Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a383030303a3a2f33342d3334203d3e20323636333735.roa
File:                     323830343a333664343a383030303a3a2f33342d3334203d3e20323636333735.roa (raw, json)
Hash identifier:          nXphv5rSc+zWzWFSv0IFPwpobK6d6Q3QbiOXg6TdYIM=
Subject key identifier:   D3:51:4E:99:EB:68:82:9B:62:42:7A:F5:5A:56:CE:A5:4B:DB:24:F0
Certificate issuer:       /CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
Certificate serial:       1157DBA0654B2A93422A1089525651F6FFAE6667
Authority key identifier: 4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a383030303a3a2f33342d3334203d3e20323636333735.roa
Signing time:             Wed 30 Apr 2025 18:53:39 +0000
ROA not before:           Wed 30 Apr 2025 18:48:39 +0000
ROA not after:            Wed 29 Apr 2026 18:53:39 +0000
asID:                     266375
IP address blocks:        2804:36d4:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl
                          rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 12:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:57:db:a0:65:4b:2a:93:42:2a:10:89:52:56:51:f6:ff:ae:66:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75
        Validity
            Not Before: Apr 30 18:48:39 2025 GMT
            Not After : Apr 29 18:53:39 2026 GMT
        Subject: CN=D3514E99EB68829B62427AF55A56CEA54BDB24F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d6:14:7d:7e:ae:40:d8:07:0a:03:7c:22:26:
                    8c:ab:5e:46:46:c2:cd:92:a9:d4:16:45:75:32:38:
                    a0:a3:e9:33:f5:03:73:69:b4:0a:6b:e7:cb:80:d8:
                    80:1b:10:38:56:e4:a5:83:d1:75:a7:84:98:95:a7:
                    a0:d2:86:ae:46:de:7d:5f:85:4f:4e:f6:6c:a9:2b:
                    23:66:7d:84:cd:3d:22:d0:ee:a9:f0:dc:c2:97:f5:
                    bd:ab:cb:73:36:ae:42:2b:6b:40:11:d1:38:35:a6:
                    fd:4d:1b:3e:5d:e6:17:ae:67:8b:55:38:ce:fb:3e:
                    fa:0f:c4:fa:1f:f3:82:44:2f:69:4e:25:41:c4:c0:
                    32:29:94:cb:6f:86:ee:a6:16:a0:df:d6:df:22:ea:
                    b5:55:14:01:95:da:a1:76:b1:ab:df:74:f0:33:6f:
                    0a:9c:a1:e4:0b:e9:53:c0:ef:13:07:d1:4f:0b:7f:
                    cf:55:84:70:84:69:7a:0a:bd:06:74:4d:48:3d:25:
                    e2:ce:99:56:99:b5:ac:db:af:af:9c:b6:2d:bc:10:
                    dd:12:fc:e1:02:ad:75:8c:6c:8a:10:6b:71:63:27:
                    c9:1f:24:30:ca:42:82:aa:c0:a2:24:31:83:39:4c:
                    c5:7b:e3:c6:7b:7d:da:99:dd:d6:d0:9a:55:f8:df:
                    1b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:51:4E:99:EB:68:82:9B:62:42:7A:F5:5A:56:CE:A5:4B:DB:24:F0
            X509v3 Authority Key Identifier:
                keyid:4C:E4:83:3B:F7:C6:B0:26:8B:F4:C3:F1:E2:0C:0D:B4:E4:89:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE4833BF7C6B0268BF4C3F1E20C0DB4E4897C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/323830343a333664343a383030303a3a2f33342d3334203d3e20323636333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36d4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:0c:62:10:d5:2c:56:d0:ed:4e:65:77:db:9d:91:50:8f:
         65:87:cd:91:b0:bd:b5:ef:9f:3d:ff:65:de:6a:7d:af:98:62:
         46:89:eb:32:8f:bd:48:ca:c8:e6:dd:16:de:91:b2:30:8f:95:
         47:af:fe:60:38:8e:b8:4a:09:42:09:d5:df:82:81:75:b4:e7:
         c7:02:4c:6b:dd:dc:0b:23:dc:85:5d:3f:23:5b:00:eb:7b:b3:
         be:e7:88:e2:1b:78:1b:bd:5a:46:3d:9b:e3:9c:c6:d0:78:95:
         dc:9f:a1:b1:7a:c6:f8:7e:87:70:b8:96:7a:cb:c4:3b:34:ac:
         51:d7:89:9c:72:3b:c9:d8:2e:81:86:04:5a:6b:d2:15:8a:fd:
         74:56:a4:7f:bd:51:d5:2b:25:a2:5c:7f:83:4e:91:b3:c8:91:
         1b:57:f9:80:f4:0a:7c:7f:54:f5:52:7b:17:cc:9c:45:92:3e:
         64:6f:03:da:6d:d8:d8:58:e7:d9:f2:ab:83:fe:82:76:5d:d5:
         86:47:fc:92:60:87:1f:bb:bb:bf:d7:b8:45:5a:25:25:1c:79:
         eb:53:2b:80:7a:b3:4e:47:f0:fc:fd:f6:21:21:2e:64:48:79:
         b3:c7:70:24:58:77:11:ff:1a:1e:b0:10:63:de:c2:36:3b:db:
         fe:d5:f1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:11:45 2025 by rpki-client