Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032393a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a633032393a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          WO6f3Aq1Q7UoTl9g+vviAlByXz6gDW9lZICE8Nup+8E=
Subject key identifier:   E6:D6:85:08:FE:A9:45:92:D3:97:6D:BB:3C:6C:71:AE:17:6F:67:F3
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       1FF34D72612F593146C556C7A8BCF87396765A0C
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032393a3a2f34382d3438203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:04 +0000
ROA not before:           Wed 12 Feb 2025 14:26:04 +0000
ROA not after:            Wed 11 Feb 2026 14:31:04 +0000
asID:                     61592
IP address blocks:        2804:4c34:c029::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f3:4d:72:61:2f:59:31:46:c5:56:c7:a8:bc:f8:73:96:76:5a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:04 2025 GMT
            Not After : Feb 11 14:31:04 2026 GMT
        Subject: CN=E6D68508FEA94592D3976DBB3C6C71AE176F67F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:bc:25:98:2c:bf:68:60:6f:fc:0f:dc:61:
                    8c:e4:01:f9:6c:84:a9:50:e0:4b:2a:fc:48:d5:7b:
                    13:b6:1f:38:d8:9f:49:41:32:9e:f9:30:ce:a8:aa:
                    29:02:eb:a3:db:26:82:e3:e1:bd:b0:5b:b7:2b:57:
                    19:1b:cf:3e:92:1a:80:16:d8:47:4b:77:7e:af:5e:
                    02:ce:61:c7:3a:f6:ef:a2:c3:c5:2a:f0:14:60:d4:
                    19:36:8f:b3:f2:3b:3d:18:de:38:d0:c7:42:63:9f:
                    5e:38:fb:4d:92:bc:fc:02:2d:5e:c9:55:3d:ae:64:
                    fd:8c:27:c3:c9:47:a7:94:78:7c:02:c2:09:f3:06:
                    e7:a2:c7:da:60:04:d5:7c:5a:f0:63:94:3a:61:8b:
                    31:7c:8c:c6:f8:da:fe:ff:46:cb:38:c6:89:0b:0e:
                    f8:8a:3a:62:78:59:86:d4:31:fd:7d:e0:f1:3e:c7:
                    78:64:24:66:d0:26:c5:df:33:6b:fb:71:08:82:03:
                    14:b3:63:ae:c9:3e:bf:16:4a:7a:a7:e9:2a:58:e4:
                    01:02:02:d5:65:19:f5:93:d3:11:d2:bf:c4:83:4d:
                    73:04:95:98:66:bf:64:3a:16:1e:1d:85:b0:36:79:
                    93:fb:f4:ce:37:a5:35:72:62:18:e3:62:a6:f9:36:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:85:08:FE:A9:45:92:D3:97:6D:BB:3C:6C:71:AE:17:6F:67:F3
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a633032393a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:c029::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:87:ac:64:a4:a9:a8:45:b7:1c:74:16:51:65:91:5e:a6:
         87:38:35:2d:f5:fb:71:0a:ea:ba:1e:a1:01:4e:5f:07:8c:c4:
         2f:62:64:c8:b9:e1:d7:5c:93:40:aa:91:e8:08:16:17:dc:65:
         c9:97:34:71:56:ca:67:b6:db:10:e8:23:70:1d:6d:3c:9a:5c:
         b9:e6:db:0e:c2:d2:c2:13:30:62:ef:de:51:fd:1d:93:d3:3b:
         1b:f0:5d:d1:65:be:c1:b4:92:33:39:29:2d:60:31:38:93:07:
         d3:42:3e:ae:a3:32:86:09:82:d4:25:25:9e:42:91:88:ad:3d:
         c8:b2:1f:5a:ea:ec:37:9b:5c:83:7c:5a:66:a4:a8:49:1f:8a:
         89:98:26:f8:55:15:18:75:fe:8a:07:9c:f4:ee:21:14:59:22:
         62:37:01:98:f8:c3:dd:41:90:2c:ed:89:9a:da:8c:69:02:1d:
         b7:e5:06:ec:50:24:07:d7:23:ca:08:8e:02:93:91:e8:0e:c9:
         72:0b:8b:60:e2:a1:57:67:e5:e8:ad:a1:9f:cd:2b:7d:34:51:
         b7:ad:97:f6:b3:4e:df:a1:94:16:bf:1d:04:69:84:30:5f:2d:
         7c:3f:73:3e:1b:b1:19:22:df:19:5e:29:16:4c:eb:a9:c1:88:
         3f:12:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:38:27 2025 by rpki-client