Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/323830343a333964343a3a2f33322d313238203d3e20323636303533.roa
File:                     323830343a333964343a3a2f33322d313238203d3e20323636303533.roa (raw, json)
Hash identifier:          wSDkEdVZAK3/8ts/qdoWKlHh4FsBHWom06CNdl1lAEQ=
Subject key identifier:   41:70:CB:05:D4:94:E3:85:41:3E:4B:EE:A6:95:F4:DE:77:C3:46:6A
Certificate issuer:       /CN=E27513DF0F80F1E934FC7A0C421F868E94751182
Certificate serial:       329B299CCABDB9CC12F4D3E93190753A58DC890E
Authority key identifier: E2:75:13:DF:0F:80:F1:E9:34:FC:7A:0C:42:1F:86:8E:94:75:11:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E27513DF0F80F1E934FC7A0C421F868E94751182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/323830343a333964343a3a2f33322d313238203d3e20323636303533.roa
Signing time:             Wed 29 Jan 2025 11:47:47 +0000
ROA not before:           Wed 29 Jan 2025 11:42:47 +0000
ROA not after:            Wed 28 Jan 2026 11:47:47 +0000
asID:                     266053
IP address blocks:        2804:39d4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/E27513DF0F80F1E934FC7A0C421F868E94751182.crl
                          rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/E27513DF0F80F1E934FC7A0C421F868E94751182.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E27513DF0F80F1E934FC7A0C421F868E94751182.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9b:29:9c:ca:bd:b9:cc:12:f4:d3:e9:31:90:75:3a:58:dc:89:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E27513DF0F80F1E934FC7A0C421F868E94751182
        Validity
            Not Before: Jan 29 11:42:47 2025 GMT
            Not After : Jan 28 11:47:47 2026 GMT
        Subject: CN=4170CB05D494E385413E4BEEA695F4DE77C3466A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ee:3f:59:70:66:ff:0c:4a:a5:66:98:80:6f:
                    65:f9:0c:a4:10:af:96:e1:cf:54:da:7c:52:6f:3c:
                    9b:b0:fc:c6:d3:08:f8:02:6f:53:f2:e7:b1:44:eb:
                    6e:36:2d:0a:62:44:ae:59:dd:de:72:2c:f9:de:02:
                    c1:25:42:46:39:95:c4:2f:e6:c5:63:0a:a9:e6:52:
                    46:2a:7b:86:43:83:ef:87:f4:e8:ea:52:c1:2e:a6:
                    05:d6:8f:5c:46:87:66:4d:85:08:6b:7f:55:67:07:
                    05:d6:18:72:09:db:a5:fc:26:8d:b6:69:3d:3e:58:
                    a8:34:79:a4:d5:c0:c3:ed:61:81:74:b5:eb:24:37:
                    05:da:6f:97:e2:14:6e:d7:4e:a2:61:d1:de:da:0c:
                    a3:8c:aa:19:06:7e:f1:dc:fe:ae:21:79:e4:2a:17:
                    5e:66:64:1d:be:24:ce:ba:30:9d:09:5d:85:aa:cf:
                    58:90:72:4e:85:78:43:1d:06:ea:3d:c7:aa:d8:79:
                    73:e6:ff:bc:21:f7:f2:de:14:36:29:aa:e2:73:cf:
                    44:0e:df:1c:20:9b:46:3e:13:be:d6:48:29:d2:a6:
                    1f:0f:12:27:f9:24:4e:f2:33:13:04:3b:35:f5:15:
                    52:e6:1d:48:68:a4:65:77:0c:da:2a:89:91:ff:ce:
                    04:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:70:CB:05:D4:94:E3:85:41:3E:4B:EE:A6:95:F4:DE:77:C3:46:6A
            X509v3 Authority Key Identifier:
                keyid:E2:75:13:DF:0F:80:F1:E9:34:FC:7A:0C:42:1F:86:8E:94:75:11:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/E27513DF0F80F1E934FC7A0C421F868E94751182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E27513DF0F80F1E934FC7A0C421F868E94751182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/323830343a333964343a3a2f33322d313238203d3e20323636303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:0f:b8:30:99:ca:c7:63:a6:66:fb:cc:61:81:70:65:9f:
         f4:39:d9:40:39:3f:d6:90:7f:b9:4e:54:25:bd:88:2d:12:67:
         0d:94:a2:9a:5a:80:3d:48:0b:42:4b:e8:1e:68:f8:d1:78:f5:
         fd:b1:2d:62:06:b9:04:c5:d4:a5:21:c2:cd:bd:0e:d9:0f:9b:
         1a:0b:b5:ea:e6:1b:43:bd:79:92:3f:2c:ec:9d:01:ce:fb:ae:
         6b:b0:6e:d3:c5:b8:84:29:6a:88:4c:07:2c:5a:57:f8:0a:f6:
         3e:a7:4a:10:d9:f2:07:00:26:f6:27:09:5d:7f:42:32:42:34:
         68:bc:34:37:d3:3f:48:36:0a:6b:17:e9:cc:59:e7:cf:ae:07:
         96:ba:c5:79:59:05:b1:34:2b:a3:4b:fa:7e:89:af:7f:da:16:
         b5:a7:9b:f8:90:73:f1:c8:6b:aa:8f:40:e4:20:b1:39:04:f6:
         e3:c2:a5:0e:34:e7:50:cc:a5:a9:ec:4e:e4:4c:8a:a2:1b:ec:
         d8:23:50:9c:4f:84:ce:cd:c7:f8:4c:95:f7:1c:2d:ca:4b:5e:
         39:b6:a5:c9:13:4f:cd:02:7e:cc:0e:c0:e4:c4:78:bd:e6:62:
         93:02:1f:f2:5f:fe:f2:f5:ab:b3:80:7d:43:37:66:9a:93:e5:
         b8:c0:e2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:13 2025 by rpki-client