Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a343030393a3a2f34382d3438203d3e20323732323532.roa
File:                     323830343a383434633a343030393a3a2f34382d3438203d3e20323732323532.roa (raw, json)
Hash identifier:          2DeHsdKdhijFP8Q1wp2MadjtPyRLFg3RwE0xhTZDdqI=
Subject key identifier:   3F:85:05:D4:44:01:7A:B7:29:D6:26:4F:79:75:97:A7:91:4A:A5:FF
Certificate issuer:       /CN=A24962CC4C921C7064CF78BB8DF4A9C8638402C7
Certificate serial:       353399CDD1D8BE94A327E4CB38F2858CCB8F9AFB
Authority key identifier: A2:49:62:CC:4C:92:1C:70:64:CF:78:BB:8D:F4:A9:C8:63:84:02:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a343030393a3a2f34382d3438203d3e20323732323532.roa
Signing time:             Thu 24 Apr 2025 18:56:41 +0000
ROA not before:           Thu 24 Apr 2025 18:51:41 +0000
ROA not after:            Thu 23 Apr 2026 18:56:41 +0000
asID:                     272252
IP address blocks:        2804:844c:4009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.crl
                          rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:33:99:cd:d1:d8:be:94:a3:27:e4:cb:38:f2:85:8c:cb:8f:9a:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A24962CC4C921C7064CF78BB8DF4A9C8638402C7
        Validity
            Not Before: Apr 24 18:51:41 2025 GMT
            Not After : Apr 23 18:56:41 2026 GMT
        Subject: CN=3F8505D444017AB729D6264F797597A7914AA5FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:55:5f:46:52:0f:c9:03:a0:71:14:c0:32:79:
                    64:3f:6d:f1:30:b6:e6:43:5a:2e:f7:a4:2b:ad:06:
                    85:89:7e:3d:06:fb:66:3b:88:ee:4d:7d:18:6f:ca:
                    6c:ac:d9:1b:56:38:b9:58:01:cd:f2:6b:f6:38:a6:
                    a8:e3:0a:f4:ce:86:e5:9f:fd:a7:62:2f:2b:76:01:
                    00:eb:fa:be:19:b8:1b:e4:81:e6:98:4e:ad:ee:3f:
                    d0:e1:ad:61:ba:72:04:e8:9e:12:76:b1:0e:1f:33:
                    d6:92:0d:d5:5d:92:26:76:fc:09:b1:a1:ba:50:8d:
                    48:4f:b0:77:d7:39:df:2a:8f:cc:8d:37:4d:c5:93:
                    d4:f8:15:04:ba:44:82:a7:9a:03:09:bf:60:8f:9e:
                    40:30:f5:84:e5:c5:18:4c:22:99:24:5a:5a:70:17:
                    1a:b4:c5:6b:3b:77:7f:89:34:d8:19:5d:dd:c6:a5:
                    06:42:46:bd:0c:60:62:03:2b:6c:54:cf:4d:be:aa:
                    5b:b4:8b:77:20:11:9a:28:1d:a9:91:49:0c:c7:a7:
                    23:57:64:35:9c:b2:f5:bb:46:63:ba:3f:95:a9:70:
                    96:6a:02:3c:f7:00:31:cf:43:03:00:49:2d:2e:c1:
                    f5:15:db:ae:5d:91:a6:a4:d6:eb:ec:a7:25:22:be:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:85:05:D4:44:01:7A:B7:29:D6:26:4F:79:75:97:A7:91:4A:A5:FF
            X509v3 Authority Key Identifier:
                keyid:A2:49:62:CC:4C:92:1C:70:64:CF:78:BB:8D:F4:A9:C8:63:84:02:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A24962CC4C921C7064CF78BB8DF4A9C8638402C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51MZFJMs7St8CZj3bJkW66gYqftxRJ3VkFGs1c7eS76C/0/323830343a383434633a343030393a3a2f34382d3438203d3e20323732323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:844c:4009::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:e5:8b:a8:bc:e1:52:51:73:c5:84:1a:72:59:20:80:ae:
         5e:d2:a7:9c:3e:6b:9b:81:b7:ee:68:e2:03:61:a3:4a:d2:01:
         a5:3b:0d:a7:4d:4b:7f:5c:b7:34:66:62:7f:98:8c:24:6e:bd:
         fe:cc:04:09:64:f2:30:85:e1:4b:e5:3f:fa:2c:8e:74:c7:66:
         9c:e9:41:a6:b9:e8:da:15:24:45:a0:49:35:75:46:fb:fa:9e:
         f5:f0:b8:cf:ec:cd:9f:97:0d:ae:f5:bf:d7:ee:60:05:ef:a8:
         8b:25:48:df:59:fe:92:10:9e:19:df:01:c1:02:e2:e3:82:2f:
         e3:57:4b:48:9c:d5:5f:9b:01:a0:4a:17:75:e9:91:6a:50:24:
         83:f2:d4:0f:4b:4e:47:cb:ab:30:ef:76:10:2e:6f:39:9f:de:
         22:4c:ed:e3:8e:f7:3c:01:e3:0b:fb:1b:62:76:67:4d:e3:6c:
         ca:2c:48:81:56:51:e8:dd:dc:4d:cc:bc:58:04:22:03:00:39:
         c6:fc:06:85:3d:a1:dd:97:14:63:ea:46:ef:0a:f9:40:2e:d3:
         c3:06:fe:4b:e7:5b:f1:4b:66:5b:b0:e5:96:d8:01:54:22:4c:
         76:8d:75:f9:4c:c9:c2:bb:f1:08:d1:f9:80:7b:a3:32:31:88:
         a8:4a:35:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:04:15 2025 by rpki-client