Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/323830343a323431383a3a2f33322d313238203d3e20323634323031.roa
File:                     323830343a323431383a3a2f33322d313238203d3e20323634323031.roa (raw, json)
Hash identifier:          +MuuyocqCFKzy/fn6E7THuWVKIsaSdAWT9a5X51oAzM=
Subject key identifier:   1E:13:30:91:30:FC:DB:5D:51:7D:69:50:CA:49:60:56:DB:D7:CD:2B
Certificate issuer:       /CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
Certificate serial:       1563396A00FEE6BD669A40858D854F67D011E2A1
Authority key identifier: 8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/323830343a323431383a3a2f33322d313238203d3e20323634323031.roa
Signing time:             Thu 06 Mar 2025 20:00:00 +0000
ROA not before:           Thu 06 Mar 2025 19:55:00 +0000
ROA not after:            Fri 06 Mar 2026 20:00:00 +0000
asID:                     264201
IP address blocks:        2804:2418::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl
                          rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:63:39:6a:00:fe:e6:bd:66:9a:40:85:8d:85:4f:67:d0:11:e2:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1E54DB030D4E86E9AF9B44C4588E78821D597A
        Validity
            Not Before: Mar  6 19:55:00 2025 GMT
            Not After : Mar  6 20:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:21:6c:e2:b6:90:1a:63:20:7f:4f:1a:80:
                    9e:21:13:31:70:26:ed:4c:e8:fd:fc:28:df:ff:f3:
                    8c:b6:66:02:2c:d7:ce:d8:64:f0:12:fb:fe:e9:a8:
                    07:f0:c0:01:5f:a8:35:99:7d:ee:0a:48:6b:dd:ed:
                    4f:85:f6:6d:f0:95:d5:96:af:20:cc:3a:5a:4a:98:
                    c3:50:93:e7:d3:a4:ed:fe:6a:94:f6:06:5c:ca:b2:
                    1a:fd:8a:dd:8b:92:b7:a1:ae:60:3b:8f:67:ba:a4:
                    44:f6:71:1e:48:78:79:a8:58:07:e3:1d:8e:62:82:
                    3c:37:71:28:11:14:d5:99:33:11:6d:d3:4b:a5:57:
                    9a:1b:b5:0b:c7:21:da:33:4f:0b:60:9f:58:5c:5d:
                    92:90:b7:25:59:42:8e:cf:00:de:4e:10:f6:28:e0:
                    40:7e:0b:ec:e5:dd:8f:5f:a7:c5:3f:11:95:03:e1:
                    cb:4b:40:21:87:63:32:d7:05:64:f6:4a:fb:ec:32:
                    4a:f7:b5:b9:46:ed:dc:fc:6e:fb:0f:b0:ea:87:a3:
                    97:4d:2b:bf:c3:77:58:73:08:b3:3c:a5:76:bd:d5:
                    3b:3f:87:a4:0f:5a:94:bf:3b:94:9c:c9:08:1a:a5:
                    2c:d5:7d:0d:bb:bb:b3:51:ac:8d:c2:72:93:39:af:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:30:91:30:FC:DB:5D:51:7D:69:50:CA:49:60:56:DB:D7:CD:2B
            X509v3 Authority Key Identifier:
                keyid:8E:1E:54:DB:03:0D:4E:86:E9:AF:9B:44:C4:58:8E:78:82:1D:59:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E1E54DB030D4E86E9AF9B44C4588E78821D597A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/1/323830343a323431383a3a2f33322d313238203d3e20323634323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2418::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:e0:6c:9b:df:53:60:54:50:9f:6d:30:e8:83:95:8b:c2:49:
         0e:2e:83:d1:0a:8e:69:5c:9d:e7:84:ce:8a:07:b5:ae:a3:a0:
         bc:ea:c9:b4:cd:d3:ba:06:a2:be:4d:c3:00:99:23:a3:f2:e8:
         03:c7:94:bc:3d:b0:60:96:3b:88:3e:5c:0d:9b:43:05:0e:11:
         66:02:90:7b:70:70:56:4b:94:31:f6:da:b0:71:a1:ad:d7:f7:
         94:15:f4:ff:a4:ff:de:fd:e3:30:cf:2b:e3:45:29:b0:d1:75:
         af:af:04:37:9b:21:2f:47:8c:8c:3a:47:1d:f3:0f:6e:a8:41:
         97:ae:fe:50:e0:2b:59:05:b6:53:e0:55:78:9d:e9:63:61:d8:
         07:56:df:82:42:dd:d4:cf:63:2f:b9:45:4f:9c:38:79:be:de:
         08:e2:ea:04:2e:45:85:e1:14:96:81:4c:c8:3a:6f:ea:9c:aa:
         0c:13:66:6c:a0:17:c9:5c:4b:7d:40:51:d6:95:78:3d:e6:2b:
         57:f0:bc:1c:ea:54:f6:2e:77:2d:82:8a:8b:2e:cb:a0:59:f4:
         61:e2:51:98:a6:74:42:ef:a7:fb:cd:03:c4:31:45:85:72:de:
         99:fb:e4:4a:0a:c8:af:44:d7:45:6f:3c:ca:a8:dd:dd:c0:cc:
         94:50:2f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:59:29 2025 by rpki-client