Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33342d3334203d3e20323633393430.roa
File:                     323830343a323831383a3a2f33342d3334203d3e20323633393430.roa (raw, json)
Hash identifier:          H7JgGBBuzU9M20bywpYJkTHdxPSpDBFFQVuDBWZROsU=
Subject key identifier:   92:AD:13:8E:2D:44:01:D2:ED:92:9E:66:D2:1C:C6:FA:E1:1D:87:BF
Certificate issuer:       /CN=49035094B34CBA1B308381D57F68D0820CEA3A4F
Certificate serial:       79E0A9E1980EEABBAA0D1C66D04A13C6942EC71E
Authority key identifier: 49:03:50:94:B3:4C:BA:1B:30:83:81:D5:7F:68:D0:82:0C:EA:3A:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33342d3334203d3e20323633393430.roa
Signing time:             Mon 05 May 2025 20:48:51 +0000
ROA not before:           Mon 05 May 2025 20:43:51 +0000
ROA not after:            Mon 04 May 2026 20:48:51 +0000
asID:                     263940
IP address blocks:        2804:2818::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 13:15:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e0:a9:e1:98:0e:ea:bb:aa:0d:1c:66:d0:4a:13:c6:94:2e:c7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49035094B34CBA1B308381D57F68D0820CEA3A4F
        Validity
            Not Before: May  5 20:43:51 2025 GMT
            Not After : May  4 20:48:51 2026 GMT
        Subject: CN=92AD138E2D4401D2ED929E66D21CC6FAE11D87BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2a:e2:7f:02:93:60:2a:db:af:aa:e9:7c:17:
                    7c:e4:e2:e5:23:95:52:a1:cc:33:c7:7f:53:4d:dc:
                    eb:fa:b3:b1:d1:da:0a:11:c9:16:71:83:6d:d5:1b:
                    3e:f1:43:8a:ad:17:21:aa:ef:b0:d1:a7:65:ad:2c:
                    c9:71:b4:3c:86:e5:b4:4a:ce:3e:1a:43:d1:71:47:
                    3d:1a:be:d7:51:7b:2b:4c:6a:04:5e:10:a1:e2:b6:
                    9f:ad:ca:d8:90:aa:2f:a3:02:45:0a:00:f8:29:44:
                    7f:92:4e:f2:4b:36:30:50:69:ae:64:59:7e:7c:b4:
                    df:fb:0c:fc:66:9c:91:56:7c:c6:0c:16:af:65:7c:
                    32:ba:9a:43:e1:bb:7f:2f:19:bf:eb:b2:51:3b:3b:
                    7d:d1:14:d8:ac:e0:a9:f7:1c:0c:80:89:3c:cd:58:
                    62:90:08:f9:a9:cd:2d:1a:ac:7a:4a:9f:52:29:18:
                    6e:f7:75:95:f0:d8:7d:8f:4e:b2:7b:05:66:04:aa:
                    7d:0d:58:d8:8f:6a:06:92:28:4e:ae:e8:14:07:67:
                    15:13:a4:3c:dd:14:10:6d:9b:85:df:22:a1:ba:af:
                    5a:75:d9:86:f3:43:b2:66:f9:95:93:ed:76:65:e3:
                    1a:84:ad:44:50:05:d7:02:62:0d:1c:3f:99:58:f4:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AD:13:8E:2D:44:01:D2:ED:92:9E:66:D2:1C:C6:FA:E1:1D:87:BF
            X509v3 Authority Key Identifier:
                keyid:49:03:50:94:B3:4C:BA:1B:30:83:81:D5:7F:68:D0:82:0C:EA:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33342d3334203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818::/34

    Signature Algorithm: sha256WithRSAEncryption
         7a:90:47:0e:f7:79:3c:e5:cd:84:6d:a0:fe:54:2c:29:91:33:
         c0:b3:66:6c:de:ce:ff:f8:f1:03:84:f9:c0:06:7a:f2:bc:50:
         95:05:a2:77:27:d3:43:92:ca:61:a0:09:42:31:b4:e6:08:5b:
         e8:ff:8c:ab:9d:d2:3b:12:35:5f:73:ea:ed:c8:44:c0:e3:64:
         2b:3a:c2:07:d8:df:da:b6:8b:bc:e0:5d:39:d5:53:cd:86:5a:
         49:d0:ee:16:f5:1c:3d:46:3b:d0:41:6c:b1:d2:44:98:c3:9a:
         64:61:ea:3b:24:5e:bb:31:51:cf:5b:2f:6e:8a:ad:74:8e:35:
         b2:48:d5:42:9f:72:df:c8:ff:c7:5e:31:08:f1:2b:a5:52:94:
         a3:27:fb:96:a1:11:03:db:b0:80:a9:b8:ba:58:2e:4c:b7:af:
         42:ab:f9:98:ec:50:3b:79:8f:e2:34:b7:ac:d1:e7:4a:61:48:
         46:79:56:1c:e9:d3:04:ba:fc:06:de:c1:26:a3:39:4b:3a:de:
         c2:c6:43:5a:12:5a:24:77:cf:2d:01:a6:c2:30:d0:1d:f8:d3:
         1c:e8:97:c2:7f:bf:f6:c4:a2:78:20:bf:f8:fe:70:8b:fc:cd:
         ec:57:c9:f1:4e:9c:14:5d:53:cf:93:96:0f:a4:c7:24:fc:91:
         45:27:d6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:04:59 2025 by rpki-client