Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33332d3333203d3e203532393434.roa
File:                     323830343a6232383a3a2f33332d3333203d3e203532393434.roa (raw, json)
Hash identifier:          C3OSKJ5PJ2VT3luXxKD9FLrCsxrrTBMZHbOoXLwjutg=
Subject key identifier:   80:41:F1:C8:A3:A4:1C:0E:58:DD:3F:43:EB:3F:FC:10:71:B0:81:53
Certificate issuer:       /CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Certificate serial:       512AAFD08B2BBB93090730335C6B6C4D8AEB7DAB
Authority key identifier: 2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33332d3333203d3e203532393434.roa
Signing time:             Tue 06 May 2025 14:31:34 +0000
ROA not before:           Tue 06 May 2025 14:26:34 +0000
ROA not after:            Tue 05 May 2026 14:31:34 +0000
asID:                     52944
IP address blocks:        2804:b28::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl
                          rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 19:29:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2a:af:d0:8b:2b:bb:93:09:07:30:33:5c:6b:6c:4d:8a:eb:7d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
        Validity
            Not Before: May  6 14:26:34 2025 GMT
            Not After : May  5 14:31:34 2026 GMT
        Subject: CN=8041F1C8A3A41C0E58DD3F43EB3FFC1071B08153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:10:0c:d2:84:74:6a:06:26:1e:94:dc:cf:
                    02:0e:0f:3c:52:0c:8f:e7:b9:3b:21:55:c9:4d:d0:
                    e1:17:82:01:84:b0:80:f4:02:be:fb:0f:74:41:92:
                    49:47:d5:9d:b8:89:81:a2:a6:11:ca:b7:46:b3:a9:
                    ac:69:5e:25:c7:d4:2b:54:fb:89:9a:fa:7a:8b:81:
                    55:e9:5f:9d:39:74:00:49:7d:80:f9:39:39:81:3a:
                    57:3a:6e:8a:cb:9b:46:28:bc:e9:34:a1:35:2e:4e:
                    89:98:ec:6e:cb:69:42:0a:e0:3c:8b:e1:b8:cd:40:
                    d7:ad:cd:32:34:c3:e8:74:51:ed:ae:cd:90:bd:a1:
                    99:5d:93:ea:ea:75:ef:e5:dc:4d:79:b3:a0:aa:db:
                    6d:bd:b2:a6:a4:3f:1f:4d:b4:e8:02:36:1e:96:3a:
                    a8:fc:07:34:c1:c0:fa:14:68:20:ec:dc:c3:6a:47:
                    f4:02:d0:85:6d:8a:fd:11:dc:6e:56:a3:2a:db:5e:
                    64:01:cb:b8:5e:b4:e1:68:de:32:b6:5e:a3:17:b3:
                    45:97:79:89:c4:a7:8b:5c:1c:7b:60:9a:78:c1:38:
                    48:1a:c7:c7:5e:31:bc:7e:f3:5b:ed:f7:c4:04:ee:
                    57:da:a5:27:c0:d3:81:a0:22:43:2d:94:57:ef:96:
                    8c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:41:F1:C8:A3:A4:1C:0E:58:DD:3F:43:EB:3F:FC:10:71:B0:81:53
            X509v3 Authority Key Identifier:
                keyid:2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33332d3333203d3e203532393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b28::/33

    Signature Algorithm: sha256WithRSAEncryption
         41:85:88:08:f2:03:d0:78:69:70:96:09:a5:65:0e:b8:6a:f4:
         0a:1f:86:1e:39:ab:43:aa:12:9d:b7:a8:c8:9b:c8:ef:c5:99:
         d6:b7:f2:24:7c:bd:3d:88:31:9d:15:c6:64:b0:a4:71:2b:55:
         51:2a:1d:c9:f1:fb:c3:d5:3f:67:3a:b6:44:7e:ec:40:d7:cb:
         36:37:a2:e7:7e:56:44:3d:e5:dd:f8:a7:28:da:d6:30:04:ce:
         3e:c7:5a:f4:ad:e9:5c:10:1f:c9:38:1c:5d:ee:cc:d2:05:7a:
         fb:72:ee:b5:28:9a:6e:e7:38:c8:f7:21:86:93:18:1e:c6:5c:
         c0:57:be:22:c9:6f:9b:65:45:d2:58:b4:9e:ae:0b:4d:ef:80:
         65:ef:bf:ce:dc:ad:c8:c6:c2:1b:cc:8a:f8:a1:d5:b9:9a:26:
         fa:37:6a:94:b6:9d:90:f9:1e:3f:26:7d:b3:86:8e:8d:47:c5:
         2f:53:b0:03:49:00:fc:e3:0d:56:ab:84:6d:47:05:de:f8:23:
         4a:66:ab:eb:4e:19:14:68:7d:0c:7d:35:2c:fc:d4:43:a9:e7:
         e9:c8:8d:a5:75:11:56:de:a3:f5:3c:ae:03:9f:ef:56:a3:b0:
         b4:a2:1d:a4:fb:c3:ca:82:3c:93:3e:30:ac:ba:02:f4:c7:aa:
         3d:9d:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:56:48 2025 by rpki-client