a9:
                    6d:93:a3:a8:77:7f:f0:e3:b4:40:0a:4e:91:f3:3c:
                    9a:b4:1e:69:e2:c3:1c:46:11:10:82:d6:86:f0:72:
                    7f:ca:e1:cd:65:71:d3:fc:a8:55:05:bc:4e:3d:db:
                    e3:db:62:02:f2:14:20:1e:6d:ef:3c:79:73:ea:93:
                    a3:4b:26:e9:cf:0d:1d:33:11:00:4e:00:60:14:a2:
                    03:61:71:e4:cd:6b:61:96:d8:a8:96:bb:6c:21:c4:
                    38:c1:00:e3:06:13:15:1a:a8:04:2e:9f:e5:3e:4c:
                    82:14:a6:5e:68:02:24:65:ea:77:c9:3a:32:da:71:
                    76:93:56:c8:37:e8:66:dc:3a:cf:47:b3:7d:d4:b6:
                    a5:7b:2e:1f:52:39:c0:61:60:a8:da:e2:a4:a4:1e:
                    9e:f1:40:c5:21:01:28:48:02:6f:ab:ba:60:42:46:
                    e1:d2:ed:c2:a7:18:95:a7:32:c1:75:c3:2a:47:b2:
                    28:f5:c6:3f:36:d9:df:74:09:25:c9:ce:2b:1e:e7:
                    d8:fc:eb:c9:b0:56:fe:eb:48:2b:5c:3c:d6:a3:30:
                    85:17:69:68:98:a1:37:95:9b:25:7a:bd:c9:a9:5b:
                    bf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7D:0B:19:A2:61:4F:49:D9:F0:78:8D:EC:9A:BE:71:1C:2F:E6:50
            X509v3 Authority Key Identifier:
                keyid:37:89:8D:28:9E:6C:B5:74:51:BC:E9:97:12:B6:27:33:34:A8:0F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/37898D289E6CB57451BCE99712B6273334A80F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37898D289E6CB57451BCE99712B6273334A80F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/323830343a333434383a3a2f33322d313238203d3e20323635343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3448::/32

    Signature Algorithm: sha256WithRSAEncryption
         cc:c3:b7:75:15:13:e8:7f:a1:65:4e:23:f8:b6:47:2b:58:1c:
         f1:92:09:37:20:19:89:7f:aa:57:3f:2e:f4:cc:46:bc:d1:f8:
         de:ac:90:78:62:4a:bf:da:74:21:ec:cc:f0:91:e8:d1:26:7c:
         f3:74:3f:e5:83:b1:76:65:c0:fc:72:b4:30:c0:4a:11:51:6a:
         6f:8b:d8:84:5f:dd:35:8c:4a:0d:e5:ba:bb:47:c6:ce:fe:62:
         39:b4:5f:ea:18:e5:04:6b:60:25:fe:24:3f:49:4d:8f:bc:1d:
         20:13:79:4c:4e:fd:aa:bb:c0:06:1e:5a:31:23:8d:39:e4:81:
         83:13:15:ad:e8:b9:09:c2:80:4d:2a:2c:57:18:64:72:b6:40:
         bb:e6:0e:d1:7b:2a:3d:8f:b6:a6:a0:d7:a6:6f:a4:62:cb:06:
         8d:08:91:a1:b8:3f:8e:e9:e7:5d:82:7f:02:94:2f:ae:e0:7f:
         b0:7b:89:17:b0:a9:41:8e:2b:ce:de:79:c5:53:40:16:74:9d:
         f9:d9:71:89:79:5c:4d:5b:1d:ce:27:b1:69:f9:cd:b7:e8:83:
         d2:f1:ce:b1:e6:5c:81:eb:32:05:2c:fd:0f:b4:5e:e9:95:59:
         fd:07:1e:b3:64:48:f7:fa:c8:fc:af:e8:04:07:cb:53:21:b0:
         47:0a:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:18:25 2025 by rpki-client