Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a336231633a3a2f33322d3438203d3e20323636313330.roa
File:                     323830343a336231633a3a2f33322d3438203d3e20323636313330.roa (raw, json)
Hash identifier:          B07f5hPx475t7ez3tk2z03OctbEa+TF4ZBCe1v9iQaA=
Subject key identifier:   32:B8:70:66:C6:E1:F9:A9:67:2A:A8:62:4B:19:52:C2:3C:BA:41:42
Certificate issuer:       /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial:       2F725ED60D2C850B82B46E75108682F5F0CFB2B9
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a336231633a3a2f33322d3438203d3e20323636313330.roa
Signing time:             Wed 30 Apr 2025 18:28:54 +0000
ROA not before:           Wed 30 Apr 2025 18:23:54 +0000
ROA not after:            Wed 29 Apr 2026 18:28:54 +0000
asID:                     266130
IP address blocks:        2804:3b1c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
                          rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 04:29:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:72:5e:d6:0d:2c:85:0b:82:b4:6e:75:10:86:82:f5:f0:cf:b2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
        Validity
            Not Before: Apr 30 18:23:54 2025 GMT
            Not After : Apr 29 18:28:54 2026 GMT
        Subject: CN=32B87066C6E1F9A9672AA8624B1952C23CBA4142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3a:d4:e8:71:34:e4:09:2f:6c:99:f3:0d:28:
                    06:09:20:77:dc:6e:ab:34:5c:98:0e:20:11:3f:1e:
                    5b:b0:ae:9a:32:b7:22:d3:2c:fe:de:5b:06:52:fb:
                    54:55:6d:0f:ff:9a:9f:ba:f1:09:f4:4a:54:ee:8d:
                    c7:eb:44:23:92:85:1c:f2:fd:f7:d6:85:a9:fe:18:
                    1b:24:2d:22:4b:b0:b4:92:16:de:d6:f0:b9:63:ae:
                    f9:33:34:9d:35:17:b8:ba:d7:f2:cf:ba:8e:1e:38:
                    bf:03:e5:b8:e3:d7:b4:ea:11:28:0b:ad:1f:03:76:
                    03:f5:12:fc:d1:da:dc:74:7f:c0:76:37:5d:25:f9:
                    8b:fa:f6:2c:7e:d7:13:dc:70:84:51:a3:89:be:f8:
                    b1:08:dd:63:4d:fd:fe:29:c1:ee:54:a7:86:54:92:
                    52:ca:41:cd:fb:2c:5a:af:48:47:94:57:1d:70:5e:
                    ee:92:82:de:fc:dc:c0:ef:8e:b4:20:1e:04:45:ef:
                    06:40:99:03:9f:76:6a:37:4d:1a:0e:ba:4a:41:a7:
                    02:78:45:a9:9a:24:8f:fa:d9:f8:1d:ba:6c:5d:12:
                    a0:55:1a:8a:76:df:c1:d9:f4:88:a0:bd:22:28:22:
                    2b:ab:c8:33:f9:a8:5b:0e:8d:db:e4:c6:cd:82:31:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B8:70:66:C6:E1:F9:A9:67:2A:A8:62:4B:19:52:C2:3C:BA:41:42
            X509v3 Authority Key Identifier:
                keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/323830343a336231633a3a2f33322d3438203d3e20323636313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:65:7e:95:76:cd:b5:bb:64:d2:91:55:42:5b:4c:b5:6e:a3:
         57:ed:9d:5b:db:ba:e5:86:6c:d7:dc:d4:a5:a9:46:4a:e9:aa:
         4b:1f:03:e1:e7:87:cd:1c:d2:00:c1:59:68:12:65:a9:f0:19:
         de:69:bc:11:69:39:d7:24:0d:c0:62:b9:6e:5b:b6:b1:69:b4:
         4c:6e:7b:1a:7a:6c:b0:c3:8e:6d:40:9b:70:ae:27:16:f3:6b:
         ab:9c:f3:1b:b5:06:a5:16:54:21:6c:05:2f:d5:be:dd:22:d4:
         30:2d:b7:09:2a:af:ad:f6:e1:7e:1a:75:08:99:c7:6c:4f:e9:
         61:77:9e:dd:95:58:dc:7e:ad:28:bf:70:37:30:68:0a:70:fd:
         34:44:cc:5f:c9:5a:04:c2:5f:79:5a:17:7e:74:8d:74:45:06:
         0e:c2:2f:61:16:58:4b:be:54:70:60:93:30:13:cf:71:73:87:
         1f:3b:91:eb:0f:ec:a0:bf:b8:a0:b2:23:b7:b1:c8:f0:9b:a3:
         4d:78:87:95:cd:c9:35:ca:4a:05:93:ac:98:37:b4:29:8d:c6:
         34:94:d0:0c:9b:2a:cb:e2:d3:0b:09:eb:52:51:ef:0f:10:15:
         42:cf:0e:cc:ea:44:d7:ac:52:a4:5e:61:bf:e7:bf:ff:d1:ee:
         04:c6:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 20:14:59 2025 by rpki-client