Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/323830343a333163343a3a2f33322d3438203d3e20323635303336.roa
File:                     323830343a333163343a3a2f33322d3438203d3e20323635303336.roa (raw, json)
Hash identifier:          ib5wwtLsKgTDM5CY4yd+jcJDIiz5WfxG5a3BFVpeIRE=
Subject key identifier:   12:D5:87:3F:64:0D:BF:C0:64:6D:E3:BC:CB:B2:BF:37:E7:A6:32:24
Certificate issuer:       /CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
Certificate serial:       48D25AF046D49791E452B6E370252435D7BD638C
Authority key identifier: E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/323830343a333163343a3a2f33322d3438203d3e20323635303336.roa
Signing time:             Thu 06 Mar 2025 04:01:11 +0000
ROA not before:           Thu 06 Mar 2025 03:56:11 +0000
ROA not after:            Thu 05 Mar 2026 04:01:11 +0000
asID:                     265036
IP address blocks:        2804:31c4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl
                          rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 10:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d2:5a:f0:46:d4:97:91:e4:52:b6:e3:70:25:24:35:d7:bd:63:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1358C78FC7E005E12280CFDE60E73419CC6A38A
        Validity
            Not Before: Mar  6 03:56:11 2025 GMT
            Not After : Mar  5 04:01:11 2026 GMT
        Subject: CN=12D5873F640DBFC0646DE3BCCBB2BF37E7A63224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:7f:97:bc:60:4d:42:93:9e:af:8e:79:1c:
                    d3:10:d1:fe:94:a4:56:f7:3c:d4:11:df:66:52:45:
                    09:5b:a6:1f:34:89:8e:ea:d9:c9:99:ac:19:44:cc:
                    49:8a:df:af:7d:c1:89:cd:b7:d0:2f:77:5c:a4:21:
                    ee:95:aa:67:7e:4d:e5:89:cc:10:5f:bd:23:47:d2:
                    b0:46:08:21:f5:9d:67:c1:b5:88:90:78:c2:01:b7:
                    2e:bd:72:39:0b:2f:cd:0c:91:b5:05:20:4b:ff:f2:
                    46:35:6f:22:8a:2b:f0:aa:03:e1:ea:1e:75:14:66:
                    6e:f1:3b:28:b7:fc:72:f7:0b:c1:85:30:e9:03:09:
                    19:bf:d5:fd:00:03:c4:32:b4:bd:c9:41:fa:6d:ab:
                    e0:5b:1b:60:98:ef:77:e0:a1:0c:25:b8:05:a3:7f:
                    0e:20:c6:33:94:0f:0e:06:71:3b:65:36:33:51:5d:
                    36:03:d6:eb:65:08:09:33:81:92:85:4b:37:7d:e2:
                    b2:7d:59:15:27:ed:58:00:e3:65:79:6c:97:bb:29:
                    8c:43:b3:b4:b5:0e:bb:3a:84:54:6d:6c:54:a4:20:
                    00:f7:6f:00:40:71:37:3b:ca:1d:37:e0:d3:98:d2:
                    75:69:08:45:38:1f:37:c0:5d:31:87:2c:61:16:41:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D5:87:3F:64:0D:BF:C0:64:6D:E3:BC:CB:B2:BF:37:E7:A6:32:24
            X509v3 Authority Key Identifier:
                keyid:E1:35:8C:78:FC:7E:00:5E:12:28:0C:FD:E6:0E:73:41:9C:C6:A3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1358C78FC7E005E12280CFDE60E73419CC6A38A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2s3miHmcJZ1nhJfp8WRbvTcJAyx7vA2U2Gy2keBsuWfE/1/323830343a333163343a3a2f33322d3438203d3e20323635303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:31c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:4c:99:1b:04:d3:25:a6:34:d5:ed:a9:f5:63:20:de:41:07:
         e0:7d:71:05:c4:6b:6d:40:cc:14:cc:03:f2:f1:c5:61:23:b5:
         94:83:04:e2:75:1f:72:4c:75:09:d7:70:43:dd:97:b9:90:59:
         c9:85:3a:2b:41:47:d0:8a:92:81:fa:c5:51:01:8b:1f:00:b1:
         9c:98:c4:fd:41:ea:5f:0c:5d:65:15:b5:f2:84:e2:54:66:3f:
         07:07:72:89:79:2c:34:2f:98:90:78:8e:1a:ac:9e:2c:20:71:
         d3:e0:33:4c:2f:9f:da:6f:a4:70:c6:97:d0:98:44:9e:a9:02:
         d9:b3:d1:45:f2:f6:c4:84:3e:f2:0d:89:11:41:83:c2:c3:e5:
         21:cf:a2:6b:c8:7c:7e:c5:d5:be:c2:ad:2f:fe:15:51:ad:af:
         d4:94:63:bf:1e:6d:3a:1b:16:80:27:6d:1d:b7:74:32:81:00:
         8d:7d:c5:45:dd:65:67:13:60:bb:be:8d:66:04:91:42:c6:e8:
         c2:85:ce:2b:b8:8f:f9:88:c2:09:59:f7:c6:3c:18:cb:89:68:
         d5:c1:48:9a:bb:9f:98:be:77:f7:2a:9e:94:1b:9a:d4:36:b7:
         bc:f0:16:cb:f3:1c:23:af:07:11:a9:20:eb:8a:e6:57:31:7d:
         59:82:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:33:30 2025 by rpki-client