Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/323830343a323434383a3a2f33322d3438203d3e20323634323132.roa
File:                     323830343a323434383a3a2f33322d3438203d3e20323634323132.roa (raw, json)
Hash identifier:          v6QNnaYehyCdd4SFdxgAD4ebsqrSnfJvVhiKkGTyq4g=
Subject key identifier:   4D:9B:76:8C:36:F9:F1:02:CE:A7:CA:91:54:E2:48:80:FB:AE:8E:3F
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       51192FCC058A464A052D636306E48B4AA836E15A
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/323830343a323434383a3a2f33322d3438203d3e20323634323132.roa
Signing time:             Thu 06 Mar 2025 06:16:36 +0000
ROA not before:           Thu 06 Mar 2025 06:11:36 +0000
ROA not after:            Thu 05 Mar 2026 06:16:36 +0000
asID:                     264212
IP address blocks:        2804:2448::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl
                          rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 16:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:19:2f:cc:05:8a:46:4a:05:2d:63:63:06:e4:8b:4a:a8:36:e1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Mar  6 06:11:36 2025 GMT
            Not After : Mar  5 06:16:36 2026 GMT
        Subject: CN=4D9B768C36F9F102CEA7CA9154E24880FBAE8E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:c7:4a:cd:51:91:50:8b:95:ab:65:63:6b:
                    f8:cd:04:e1:8c:dc:62:c0:c9:04:aa:a0:cd:35:73:
                    29:4a:06:db:86:35:7b:5a:8c:5d:ac:34:0a:2c:25:
                    6d:e9:96:68:07:db:da:bc:0d:70:1d:f4:19:b3:61:
                    1c:15:4b:e3:27:8d:a9:37:7c:ce:2e:60:17:02:5a:
                    40:0c:4d:fa:bc:e9:6e:95:7c:eb:9b:25:0c:10:40:
                    c8:e5:79:a3:80:db:92:a3:1d:57:a2:98:45:fb:19:
                    cf:54:a3:54:5a:0e:8d:8c:64:62:b5:b8:9d:c4:c6:
                    57:db:e3:ed:45:ee:e5:67:59:2c:7d:fb:d1:21:1f:
                    8b:ae:a0:75:4c:99:04:63:e9:dd:26:b6:be:43:8e:
                    34:a5:ff:31:5b:a9:a2:41:28:34:75:99:4a:23:72:
                    a3:10:cd:61:f4:f8:ba:29:8d:b4:e7:dd:d8:93:7d:
                    0c:8a:39:93:0a:d5:ad:7c:fd:37:17:cc:d9:ba:12:
                    79:26:1e:9d:58:70:de:50:43:65:a9:88:e5:84:18:
                    e4:a6:6d:e3:8f:55:8a:d7:ee:f1:89:e3:b9:33:ac:
                    42:ec:87:d8:a4:ea:de:a6:a9:23:00:72:4e:a8:c7:
                    a6:35:2c:f5:60:99:12:d9:e2:d3:93:5d:79:92:13:
                    00:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9B:76:8C:36:F9:F1:02:CE:A7:CA:91:54:E2:48:80:FB:AE:8E:3F
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/323830343a323434383a3a2f33322d3438203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2448::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:03:67:1a:dd:9b:7e:fa:b4:1c:69:73:a0:35:0e:38:4e:b0:
         df:8d:b5:f9:14:5b:3f:5c:d3:57:94:8e:1a:d2:4f:34:2d:12:
         8c:c7:de:55:cb:3b:50:3d:2f:a2:e7:11:1d:6e:c3:5a:99:f4:
         2f:58:b1:65:c2:e7:94:3a:53:3b:f8:8c:70:c9:e8:36:61:ee:
         8b:ad:c6:81:7f:bf:86:e1:9d:67:33:29:18:69:38:41:3a:ad:
         18:c7:5c:1a:92:15:6e:20:76:d1:79:7c:93:3a:1c:3d:bd:0c:
         8d:66:09:77:2d:4c:7a:1c:c1:29:b2:d1:73:42:1d:76:cf:08:
         af:f3:a1:f2:70:5f:86:e4:ae:83:3b:b2:42:a4:fa:56:d4:34:
         d7:45:73:67:69:f8:52:33:6f:54:6b:a5:68:13:e2:92:6a:53:
         b7:97:fd:b2:d5:2a:55:a0:ce:5c:c6:a1:f3:2c:ce:47:b5:8e:
         09:f1:40:c7:d3:ef:1b:0a:f2:50:9e:24:7e:1f:76:e4:57:8a:
         a3:7d:7c:b7:ed:61:00:2f:30:15:0d:73:3e:d4:9b:a5:19:37:
         58:ae:d3:6d:02:2b:e2:29:ce:c9:75:2b:b7:bf:6a:ce:b4:20:
         ff:43:ca:43:dd:80:12:be:e5:a5:b1:da:82:f1:30:95:5f:9a:
         54:0f:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:29:19 2025 by rpki-client