Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a613030303a3a2f33382d3338203d3e20323733333039.roa
File:                     323830343a386337633a613030303a3a2f33382d3338203d3e20323733333039.roa (raw, json)
Hash identifier:          mohQUbD6pRmLh4Fj2UjE6a0y+PAI3A1VgUSKm7fIxlg=
Subject key identifier:   B6:7F:F6:42:28:49:9D:46:9F:43:FE:5C:79:B4:16:43:92:00:D4:90
Certificate issuer:       /CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
Certificate serial:       6CDAAE74E2CEEBDFE446EC2E2CDFF756D6800847
Authority key identifier: 2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a613030303a3a2f33382d3338203d3e20323733333039.roa
Signing time:             Wed 09 Apr 2025 13:53:35 +0000
ROA not before:           Wed 09 Apr 2025 13:48:35 +0000
ROA not after:            Wed 08 Apr 2026 13:53:35 +0000
asID:                     273309
IP address blocks:        2804:8c7c:a000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl
                          rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 02:15:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:da:ae:74:e2:ce:eb:df:e4:46:ec:2e:2c:df:f7:56:d6:80:08:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Validity
            Not Before: Apr  9 13:48:35 2025 GMT
            Not After : Apr  8 13:53:35 2026 GMT
        Subject: CN=B67FF64228499D469F43FE5C79B416439200D490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f5:c4:8f:3e:af:cb:a1:38:73:11:ac:ff:cf:
                    bf:c2:cd:fc:0a:8e:2d:90:6a:d6:78:c7:c4:47:10:
                    5f:91:da:f9:91:40:ce:b0:de:2c:ad:96:1c:a1:96:
                    ae:18:4f:92:a5:42:e7:c4:eb:71:1a:8b:60:f7:48:
                    6a:35:79:f0:af:48:43:92:46:33:f7:d4:1d:42:dd:
                    a5:c6:ea:18:77:90:ec:e6:2e:46:46:50:c8:19:b4:
                    e8:6c:e8:c4:95:89:1c:6a:29:f9:cc:d3:e7:a2:62:
                    39:1a:bb:f4:da:0f:c5:23:05:28:fa:b1:fe:0a:7d:
                    4e:11:00:1b:bd:0d:dc:29:47:50:c7:dd:30:a2:8d:
                    38:c2:fe:ac:57:19:a6:10:db:bf:4c:51:ba:e4:1a:
                    50:7d:ae:c9:4b:b2:c7:36:02:8e:51:65:20:dc:c3:
                    25:80:fe:25:43:b8:38:e9:02:77:e5:a4:11:a9:73:
                    77:21:f9:dc:eb:82:77:61:c3:1c:39:5b:2f:e4:22:
                    01:ae:bf:e5:27:9e:65:8f:fb:37:b4:d9:21:cf:92:
                    79:28:c2:7b:a7:05:78:27:c1:d0:ac:95:71:36:62:
                    d4:c1:35:89:14:a2:67:07:68:be:bd:f9:4c:74:ff:
                    22:a6:3c:2a:10:fe:60:97:f5:b4:70:a8:1b:64:43:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7F:F6:42:28:49:9D:46:9F:43:FE:5C:79:B4:16:43:92:00:D4:90
            X509v3 Authority Key Identifier:
                keyid:2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/323830343a386337633a613030303a3a2f33382d3338203d3e20323733333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c7c:a000::/38

    Signature Algorithm: sha256WithRSAEncryption
         b8:0f:4a:58:de:0f:2e:2b:e8:b4:9f:0d:ea:9f:36:65:1d:d4:
         dc:ec:3d:81:f5:7f:ba:c6:82:f1:d7:6a:22:8b:8c:e9:fd:7e:
         c4:5b:99:be:d4:4c:ce:17:ff:e6:4d:74:98:7d:76:cd:6d:03:
         d4:02:0b:06:8a:0f:55:ed:b1:60:d7:93:f9:cf:1a:56:ee:35:
         bc:15:cd:00:cf:e8:ab:64:32:10:24:68:b1:08:4f:2c:3d:0d:
         c9:0a:4b:a8:a0:4a:86:af:f9:1e:33:f0:03:6f:d6:59:fd:4f:
         78:1b:59:b8:5b:04:ca:43:aa:5e:2f:3c:66:d7:5f:cb:dd:e0:
         a1:bc:af:55:4e:97:da:c4:52:0d:72:02:4a:a8:39:3c:ce:30:
         83:46:89:80:e8:9a:0f:dd:89:3d:5b:4e:d1:d1:2a:20:97:40:
         9f:23:3f:10:de:f4:a3:ec:b2:87:c9:c6:58:4c:b2:65:35:38:
         80:32:cf:58:ce:82:6b:1e:22:71:25:6b:06:54:0c:92:56:47:
         0b:04:c4:43:64:22:a3:7f:e5:97:c1:6a:32:79:a9:d8:4b:71:
         4a:0d:e9:73:80:ac:80:22:e7:f8:c6:ae:ae:40:77:b4:43:1a:
         70:a4:06:82:f7:29:5e:e0:69:af:97:d7:bb:92:57:d4:f8:32:
         61:3b:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:27:38 2025 by rpki-client