Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a326161383a3a2f33322d3332203d3e20323634303838.roa
File:                     323830343a326161383a3a2f33322d3332203d3e20323634303838.roa (raw, json)
Hash identifier:          50hl1857kUjhPY1lDBVE1bxsoRK7CcECoBJI8x1RXCE=
Subject key identifier:   BF:AD:AA:1B:7C:5D:5D:CB:25:35:33:AF:3B:86:BB:E3:A7:AA:C9:62
Certificate issuer:       /CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
Certificate serial:       6E3A4DEA2C13AC07540BB0C4D86952DAC84E9670
Authority key identifier: E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a326161383a3a2f33322d3332203d3e20323634303838.roa
Signing time:             Fri 25 Apr 2025 14:50:40 +0000
ROA not before:           Fri 25 Apr 2025 14:45:40 +0000
ROA not after:            Fri 24 Apr 2026 14:50:40 +0000
asID:                     264088
IP address blocks:        2804:2aa8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 23:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3a:4d:ea:2c:13:ac:07:54:0b:b0:c4:d8:69:52:da:c8:4e:96:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3F172B4C692AAA958A93F0C7D577A5AE8D7082F
        Validity
            Not Before: Apr 25 14:45:40 2025 GMT
            Not After : Apr 24 14:50:40 2026 GMT
        Subject: CN=BFADAA1B7C5D5DCB253533AF3B86BBE3A7AAC962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:24:1a:83:ac:91:d3:32:1d:3a:20:8d:2e:b9:
                    a1:30:21:25:57:bc:e9:7a:1d:20:5c:31:1a:a7:69:
                    ed:53:97:68:39:4d:da:b1:f1:6d:9d:4a:bf:8f:5f:
                    55:df:f3:97:88:d6:39:80:45:1d:68:2c:60:f8:83:
                    38:01:44:04:a3:2b:18:b2:ee:cc:b7:29:44:08:e6:
                    19:b4:99:ae:0f:2a:39:c0:37:42:00:ca:21:e6:90:
                    0f:61:97:20:9b:f5:51:a6:1d:94:b7:40:c6:a1:2c:
                    f4:46:7c:64:e9:30:c2:f2:3c:5a:91:b2:65:c3:fd:
                    1e:65:79:a7:43:2b:8a:09:92:3e:98:53:00:67:b8:
                    7e:a7:5a:cd:fa:6f:64:95:65:9c:8e:f1:85:de:4c:
                    30:c0:6a:89:a7:2a:46:40:93:ab:85:df:14:ff:e4:
                    fc:bc:d6:91:11:23:a9:5d:2e:c9:dd:4b:a5:36:d8:
                    67:b4:0c:8d:3c:59:03:55:47:a3:83:3a:46:a1:a7:
                    f5:43:97:ce:25:d4:33:96:a8:fb:a2:9f:a2:24:da:
                    c6:15:fa:3e:68:6a:9f:43:cd:70:28:f0:d5:70:5f:
                    83:a2:27:f6:7a:db:b4:a3:d6:54:ce:aa:c4:8c:32:
                    84:03:4f:60:41:01:1f:fe:e8:dc:a8:4c:9d:e5:bb:
                    2e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AD:AA:1B:7C:5D:5D:CB:25:35:33:AF:3B:86:BB:E3:A7:AA:C9:62
            X509v3 Authority Key Identifier:
                keyid:E3:F1:72:B4:C6:92:AA:A9:58:A9:3F:0C:7D:57:7A:5A:E8:D7:08:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3F172B4C692AAA958A93F0C7D577A5AE8D7082F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a326161383a3a2f33322d3332203d3e20323634303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2aa8::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:51:7f:93:be:91:fe:a6:b5:c9:4b:84:f0:c0:5e:23:a4:d1:
         b2:5a:99:b6:f6:78:5e:37:b0:b9:1b:e4:78:4f:70:b8:f4:dd:
         e5:8c:e5:0f:c2:bc:6f:67:02:42:41:d3:e9:e8:89:3f:2e:67:
         d6:51:6c:b0:a3:a0:3b:18:f8:60:94:fb:6b:1a:48:ff:5c:9c:
         b4:de:d5:f2:06:dc:36:8b:c1:42:4c:88:4e:48:9d:1c:bc:ae:
         54:75:4f:54:7d:ff:3c:d0:e1:2c:20:79:f4:8c:bf:29:53:b3:
         e4:1c:28:5f:3e:0c:06:71:c1:31:45:71:4f:64:4d:a4:8b:f3:
         93:69:8b:fa:16:7b:38:3e:d8:3f:99:09:d9:3b:4c:c4:39:34:
         35:40:6f:80:f3:a4:36:a0:1d:c9:43:c7:d5:10:6b:cc:42:e3:
         83:83:04:00:b8:b8:49:19:aa:99:a6:9e:e4:84:00:91:60:70:
         41:ac:32:d2:0b:a3:08:77:c7:f9:fe:b5:2d:69:81:c4:b8:ba:
         b2:23:16:8b:b9:a6:91:9a:e2:a4:eb:f1:e4:28:0b:ca:03:6a:
         ba:69:fd:3e:be:67:1d:c5:42:73:c9:a6:0e:71:31:e0:4a:ef:
         d0:eb:eb:d4:b9:61:59:44:23:52:d5:cb:0c:a4:16:a5:ae:1e:
         49:d4:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:36:24 2025 by rpki-client