Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a343031363a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343031363a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          hs2z6A7nyqw96NQj2q5uxFQWM4CqW4qbis4mUSYLmnA=
Subject key identifier:   17:DB:17:D4:FA:B2:B5:AC:F6:CC:2D:1D:1A:76:B3:CD:27:CB:7A:76
Certificate issuer:       /CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
Certificate serial:       33D70845A9B343E62213B7DBE0CC7C833656E4DD
Authority key identifier: 90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a343031363a3a2f34382d3438203d3e203631353932.roa
Signing time:             Fri 28 Mar 2025 19:34:11 +0000
ROA not before:           Fri 28 Mar 2025 19:29:11 +0000
ROA not after:            Fri 27 Mar 2026 19:34:11 +0000
asID:                     61592
IP address blocks:        2804:4c34:4016::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl
                          rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d7:08:45:a9:b3:43:e6:22:13:b7:db:e0:cc:7c:83:36:56:e4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909E9FEA566321BE0782982D2D8BAB3FE3A8D22B
        Validity
            Not Before: Mar 28 19:29:11 2025 GMT
            Not After : Mar 27 19:34:11 2026 GMT
        Subject: CN=17DB17D4FAB2B5ACF6CC2D1D1A76B3CD27CB7A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d2:91:61:25:b6:72:b8:a9:bb:fd:e5:72:39:
                    7b:3e:62:0d:cc:7c:ea:8c:f8:cb:f7:fa:e4:c2:38:
                    01:a3:1a:02:aa:5d:1c:0f:23:67:60:a7:17:cc:91:
                    38:00:61:35:a3:bb:a8:e8:d0:f0:27:12:ab:3a:80:
                    ae:64:0d:31:08:b8:e4:c6:2b:5e:da:6b:81:29:68:
                    13:bf:bb:84:f4:b0:69:6d:ef:6b:ba:97:fd:b0:dc:
                    c3:4f:39:f7:f2:42:1b:f1:78:a5:84:c2:b2:8f:e5:
                    29:e2:cf:f9:5e:e0:b1:29:b8:e6:b8:d8:92:58:2b:
                    f8:19:d4:56:0f:b5:5f:6f:70:39:ae:e9:64:9f:37:
                    bf:38:7d:8e:de:ba:84:60:fa:72:35:ba:0b:16:59:
                    c6:8a:56:ef:7a:f1:09:73:a7:88:19:9c:f0:df:31:
                    f0:79:e2:42:67:9c:9e:17:7c:a8:53:36:29:c9:c3:
                    cf:86:24:79:06:90:c8:1c:b4:d4:39:d6:db:d8:a5:
                    0d:87:d2:f7:4f:0e:c1:17:0b:c4:5d:1e:10:37:76:
                    fb:1e:c3:aa:0c:ea:f1:a6:48:3f:5f:b5:ce:0f:18:
                    ca:3b:e9:69:b9:4d:4e:9b:07:c0:5f:b8:80:f9:5e:
                    25:63:75:3c:0e:ab:14:84:71:3b:67:03:1b:83:f7:
                    64:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DB:17:D4:FA:B2:B5:AC:F6:CC:2D:1D:1A:76:B3:CD:27:CB:7A:76
            X509v3 Authority Key Identifier:
                keyid:90:9E:9F:EA:56:63:21:BE:07:82:98:2D:2D:8B:AB:3F:E3:A8:D2:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909E9FEA566321BE0782982D2D8BAB3FE3A8D22B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/1/323830343a346333343a343031363a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:4016::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:86:20:ef:27:ab:51:d4:f0:a3:c3:2f:76:da:2a:7e:73:0d:
         27:17:e1:14:3e:7b:41:8f:e9:b8:97:82:f0:c6:d9:80:57:fc:
         76:8a:bc:50:20:31:db:39:86:d5:08:59:cc:71:61:3d:17:c7:
         e7:b6:b5:68:04:b5:5c:de:2b:75:b5:8b:47:ca:28:10:89:e2:
         d1:32:d3:26:09:77:c3:71:2c:3a:66:c2:28:9c:ee:87:7f:f3:
         fe:c2:a6:30:b6:6f:34:b7:ed:40:a7:a9:00:90:9b:79:f0:65:
         7c:f8:da:fd:c9:1b:c7:85:05:1d:c2:ae:62:ab:1c:67:96:65:
         a8:8a:d7:c4:63:54:61:e2:f8:e6:26:67:63:bd:e0:e4:29:7e:
         81:6d:d7:30:d4:1d:4d:60:d0:0b:c5:66:f1:b3:6d:3d:1f:df:
         c3:f0:6c:4a:45:b6:0f:88:9e:a0:69:61:ed:c9:6e:6a:3d:97:
         c6:91:2c:eb:ef:fe:2e:12:01:a1:36:3b:d4:2c:79:92:a2:ed:
         31:8d:cb:0a:78:f5:50:0a:6e:ff:37:52:13:9a:f5:7c:41:f4:
         59:ad:d7:2a:3f:c4:2d:16:58:80:64:8d:66:e9:af:63:57:90:
         30:e1:39:49:ec:4d:dc:72:d2:53:37:97:71:8e:88:8c:67:d3:
         c7:ae:56:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:05:00 2025 by rpki-client