Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373830333a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a373830333a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          APSUfgAAZvOm0CYeZcIKpaxE/CUDvvsSePNw76LpkTI=
Subject key identifier:   92:37:56:E4:5F:FF:A8:FE:4F:3F:E6:7A:D8:BE:36:CE:5D:2A:79:F2
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       41FDDFAAFA69D8744BA2052BC70C7F487D6F5BAD
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373830333a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 18:47:48 +0000
ROA not before:           Sat 01 Feb 2025 18:42:48 +0000
ROA not after:            Sat 31 Jan 2026 18:47:48 +0000
asID:                     61591
IP address blocks:        2804:231c:7803::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fd:df:aa:fa:69:d8:74:4b:a2:05:2b:c7:0c:7f:48:7d:6f:5b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 18:42:48 2025 GMT
            Not After : Jan 31 18:47:48 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:79:69:73:9e:6a:01:c4:ff:ac:58:62:8b:9c:
                    11:8e:1c:94:86:47:b5:37:a1:9b:e4:43:8f:e6:be:
                    a0:38:b4:2a:41:62:1a:76:4a:45:aa:7e:96:a4:23:
                    b1:63:3f:90:b9:54:2e:2c:80:cf:09:94:cf:a6:b9:
                    66:f1:35:cc:32:24:f3:db:ce:a1:c1:bc:4c:ac:83:
                    3d:99:d7:78:52:c7:eb:71:f4:8a:77:7a:8e:9e:76:
                    ef:db:d3:74:51:48:92:a9:87:c1:46:6d:d8:0c:e6:
                    32:71:b6:2f:ab:be:36:f5:6d:bc:3a:e9:ae:01:b7:
                    2a:ce:84:b4:82:2e:c8:5a:a0:19:00:fa:da:c8:ce:
                    8b:10:4f:a5:6a:86:a3:87:f6:0a:15:b2:ef:fa:3f:
                    c0:d4:e3:a6:67:01:c7:3c:87:bb:5b:20:c3:d2:10:
                    75:3d:af:5b:8f:76:55:59:23:5e:c0:5f:df:74:91:
                    b3:fc:ac:bd:7b:ad:ce:f2:7d:48:1c:80:54:a6:90:
                    d8:eb:17:b4:56:44:18:8e:77:38:fa:ea:c1:15:f1:
                    0d:38:79:7c:b2:b9:2d:cf:5d:05:7b:3a:0c:44:68:
                    31:cd:7b:9e:da:05:21:c9:99:d7:b4:18:81:e6:0f:
                    51:54:7a:9b:8f:61:86:9b:a7:4d:9e:a2:ac:35:bb:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:37:56:E4:5F:FF:A8:FE:4F:3F:E6:7A:D8:BE:36:CE:5D:2A:79:F2
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a373830333a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:7803::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:9e:ca:f1:69:6d:a4:67:a4:64:7d:e2:7f:fb:53:5a:b9:67:
         12:b2:8e:16:2d:a6:de:11:69:65:f8:02:18:6d:14:b0:ce:69:
         c3:e6:6f:79:e0:a1:f1:43:d5:cb:c9:bb:57:da:57:a0:06:86:
         4d:c9:34:7f:e1:fa:21:0f:66:3e:60:96:b6:f5:59:26:50:27:
         62:6a:ad:82:89:ce:a1:bb:5b:d2:06:a6:fd:79:17:86:35:57:
         3f:a8:34:fc:21:c5:61:eb:fd:05:15:d7:f3:af:3a:8d:c0:30:
         36:60:ce:da:b1:93:28:db:d0:33:cf:ec:91:b3:0f:cd:fe:a1:
         62:7f:6a:c9:3b:e9:f6:af:eb:5e:5f:ce:b8:61:91:ba:fa:9c:
         c5:bd:68:48:87:67:22:98:3d:20:d9:ed:8c:65:ba:97:95:0f:
         5c:24:49:c2:99:f0:40:a0:6a:9a:84:84:47:f5:d2:16:e2:96:
         4d:ca:03:35:d8:50:dc:9f:69:12:dd:e9:30:71:71:8e:6d:1a:
         f4:70:ea:3f:d0:b0:46:f5:1c:ee:65:f2:6f:5f:27:5a:e9:16:
         32:b5:9c:89:c1:97:5a:90:6b:63:66:8c:de:60:26:c3:2a:67:
         b9:be:65:93:e2:ec:38:aa:83:93:06:8a:51:b4:94:8d:54:39:
         a0:60:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:37:21 2025 by rpki-client