Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33342d3334203d3e20323730393830.roa
File:                     323830343a373436633a3a2f33342d3334203d3e20323730393830.roa (raw, json)
Hash identifier:          bxSyjGMa5j9yc8FeGLxqzl96VmHesOtGjxUFdb4gtc0=
Subject key identifier:   88:9B:84:53:7D:F4:D5:88:10:AC:52:19:B8:4F:F5:91:24:FD:E5:C1
Certificate issuer:       /CN=DB57D586E31A5D34EC7A70EA663E9A2D315A0125
Certificate serial:       644C0913E2A47AD8630225831C1E0DB0E9E9CCB2
Authority key identifier: DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33342d3334203d3e20323730393830.roa
Signing time:             Fri 02 May 2025 21:22:43 +0000
ROA not before:           Fri 02 May 2025 21:17:43 +0000
ROA not after:            Fri 01 May 2026 21:22:43 +0000
asID:                     270980
IP address blocks:        2804:746c::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.crl
                          rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 08:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:4c:09:13:e2:a4:7a:d8:63:02:25:83:1c:1e:0d:b0:e9:e9:cc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB57D586E31A5D34EC7A70EA663E9A2D315A0125
        Validity
            Not Before: May  2 21:17:43 2025 GMT
            Not After : May  1 21:22:43 2026 GMT
        Subject: CN=889B84537DF4D58810AC5219B84FF59124FDE5C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a9:07:13:9e:2c:03:3c:b3:a6:b8:48:e6:8e:
                    24:68:07:92:51:40:d2:ad:74:9f:af:8d:44:2a:2b:
                    62:93:e3:ce:12:50:18:e5:96:18:ff:17:86:98:3e:
                    93:ff:10:59:76:6c:85:8f:9c:79:40:6d:7b:94:8f:
                    32:5f:8b:60:98:f9:ae:9a:37:88:af:94:ca:84:c8:
                    8d:84:85:a1:96:ab:32:db:be:80:1b:9a:5d:4e:33:
                    4b:05:8f:72:4a:11:e8:46:22:0a:18:e7:55:b6:be:
                    66:86:72:5c:a6:e8:c7:0d:a3:a2:60:de:4f:e9:3c:
                    00:ae:de:09:3b:db:7b:9c:89:68:4e:a9:df:49:f1:
                    9c:93:19:84:c7:eb:8d:0d:39:a2:06:33:98:34:71:
                    17:df:b9:d0:66:2c:22:95:81:32:c9:87:34:bd:4b:
                    67:f0:73:cb:dd:ac:68:33:39:df:a6:78:d6:ea:0b:
                    f4:66:0d:47:b3:35:58:48:99:02:38:f9:a3:eb:18:
                    19:39:ae:98:09:40:bd:11:c1:8d:41:65:91:c4:99:
                    b5:6f:8b:52:73:01:09:f1:e7:1e:cf:4e:77:51:c8:
                    16:f8:04:4e:91:ad:1d:a0:36:5f:5f:cf:6a:27:64:
                    85:98:74:2d:f8:28:66:01:cb:98:95:38:8e:21:54:
                    05:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9B:84:53:7D:F4:D5:88:10:AC:52:19:B8:4F:F5:91:24:FD:E5:C1
            X509v3 Authority Key Identifier:
                keyid:DB:57:D5:86:E3:1A:5D:34:EC:7A:70:EA:66:3E:9A:2D:31:5A:01:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB57D586E31A5D34EC7A70EA663E9A2D315A0125.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwzrFPz3qsBakCCDwgCq3HrmiFGEWbDcmCN1dHUK17ko/0/323830343a373436633a3a2f33342d3334203d3e20323730393830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:746c::/34

    Signature Algorithm: sha256WithRSAEncryption
         20:2f:98:1e:11:12:52:26:4d:c4:2f:b4:bc:4c:40:b9:49:c5:
         ea:a9:0d:47:2b:51:1a:60:90:4b:d6:c4:a9:51:7e:78:74:bc:
         67:fa:bf:a3:bd:c7:45:bf:71:32:59:92:0c:64:00:3e:f2:14:
         c4:64:e8:ce:26:ff:79:d9:a9:b1:fa:91:1e:76:ee:b3:73:f1:
         c4:c3:4c:33:ca:f4:12:2d:8e:d9:83:e6:90:ef:48:13:d9:72:
         fb:0c:30:bd:aa:72:5b:fe:17:0d:53:48:62:86:d2:e4:61:6b:
         41:e7:2e:9d:13:75:9a:6c:1c:cc:69:e0:a8:66:ca:85:e7:df:
         d2:b3:d0:41:5f:8a:1f:75:b8:7e:b8:d5:4d:67:ec:4e:91:96:
         07:e6:45:26:19:7e:9e:b0:c9:86:f1:f7:f3:fe:8f:fa:9b:b5:
         88:c0:08:84:d3:18:d2:10:72:84:4f:24:32:20:fb:88:e7:1e:
         75:88:7a:39:0d:0f:6d:8d:af:ba:cb:14:57:99:45:9f:4f:5a:
         1a:85:97:2a:22:14:17:8c:c2:81:fe:2c:a8:cf:db:2e:e0:30:
         7b:99:8e:9d:8a:b9:65:b1:88:1b:f7:7b:97:3a:7c:2d:ed:e8:
         fe:42:ea:9b:f5:f9:0e:16:f3:f5:c2:aa:b7:f3:e4:00:35:55:
         7e:e7:16:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:53:56 2025 by rpki-client