Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33322d3332203d3e20323730393830.roa
File:                     323830343a373436633a3a2f33322d3332203d3e20323730393830.roa (raw, json)
Hash identifier:          szZfVwKy2ppkEIjzTD/tQzKMd0qxU7xevT9y4OXqnhQ=
Subject key identifier:   BD:E0:F1:B4:E0:D3:F5:E8:E5:02:2B:A7:61:48:99:CE:72:99:63:B2
Certificate issuer:       /CN=DB57D586E31A5D34EC7A70EA663E9A2D315A0125
Certificate serial:       13EC5BBD96288290AE4EC7074EE29988E15B44C8
Authority key identifier: DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33322d3332203d3e20323730393830.roa
Signing time:             Fri 02 May 2025 21:22:44 +0000
ROA not before:           Fri 02 May 2025 21:17:44 +0000
ROA not after:            Fri 01 May 2026 21:22:44 +0000
asID:                     270980
IP address blocks:        2804:746c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 00:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ec:5b:bd:96:28:82:90:ae:4e:c7:07:4e:e2:99:88:e1:5b:44:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB57D586E31A5D34EC7A70EA663E9A2D315A0125
        Validity
            Not Before: May  2 21:17:44 2025 GMT
            Not After : May  1 21:22:44 2026 GMT
        Subject: CN=BDE0F1B4E0D3F5E8E5022BA7614899CE729963B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:42:ec:04:65:94:ff:c1:3a:a4:83:1f:4d:
                    01:10:cd:2d:49:f4:ae:0e:ca:37:9d:d0:10:be:3e:
                    29:8d:4d:9e:22:b7:49:25:f6:22:18:3f:fa:d1:a7:
                    29:87:ef:7a:17:2e:e5:78:d4:c4:70:ad:13:c4:21:
                    e3:46:43:0b:51:4f:4e:58:d0:a9:a7:1c:41:1c:55:
                    f2:6d:3d:c3:ef:18:cc:41:62:4c:14:e9:d3:9f:ef:
                    33:52:c6:83:3b:d3:56:ff:fb:b5:fe:4b:83:35:5d:
                    e8:90:58:cb:ae:68:14:ae:23:e1:0e:38:a7:ae:5c:
                    7f:86:93:4e:22:ba:5c:8b:f7:53:bf:0e:c0:27:b9:
                    f4:07:c6:6a:3e:6f:c0:81:fb:e4:e5:79:2e:e9:2c:
                    3f:25:d5:e2:9f:67:42:75:a3:f8:29:de:3e:15:7e:
                    b5:25:6b:19:64:e5:30:37:2c:12:69:91:e1:f5:d0:
                    ad:9e:cd:86:07:be:00:f8:12:b6:a2:b3:31:bb:d4:
                    13:f1:44:c9:9e:d6:a2:71:7f:6a:13:b1:28:d1:2a:
                    8d:bf:fb:d9:3c:2d:e4:73:d2:69:c5:b4:b6:c3:58:
                    ec:96:c9:41:53:4e:76:7c:fb:ff:9d:82:95:25:ed:
                    c5:1b:4d:fc:10:ba:00:6a:0f:cb:c0:b6:c3:f0:13:
                    d3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E0:F1:B4:E0:D3:F5:E8:E5:02:2B:A7:61:48:99:CE:72:99:63:B2
            X509v3 Authority Key Identifier:
                keyid:DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33322d3332203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:746c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:51:ff:46:2f:0e:a3:f4:e3:96:98:bc:c6:1f:5f:9b:c3:
         08:7b:da:9e:3a:97:81:11:a1:6a:c8:c1:04:21:0d:c1:9e:54:
         a0:52:f3:d0:d6:87:4f:3b:1d:38:41:af:8c:9d:ce:c2:e1:38:
         b8:bd:1b:51:61:24:9c:57:e8:29:6a:36:80:e2:d1:f0:d9:09:
         2b:27:5f:4f:15:6a:29:6a:19:c2:08:e7:3d:af:92:cb:f6:00:
         67:ce:1a:99:3f:c2:69:3d:a1:0b:c1:7d:cd:b6:d9:bb:e0:ff:
         e1:aa:67:23:fb:75:14:2b:81:b1:dd:d5:79:f4:e1:33:d1:61:
         da:ce:46:20:db:da:48:e2:46:b6:9e:52:40:5f:5a:5e:41:36:
         8e:45:7a:d9:eb:6c:96:02:c0:27:df:4f:e3:d5:15:90:7a:9d:
         d5:f6:d6:2b:83:51:82:3d:8d:44:ad:78:5f:78:45:4c:80:07:
         5b:ee:79:66:d7:82:8e:ee:b7:88:63:87:7c:dd:69:9b:7c:9a:
         ff:ca:cd:61:b3:e7:4a:0c:0b:ec:12:3a:69:dc:ac:2a:23:02:
         bc:16:53:f3:75:42:ee:0b:6c:01:06:eb:e7:3f:96:a0:b5:fd:
         3f:86:74:8a:09:25:9d:38:7f:8f:ec:a9:29:67:18:4b:2c:05:
         f9:6f:1e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:28:51 2025 by rpki-client