Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a323730303a3a2f34342d3434203d3e203631353931.roa
File:                     323830343a323331633a323730303a3a2f34342d3434203d3e203631353931.roa (raw, json)
Hash identifier:          o6+L8uDM87QaLXBHe+byQW1j+5UcLRWZSm8VL2or5FM=
Subject key identifier:   C5:A8:D1:B6:B5:BA:BF:1E:C4:D2:FD:FF:58:A2:6A:D7:1F:84:4B:77
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       25FC0DC3371CB969A296D67318E4B35AB61ACF2A
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a323730303a3a2f34342d3434203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 12:42:20 +0000
ROA not before:           Sat 01 Feb 2025 12:37:20 +0000
ROA not after:            Sat 31 Jan 2026 12:42:20 +0000
asID:                     61591
IP address blocks:        2804:231c:2700::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fc:0d:c3:37:1c:b9:69:a2:96:d6:73:18:e4:b3:5a:b6:1a:cf:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 12:37:20 2025 GMT
            Not After : Jan 31 12:42:20 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:07:43:2a:fe:63:78:99:59:0a:c7:94:76:
                    34:67:8c:66:76:8d:5f:83:6a:47:b1:51:e8:02:e2:
                    70:9f:81:ca:5f:89:8e:14:87:c8:a5:5e:c8:90:e9:
                    91:44:5f:dd:3c:42:25:6f:6e:14:c2:f8:2e:df:1d:
                    a6:a9:00:6e:6a:13:f9:95:9a:0a:00:24:92:bf:9d:
                    7a:fd:b6:4d:4b:fc:27:7a:d8:9d:5e:e1:12:8b:03:
                    42:e7:53:7f:f0:e5:a9:1c:2d:51:a4:07:5c:67:3f:
                    b7:63:32:8b:08:fc:7f:26:2b:1a:c4:05:e1:15:53:
                    f7:08:a0:9a:93:0a:82:3d:66:8f:2c:52:a5:cb:9a:
                    55:8d:6b:37:93:fc:f6:7e:51:56:08:99:c4:6f:f9:
                    dd:18:9c:25:33:e6:c7:29:f2:04:14:45:b1:e6:21:
                    08:69:e5:3f:12:24:70:bb:73:de:8d:9e:f6:46:14:
                    c4:55:c6:a5:c3:c6:5d:3d:1d:c9:e2:48:2e:7b:96:
                    2e:46:3a:3f:16:17:63:7c:98:85:12:0e:06:63:8f:
                    1c:e2:c3:47:60:45:ec:e7:81:34:b2:44:c3:77:1d:
                    5a:88:b8:b6:72:4a:05:e5:f0:d5:22:14:87:6a:61:
                    1b:d2:68:ce:e0:06:dd:ac:28:e7:8e:25:cc:e1:06:
                    6e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A8:D1:B6:B5:BA:BF:1E:C4:D2:FD:FF:58:A2:6A:D7:1F:84:4B:77
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a323730303a3a2f34342d3434203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:2700::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:1d:6f:0a:f7:bf:d4:02:89:ce:e5:a9:43:b8:63:0f:dc:
         50:a3:b4:61:58:25:16:30:b8:e0:92:74:77:7a:53:39:43:5d:
         14:56:c2:55:e7:25:d0:b2:3d:85:28:70:f1:99:3a:36:d2:66:
         17:f3:b9:03:b8:e8:34:ec:30:8e:d7:23:db:84:b2:e4:7d:3e:
         8e:08:16:05:c7:58:43:fa:dc:da:90:c8:b9:4b:e8:92:78:cb:
         d2:13:c7:73:ac:3e:9b:76:1f:f0:fe:94:67:15:64:77:01:65:
         b2:e1:e1:0a:70:2a:40:2a:67:74:9a:7b:76:01:d7:e6:07:96:
         89:57:52:45:ff:6b:01:43:12:85:76:f8:1a:76:86:2e:79:3a:
         bc:50:fe:70:5d:ea:e9:91:46:0e:55:0f:06:f3:85:ba:0d:4d:
         38:6d:26:06:72:68:da:82:79:e5:14:53:71:97:96:fb:ca:1a:
         1b:e7:b1:25:f4:59:0d:e2:5c:7e:7c:1a:e8:0a:bd:3c:e8:a6:
         05:cd:61:32:67:6f:7f:44:3b:bd:a7:68:2f:0e:17:e0:6c:1d:
         7a:67:ce:a4:74:36:8e:b2:b3:0c:4f:3a:2a:04:8f:62:bf:d6:
         05:e6:77:a0:e4:2b:eb:4b:3c:63:f6:ea:09:d0:b5:8b:0a:0b:
         72:0a:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:16:14 2025 by rpki-client