Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/323830343a313435303a3a2f33322d3438203d3e20323632383631.roa
File:                     323830343a313435303a3a2f33322d3438203d3e20323632383631.roa (raw, json)
Hash identifier:          5Q9tiHGVOVDCj3G898IWOLh8INUElXpH3eiyHIywpQs=
Subject key identifier:   C3:7E:5E:7F:19:13:F9:73:B3:7C:2A:D8:70:2D:85:83:66:E0:9E:C0
Certificate issuer:       /CN=43230BA37049255C04E85C87D9F4BDD3B9313605
Certificate serial:       344FC98C51893B4C34335EF8A52BC6F5E6358F5B
Authority key identifier: 43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/323830343a313435303a3a2f33322d3438203d3e20323632383631.roa
Signing time:             Mon 28 Apr 2025 18:30:44 +0000
ROA not before:           Mon 28 Apr 2025 18:25:44 +0000
ROA not after:            Mon 27 Apr 2026 18:30:44 +0000
asID:                     262861
IP address blocks:        2804:1450::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl
                          rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 12:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4f:c9:8c:51:89:3b:4c:34:33:5e:f8:a5:2b:c6:f5:e6:35:8f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43230BA37049255C04E85C87D9F4BDD3B9313605
        Validity
            Not Before: Apr 28 18:25:44 2025 GMT
            Not After : Apr 27 18:30:44 2026 GMT
        Subject: CN=C37E5E7F1913F973B37C2AD8702D858366E09EC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:83:24:27:0c:5f:72:8a:d9:79:e6:2b:dc:
                    49:44:13:bd:90:52:ed:27:2a:4c:a5:94:10:ec:f7:
                    a7:14:fe:32:c4:08:89:3a:ec:f6:a8:76:9b:fe:fc:
                    a0:92:de:99:55:53:6d:9e:ee:33:94:db:c8:49:8b:
                    e8:3c:d0:66:fa:33:ed:89:ec:b6:56:4d:74:db:c4:
                    02:c9:0c:c9:fa:5c:ae:ef:4c:dd:d8:78:14:96:a3:
                    01:0d:c1:52:42:7c:76:f9:fe:6f:e1:17:c9:21:bf:
                    17:91:af:f1:81:0c:c0:d3:b9:ea:90:01:21:93:cf:
                    03:99:48:a5:b7:ce:01:8a:85:e8:ea:9a:5c:43:83:
                    aa:1d:64:0b:49:ad:d2:8e:f5:3e:de:07:e1:8f:16:
                    01:08:2b:67:bf:6c:ab:ee:1f:06:91:31:7a:4e:d3:
                    d8:c5:07:b0:68:3b:45:e8:7c:1c:2b:f2:de:fd:47:
                    81:e9:23:b2:63:25:27:5d:ea:fb:c2:2c:1d:96:40:
                    17:71:d3:75:d2:57:02:95:ae:af:3f:48:77:90:26:
                    ba:af:2c:02:be:8b:bd:c8:70:8e:c0:a9:ee:d2:f8:
                    c0:57:da:af:84:89:4d:f2:61:fb:30:27:14:a6:38:
                    74:3e:bc:31:4c:6a:16:45:b4:c3:fd:90:24:37:e9:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7E:5E:7F:19:13:F9:73:B3:7C:2A:D8:70:2D:85:83:66:E0:9E:C0
            X509v3 Authority Key Identifier:
                keyid:43:23:0B:A3:70:49:25:5C:04:E8:5C:87:D9:F4:BD:D3:B9:31:36:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/43230BA37049255C04E85C87D9F4BDD3B9313605.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43230BA37049255C04E85C87D9F4BDD3B9313605.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtwWDikdvR1YYjULLBzkE2BBBQZuWHLgPtx1Lh2YJsqg/1/323830343a313435303a3a2f33322d3438203d3e20323632383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1450::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:e3:bf:b1:db:4f:62:6c:89:a7:bc:4d:63:af:4b:39:e8:57:
         01:c0:c7:11:cc:90:d6:0e:f3:2e:aa:66:fb:20:26:72:e5:c1:
         77:da:2c:5c:88:9d:64:9c:de:70:19:e2:88:5a:77:4f:f4:92:
         90:37:10:51:9a:0c:69:ff:8b:31:27:3a:61:05:6b:bc:f1:b7:
         da:c8:52:09:d0:c7:77:a6:eb:f9:58:58:80:14:3d:2c:ee:22:
         ce:6a:f8:8a:08:ab:ae:6a:94:f5:b6:f2:55:5d:ed:be:03:04:
         df:33:18:05:26:c2:05:bb:ff:72:dc:b3:7c:66:13:d1:4b:65:
         55:1f:c9:bb:47:81:7e:5c:e3:ce:8f:22:02:17:dd:6d:78:ff:
         da:2d:60:fb:6a:82:6d:46:f7:61:d0:a0:8a:27:b5:36:26:75:
         45:0d:cf:06:6b:42:65:a2:e1:09:da:bc:79:54:1b:7a:26:33:
         72:41:cc:99:bb:c7:d5:d6:ef:3f:96:6a:3e:bf:41:cd:5f:19:
         94:66:bb:8e:52:05:41:cc:65:a9:60:54:bd:43:6a:d3:7b:80:
         5d:b7:65:f9:d2:b6:17:ff:2d:40:26:52:74:13:2f:ac:24:c0:
         c4:a1:3b:0f:19:5c:b5:29:8c:ec:c1:99:05:e1:d9:45:24:9a:
         10:7c:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:35:21 2025 by rpki-client