Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030303a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a633030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          +debgIwg2SNHFoQzRjywKfgIC1VQx92cb1RftBswzlE=
Subject key identifier:   48:AE:19:30:7C:67:06:FA:66:C1:88:FB:B8:E1:D0:FB:D9:E6:DD:73
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       0DF3FE3A9C3F092889307CC98E5A356D4FCD47C9
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030303a3a2f33362d3336203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:04 +0000
ROA not before:           Wed 12 Feb 2025 14:26:04 +0000
ROA not after:            Wed 11 Feb 2026 14:31:04 +0000
asID:                     61592
IP address blocks:        2804:4c34:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f3:fe:3a:9c:3f:09:28:89:30:7c:c9:8e:5a:35:6d:4f:cd:47:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:04 2025 GMT
            Not After : Feb 11 14:31:04 2026 GMT
        Subject: CN=48AE19307C6706FA66C188FBB8E1D0FBD9E6DD73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:49:b8:e7:36:93:fc:2c:2f:4d:7f:d3:58:
                    68:2b:ad:16:74:01:5f:e2:83:81:7f:93:61:b3:f9:
                    02:0b:7a:78:87:ee:70:f7:6b:4d:b6:bd:91:6b:8c:
                    44:c7:e9:e2:db:52:aa:2f:ca:5d:86:e3:c6:32:76:
                    43:99:ba:f4:22:20:70:1d:ca:5f:87:41:c5:e6:61:
                    f6:aa:87:55:59:e8:6c:d3:a9:7d:a0:3a:8e:a0:05:
                    b6:71:8e:14:6b:38:6c:95:2e:8b:a3:70:19:18:51:
                    c3:29:d8:3e:b7:00:3f:0c:8b:25:ab:1d:49:e1:01:
                    43:ef:aa:43:76:89:55:54:71:df:04:ab:ae:30:25:
                    77:f0:a6:e8:1c:d8:ea:0a:eb:ae:89:25:06:45:58:
                    7f:e7:48:59:39:4d:9e:3e:fe:4b:a9:ea:a6:dd:71:
                    f7:a7:88:37:23:90:12:b0:1a:15:2f:e5:13:d1:ae:
                    70:0f:f1:b1:dd:72:78:4f:2e:88:62:3c:62:fd:22:
                    6e:3e:85:ca:de:4f:95:f8:2d:97:fd:7a:3e:18:db:
                    16:78:96:62:65:18:6d:d3:9d:d6:7a:e6:ca:ca:83:
                    f1:2a:69:cd:67:ce:e3:fc:6e:50:c3:79:10:cc:e4:
                    68:f6:bf:9e:e0:d3:ca:40:ba:6f:84:3b:32:b0:0f:
                    a0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AE:19:30:7C:67:06:FA:66:C1:88:FB:B8:E1:D0:FB:D9:E6:DD:73
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030303a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b3:2a:5f:0d:02:9d:57:f3:7b:ad:44:75:89:79:e7:4e:5c:78:
         68:d5:8f:01:55:1c:e5:fb:25:9d:e9:9b:f3:08:f5:8c:bd:af:
         13:51:d5:59:20:53:aa:3b:23:da:fc:b0:a5:ce:b6:c9:96:94:
         ab:33:39:66:b6:32:6d:c3:d1:40:6a:2e:6b:eb:b4:6f:ad:b5:
         2b:93:00:43:70:1b:fd:49:05:a6:77:ba:bc:7c:6e:41:35:7f:
         dd:e9:08:a2:3b:38:0b:53:66:a5:4e:82:a3:bf:a2:24:29:46:
         38:79:b1:3f:d1:05:57:92:d6:97:fa:87:4a:03:65:7a:aa:4f:
         b5:69:a3:6c:57:ee:2e:47:5b:90:81:5c:5c:6e:37:ec:86:68:
         94:aa:50:1d:c4:9f:c6:2a:32:fb:7b:f6:59:c5:08:bb:6d:27:
         bf:2e:04:b3:15:f4:6f:57:19:e9:bf:58:4c:a2:64:9a:cd:5b:
         54:62:24:a2:9b:6b:be:02:5c:83:54:9b:be:94:5e:3b:a8:f4:
         47:02:4b:72:95:ec:cb:5d:bf:89:c2:96:1f:08:8d:21:c2:fa:
         a5:e4:99:bb:9a:55:b1:50:6a:d9:c6:32:53:cc:c3:ae:11:d3:
         61:ff:65:10:8d:a4:ef:92:ff:37:e4:b4:31:e5:33:11:14:b9:
         c5:ea:56:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:39 2025 by rpki-client