Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030363a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633030363a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          qA3XyMBv131IM76F74tb0GSqow/sdPkZ775eBcm3Y9g=
Subject key identifier:   D0:5C:29:C9:A5:2C:F0:34:0E:84:22:EF:77:A1:1E:D1:1C:1E:F4:F1
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       2CE5C8BBE4F3A7B3AA2C7045C888A7E9CE68D888
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030363a3a2f34382d3438203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:01 +0000
ROA not before:           Wed 12 Feb 2025 14:26:01 +0000
ROA not after:            Wed 11 Feb 2026 14:31:01 +0000
asID:                     61592
IP address blocks:        2804:4c34:c006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e5:c8:bb:e4:f3:a7:b3:aa:2c:70:45:c8:88:a7:e9:ce:68:d8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:01 2025 GMT
            Not After : Feb 11 14:31:01 2026 GMT
        Subject: CN=D05C29C9A52CF0340E8422EF77A11ED11C1EF4F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6b:7f:ae:04:1b:80:f7:1b:d4:46:f6:f6:90:
                    2c:8c:48:af:d2:b8:1e:6d:b2:80:9e:ea:82:2f:73:
                    98:f5:2b:3a:95:24:7e:c4:fc:c0:39:65:41:d7:48:
                    dd:c9:7e:be:7a:3e:70:7b:c1:75:c8:1a:c9:c6:12:
                    bf:26:22:d5:59:88:2a:6c:69:41:eb:75:35:ee:fd:
                    ca:89:bb:2d:c2:a4:e1:7d:e1:b3:d0:62:c6:e7:a2:
                    28:30:84:53:8d:03:fc:00:dc:f8:84:d4:01:a4:d0:
                    38:db:fc:48:9d:a4:bb:46:7a:6e:f2:09:00:2f:41:
                    c4:99:6d:5d:99:f6:8c:fa:e2:08:38:63:3d:d1:de:
                    7f:5b:03:e3:c5:91:80:08:02:ec:6c:54:bc:2c:fc:
                    67:cd:ed:64:d5:ed:fd:5c:af:bf:ec:09:11:13:d6:
                    eb:a0:48:81:ce:1e:d7:af:53:34:af:d0:af:b0:ba:
                    8e:ce:e1:05:ed:1e:98:f1:25:96:3a:c5:84:04:df:
                    86:ce:03:8b:9e:1f:96:e3:88:d9:71:fc:93:4a:c1:
                    39:be:5a:fe:06:02:20:c0:d9:aa:8e:4b:69:6e:38:
                    e9:f4:ae:96:65:49:65:62:86:12:29:65:aa:b2:fe:
                    ab:e6:92:db:f9:21:ff:43:a6:33:ba:0b:f8:2e:d5:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5C:29:C9:A5:2C:F0:34:0E:84:22:EF:77:A1:1E:D1:1C:1E:F4:F1
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633030363a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c006::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:62:6b:67:75:c1:bc:e6:5e:3b:6b:df:8f:d4:f2:0c:20:bc:
         93:ca:a0:8f:ad:1c:af:48:09:7d:6f:34:08:d3:61:d9:df:e2:
         fd:61:6f:71:89:99:de:04:4b:56:60:43:94:66:be:42:f9:a3:
         28:cc:11:0f:2e:25:78:e1:79:b8:40:1c:94:4d:94:32:d6:cf:
         ce:57:00:11:41:59:ba:42:f6:b6:67:49:fe:c7:20:af:8d:22:
         ab:aa:f3:23:a5:da:38:d2:70:2d:62:f1:82:f9:63:57:2d:ed:
         2c:61:f3:32:4d:36:41:3d:3b:03:47:e2:aa:b9:43:cd:0f:3a:
         26:57:9d:01:81:79:62:a5:33:c4:c6:d0:c5:d3:83:48:e3:3b:
         9a:c3:ac:4f:ee:63:d2:af:a8:03:cd:80:00:60:f3:c7:ab:56:
         b0:d4:04:e1:b2:e4:a7:cb:2c:c7:46:ed:d1:bf:b0:1f:12:62:
         3b:45:cb:9b:05:e2:ec:ea:55:c6:50:4a:1d:de:9f:77:5c:eb:
         33:94:52:9b:94:8d:96:c1:d8:bc:c2:2f:69:6b:a2:79:cb:55:
         70:75:70:98:33:fe:79:2e:5d:f0:47:76:ea:d0:0f:5c:34:5c:
         ae:ab:25:28:12:80:f7:31:09:10:a5:99:c2:3a:17:98:9b:eb:
         04:b5:85:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:54 2025 by rpki-client