Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa
File:                     323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa (raw, json)
Hash identifier:          LBp3Mu2vH91Ea1d9QVEHcsDiEFRurZ4NBSe+VPaOwD0=
Subject key identifier:   2C:DD:5F:94:A2:1A:99:7B:4D:AC:9E:9D:16:6B:4D:D7:30:1B:0B:EE
Certificate issuer:       /CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
Certificate serial:       255D30187B0B816AEFBEEFDD2F52CECCE1DDFD5F
Authority key identifier: 0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa
Signing time:             Wed 30 Apr 2025 18:19:17 +0000
ROA not before:           Wed 30 Apr 2025 18:14:17 +0000
ROA not after:            Wed 29 Apr 2026 18:19:17 +0000
asID:                     269024
IP address blocks:        2804:5e4c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.crl
                          rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 13:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5d:30:18:7b:0b:81:6a:ef:be:ef:dd:2f:52:ce:cc:e1:dd:fd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032
        Validity
            Not Before: Apr 30 18:14:17 2025 GMT
            Not After : Apr 29 18:19:17 2026 GMT
        Subject: CN=2CDD5F94A21A997B4DAC9E9D166B4DD7301B0BEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:0a:01:08:d4:2a:74:1c:3f:f9:48:07:af:
                    3b:08:85:64:92:96:27:d7:b2:86:3f:49:7b:81:b9:
                    81:72:0b:93:55:1f:0a:24:dc:47:97:04:5a:cc:20:
                    c6:16:dc:35:7b:55:98:45:2b:08:30:69:27:f4:85:
                    9d:ca:76:6b:a9:e2:31:7e:98:06:dd:81:59:6f:7c:
                    9c:af:6d:73:dd:bc:58:c5:ad:9f:e7:25:89:50:de:
                    6f:2d:16:fe:6b:9e:26:c7:0d:77:b7:fd:0f:21:49:
                    a2:0a:56:dc:d7:45:c2:5b:d7:0f:da:d7:f0:99:27:
                    63:7e:ee:77:6e:0c:33:19:a3:2c:7e:78:93:a2:67:
                    8d:18:0a:6d:00:57:64:19:c5:3c:d1:7e:64:60:0c:
                    65:09:2d:8f:4b:45:96:48:3e:8e:cb:e4:10:a8:fc:
                    3a:29:bc:4d:14:b3:f2:9c:24:d3:ef:06:7f:34:66:
                    a5:4d:bd:75:12:0f:2e:69:f3:bc:43:85:92:45:1d:
                    8d:ed:84:26:1d:38:63:6a:f5:32:b4:f7:93:de:f6:
                    15:78:86:a9:46:da:64:10:e0:fc:71:f1:ea:50:bf:
                    8b:7f:65:04:80:d1:2a:8d:8d:cd:35:ef:d0:ad:03:
                    d3:85:7c:8f:65:8d:a9:0f:ac:e5:d9:95:97:02:bf:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DD:5F:94:A2:1A:99:7B:4D:AC:9E:9D:16:6B:4D:D7:30:1B:0B:EE
            X509v3 Authority Key Identifier:
                keyid:0D:6B:BD:FF:03:C5:B7:F2:CF:FA:AA:56:24:D6:A8:B3:A6:5F:30:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6BBDFF03C5B7F2CFFAAA5624D6A8B3A65F3032.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a383030303a3a2f33342d3334203d3e20323639303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e4c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         da:19:5c:43:87:37:79:5c:53:cf:08:8d:d7:d4:60:ca:7b:db:
         e1:dd:94:48:3f:d1:5a:db:b0:6d:2a:b1:08:cf:5f:65:dd:d9:
         26:f8:1a:6c:af:e7:46:af:16:53:aa:f0:1f:59:6e:a1:aa:70:
         18:74:19:0e:54:f3:73:8a:7c:9c:83:bc:6d:91:63:06:d1:c9:
         ed:a1:27:86:68:69:95:ed:8f:3f:9b:82:df:f8:54:9f:ef:d3:
         e0:71:b7:8c:74:96:3a:c0:d1:d4:ea:12:45:0b:d8:9f:fa:20:
         7a:f6:18:1f:72:aa:7c:49:a9:6c:50:a6:f4:a9:c8:fc:73:c5:
         da:4f:69:77:dc:ed:7f:99:ee:c6:36:e5:06:51:8c:29:20:ca:
         a8:0c:ac:0c:73:17:0b:66:85:a9:24:44:b2:14:66:a5:c4:33:
         c3:f7:79:ee:21:be:d1:50:aa:8f:78:1f:9e:fe:68:d9:ab:78:
         03:e2:ba:c0:40:62:5d:de:d4:dd:8c:df:d5:ec:16:f6:d2:9b:
         a8:a3:9d:13:78:f7:74:f7:0a:48:ed:7e:0b:ff:8e:03:63:94:
         2a:a8:a7:44:48:ac:26:4e:ab:48:e5:fe:3e:46:b9:3b:43:ba:
         46:b3:dd:de:d1:54:be:b4:62:4b:44:2d:06:76:6f:ff:0c:da:
         01:e0:22:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:52:53 2025 by rpki-client