Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa
File:                     323830343a353134303a3a2f33332d3333203d3e20323638343430.roa (raw, json)
Hash identifier:          s/AntO+2c5k/zKdsjk3TasxRwWhdM2eh1y2TxYbanK8=
Subject key identifier:   20:0E:3C:0F:DD:0B:B9:63:6C:10:A4:18:8A:BA:B5:BF:72:4A:7E:47
Certificate issuer:       /CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Certificate serial:       55BDB2708A8EFC4F4C5938C0DF8BDCA01C6C47B6
Authority key identifier: 3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa
Signing time:             Mon 05 May 2025 20:58:38 +0000
ROA not before:           Mon 05 May 2025 20:53:38 +0000
ROA not after:            Mon 04 May 2026 20:58:38 +0000
asID:                     268440
IP address blocks:        2804:5140::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl
                          rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 21:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bd:b2:70:8a:8e:fc:4f:4c:59:38:c0:df:8b:dc:a0:1c:6c:47:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
        Validity
            Not Before: May  5 20:53:38 2025 GMT
            Not After : May  4 20:58:38 2026 GMT
        Subject: CN=200E3C0FDD0BB9636C10A4188ABAB5BF724A7E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bb:6b:0c:36:c6:05:63:7f:28:a2:52:59:31:
                    79:aa:38:8b:2f:72:a7:e3:69:3f:42:5f:fc:21:4f:
                    69:87:14:06:3d:c7:e1:18:9e:fc:df:e7:09:a9:b1:
                    ed:d9:cd:c1:ea:7c:66:32:4b:12:24:67:0f:7a:18:
                    b5:a9:3d:72:ae:b2:77:9a:2c:3f:0a:91:07:9c:ed:
                    ee:5e:b4:10:83:37:27:c6:86:48:cf:68:c8:55:88:
                    a3:b4:55:f1:e7:60:f8:aa:8d:70:72:5c:e9:f0:86:
                    9c:d8:2a:a1:f3:41:4e:1c:4e:40:e4:56:dd:37:29:
                    4a:29:b8:fe:4a:aa:2f:fd:07:d7:7f:5b:19:d1:66:
                    7b:3a:fd:ae:01:e9:23:e9:09:98:8b:fc:47:cf:a6:
                    89:d4:0e:bc:73:64:a0:51:a6:3a:dc:58:aa:f7:a8:
                    3d:92:2b:bb:38:e9:b8:53:f9:8d:c3:12:b4:d0:00:
                    0b:0a:58:b5:a4:a7:8a:0f:29:7c:18:15:a2:8a:75:
                    04:ca:56:34:6d:27:9d:3a:67:3c:dc:9a:e8:33:a4:
                    49:60:0f:c5:6e:46:98:44:64:19:ae:6b:74:2a:98:
                    46:b8:19:c2:01:4f:fd:0d:53:47:7b:ac:54:82:ee:
                    97:8e:41:ef:ea:2d:ec:7b:7e:38:4d:89:83:81:fd:
                    af:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0E:3C:0F:DD:0B:B9:63:6C:10:A4:18:8A:BA:B5:BF:72:4A:7E:47
            X509v3 Authority Key Identifier:
                keyid:3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/323830343a353134303a3a2f33332d3333203d3e20323638343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5140::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:d1:ba:2f:5e:97:54:44:aa:b4:3f:5c:58:9a:d9:05:b0:8c:
         f5:ba:14:dc:d1:de:98:c1:4c:41:96:91:2c:35:ee:1b:72:45:
         81:f3:e7:68:e8:9a:64:f5:43:e8:dd:7f:e9:b6:5d:e1:df:4c:
         73:e5:d3:31:9d:3a:dc:66:4e:9a:45:35:a1:5a:57:d3:ac:f3:
         3b:f5:22:ac:f9:26:72:2e:28:a7:8d:97:45:e6:11:65:7c:6e:
         3d:47:2a:6d:f4:4a:f6:26:29:ee:be:64:20:c7:aa:fa:f7:7c:
         a8:99:43:e2:6f:a0:f7:53:86:6f:c5:d0:35:76:15:05:ea:c5:
         96:8e:33:20:f1:92:63:c9:ce:1b:70:61:b4:24:29:fc:df:e6:
         7e:74:cf:09:85:38:8c:8c:49:ce:04:90:99:35:58:e0:3a:8f:
         66:63:26:6f:6b:fa:b3:54:9a:2c:5c:6f:03:78:a3:fc:ef:36:
         c6:e3:a6:a7:b5:33:bf:ab:37:4c:94:0c:c0:47:08:0b:4f:78:
         4b:6e:30:fc:0f:6d:a8:fe:98:47:a1:0c:be:10:8c:8e:27:43:
         50:2d:2f:23:c1:e1:e0:10:a8:d3:9a:0e:75:a9:6f:ef:63:d5:
         84:95:83:1a:13:c6:58:af:43:b4:8b:8c:bd:cc:46:34:e8:ba:
         a4:c6:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:24:02 2025 by rpki-client