Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/323830343a3866633a3a2f33322d3438203d3e20323633303433.roa
File:                     323830343a3866633a3a2f33322d3438203d3e20323633303433.roa (raw, json)
Hash identifier:          TigbxK0cUv4RSQLgefNDxvnIkqyLfVMe13bYz6eIhIY=
Subject key identifier:   83:B8:C5:A1:B3:F7:84:97:3E:91:CB:BE:EC:44:BA:D5:7A:9B:0C:B1
Certificate issuer:       /CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
Certificate serial:       387A618B9D11F3BDEF26C585B527D11BF1700691
Authority key identifier: 28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/323830343a3866633a3a2f33322d3438203d3e20323633303433.roa
Signing time:             Thu 06 Mar 2025 05:45:42 +0000
ROA not before:           Thu 06 Mar 2025 05:40:42 +0000
ROA not after:            Thu 05 Mar 2026 05:45:42 +0000
asID:                     263043
IP address blocks:        2804:8fc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl
                          rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 07:40:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7a:61:8b:9d:11:f3:bd:ef:26:c5:85:b5:27:d1:1b:f1:70:06:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2847CCC684CE308C8CDBAF04E90C9E18DB33AC17
        Validity
            Not Before: Mar  6 05:40:42 2025 GMT
            Not After : Mar  5 05:45:42 2026 GMT
        Subject: CN=83B8C5A1B3F784973E91CBBEEC44BAD57A9B0CB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:ef:39:4b:15:43:a5:f8:25:33:dd:0b:d1:
                    78:a8:2f:4b:2f:d0:dd:28:4d:a8:97:8c:bf:5f:22:
                    82:84:20:84:19:ca:43:87:8a:83:ff:88:b8:12:1f:
                    d0:ea:fc:e0:46:d7:d1:5a:35:c4:4e:ae:4a:80:6d:
                    52:48:c7:0c:27:b0:b2:ac:21:fb:7e:b7:81:d7:f2:
                    b6:c8:68:7e:0c:83:34:b2:d6:f1:25:99:62:46:df:
                    7f:ef:c4:04:e6:82:d4:32:8b:6c:15:60:19:83:f4:
                    25:e5:f7:11:e8:ff:11:36:98:f3:3f:d2:1b:b5:42:
                    ad:f7:07:03:da:8d:28:8c:98:74:e4:6d:42:62:7d:
                    0f:bd:aa:1d:30:7d:06:30:45:32:fe:f6:5e:01:74:
                    62:3c:04:57:97:04:16:74:82:ff:23:31:24:bf:34:
                    fe:12:e0:ab:b5:44:71:0a:c3:e2:cd:9d:8a:87:16:
                    b8:15:b5:e4:d8:33:88:d1:f5:6c:ae:d2:ad:09:21:
                    52:71:34:3f:25:ea:8d:18:05:27:c2:8a:2d:22:a0:
                    e1:a0:fe:77:1f:4e:af:ac:a8:fd:e6:93:e7:15:f2:
                    47:55:fb:fa:f1:20:13:a1:13:e6:eb:be:d3:dd:6b:
                    92:8f:66:b4:6d:b7:06:ff:00:94:b7:ce:b2:45:24:
                    f5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B8:C5:A1:B3:F7:84:97:3E:91:CB:BE:EC:44:BA:D5:7A:9B:0C:B1
            X509v3 Authority Key Identifier:
                keyid:28:47:CC:C6:84:CE:30:8C:8C:DB:AF:04:E9:0C:9E:18:DB:33:AC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2847CCC684CE308C8CDBAF04E90C9E18DB33AC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nC3JYST889rk2r7Di6WQ1yjJ6wtSSAa2dJxqrLbq8bY/2/323830343a3866633a3a2f33322d3438203d3e20323633303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:5b:46:66:f8:ab:0e:97:b2:38:35:84:24:4e:3e:c6:d2:00:
         0b:18:98:53:5f:b1:8f:a8:24:31:f1:6a:78:2b:70:7b:65:8b:
         28:20:f2:2e:ae:96:81:9d:98:e1:59:1d:e1:27:d2:db:32:fd:
         66:e8:b5:89:cd:21:24:53:5f:49:85:68:9b:1a:e5:82:fe:4f:
         4a:c6:0c:90:80:60:f8:12:72:75:cb:ca:19:1a:5d:e3:87:ca:
         91:b3:31:83:eb:c8:4f:89:49:17:f0:b3:52:79:3a:5a:9a:5c:
         50:ab:67:81:75:26:35:1b:26:8a:f5:49:f5:0f:66:02:e2:23:
         5c:8f:36:88:3a:48:28:26:33:44:cf:aa:f1:cc:82:bc:b5:c1:
         44:ef:23:48:ea:93:88:c2:b1:1b:fe:f3:5b:eb:f6:bc:83:12:
         d3:ba:0a:db:4f:e3:bb:8a:7c:d8:1e:af:0d:95:e3:00:bc:dd:
         fa:37:fe:4c:90:81:bf:dc:bd:7d:e1:74:6c:16:16:09:66:4b:
         c1:6b:17:0f:4e:1a:0e:53:92:d1:19:65:20:6c:fe:1c:11:3d:
         8d:0a:9c:3f:11:74:e7:9f:59:d6:e8:62:73:56:62:7d:a9:32:
         d3:5d:84:06:34:b8:3c:99:69:68:ad:df:dd:88:ca:87:d1:7a:
         70:38:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:14:49 2025 by rpki-client