Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a653430313a3a2f34382d3438203d3e203631353931.roa
File:                     323830343a323331633a653430313a3a2f34382d3438203d3e203631353931.roa (raw, json)
Hash identifier:          MBTbF59vqsDvZny5DgHO5RQLXqQiQgqPdv0YvWgO4ps=
Subject key identifier:   5A:28:4D:5C:B5:E1:81:65:09:15:64:E7:A5:73:14:87:3A:45:53:69
Certificate issuer:       /CN=14490FD591932776F2F5F6CFB3C5431550A04F62
Certificate serial:       0E660957EF6C0983B8FF257FDA581036718A4125
Authority key identifier: 14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a653430313a3a2f34382d3438203d3e203631353931.roa
Signing time:             Sat 01 Feb 2025 18:48:39 +0000
ROA not before:           Sat 01 Feb 2025 18:43:39 +0000
ROA not after:            Sat 31 Jan 2026 18:48:39 +0000
asID:                     61591
IP address blocks:        2804:231c:e401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl
                          rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:66:09:57:ef:6c:09:83:b8:ff:25:7f:da:58:10:36:71:8a:41:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14490FD591932776F2F5F6CFB3C5431550A04F62
        Validity
            Not Before: Feb  1 18:43:39 2025 GMT
            Not After : Jan 31 18:48:39 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:09:7f:9a:95:46:f3:b9:8c:6f:b7:30:a5:b7:
                    bc:ff:8d:46:42:97:e4:c2:5f:df:ce:eb:60:17:07:
                    dc:8d:06:f7:07:01:d2:67:2d:d4:da:d4:45:c6:ee:
                    a7:65:f1:e9:67:ad:dd:71:ec:cf:48:e4:b2:33:41:
                    f4:f9:ae:5b:2b:d6:64:45:e5:1d:98:32:5e:93:cf:
                    d1:83:b2:56:b1:81:e3:bb:52:b2:0c:17:92:d2:b0:
                    43:95:47:80:04:d9:d3:27:bb:89:36:37:98:78:18:
                    c6:ee:7a:4e:19:0f:48:a4:66:f2:2a:15:67:73:0d:
                    c6:90:ad:d8:33:d4:8a:9a:ea:f8:99:a8:60:74:cb:
                    b1:95:ea:62:29:f9:cd:54:32:17:91:70:52:c4:54:
                    87:79:3c:f4:2d:06:c6:c0:6d:63:61:24:52:f6:c2:
                    5c:6d:66:4a:93:d5:04:37:de:e8:a0:82:11:89:d1:
                    a7:56:a9:14:ab:02:4e:81:ad:fe:71:68:a3:98:83:
                    63:5c:c3:c5:2d:cd:29:bd:57:14:6f:e1:a8:22:4e:
                    00:5b:05:f1:02:b0:61:26:64:91:cf:74:c1:5f:06:
                    a7:f9:08:5d:cc:65:ef:2e:9b:b6:06:51:f3:89:8d:
                    21:a3:1c:af:be:83:0b:c1:33:11:29:46:0a:bd:ef:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:28:4D:5C:B5:E1:81:65:09:15:64:E7:A5:73:14:87:3A:45:53:69
            X509v3 Authority Key Identifier:
                keyid:14:49:0F:D5:91:93:27:76:F2:F5:F6:CF:B3:C5:43:15:50:A0:4F:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/14490FD591932776F2F5F6CFB3C5431550A04F62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14490FD591932776F2F5F6CFB3C5431550A04F62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/1/323830343a323331633a653430313a3a2f34382d3438203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:231c:e401::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:1a:fa:b7:56:21:a6:cb:c5:89:08:ff:30:9d:76:d7:22:
         6b:ad:7c:30:e3:62:21:64:51:9f:eb:8d:c4:9d:4d:cf:5b:3b:
         9a:52:97:70:1e:2e:52:4b:e7:11:05:80:a4:0a:96:d0:70:9f:
         f5:d6:11:1b:5f:6e:ff:7a:6a:90:20:e6:d6:f5:fa:5a:05:cd:
         ca:5b:c2:4e:64:9f:62:7a:ce:bc:f9:12:bf:61:03:a5:b8:22:
         39:44:41:5d:d9:dc:d1:dc:a5:e1:1e:65:2c:9c:85:e7:f1:b7:
         63:e8:4c:ba:4d:be:3f:54:0f:cd:fb:45:b8:d0:c5:29:e0:a9:
         47:e6:6d:83:2c:22:b3:90:32:24:f6:da:81:80:b3:68:ac:9d:
         92:4b:d7:12:ce:cb:04:8e:cd:40:91:45:3b:4b:93:20:e0:f5:
         b4:a7:fb:cb:e7:ae:15:5e:5a:9d:97:d1:95:65:2c:33:95:7c:
         a2:9f:ef:ac:24:00:c0:81:72:16:5e:70:46:7c:bb:e3:b9:3d:
         04:2b:71:a4:35:ba:5b:47:ae:88:ff:e2:e4:54:7c:bb:50:0b:
         e5:10:55:0b:70:7b:fc:11:22:4e:10:fe:24:c6:72:0f:72:14:
         95:d0:d5:f0:df:41:49:9c:37:45:c9:ec:f0:5f:49:a9:a2:53:
         c3:11:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:27 2025 by rpki-client