Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa
File:                     323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa (raw, json)
Hash identifier:          167TAhQ7lnokCwZJ17z+elqNb77//spNjl5BM+cfjNE=
Subject key identifier:   19:0E:8A:FC:A0:2D:DC:09:1B:C6:3A:56:B8:35:E4:49:E6:12:F5:2B
Certificate issuer:       /CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
Certificate serial:       59C09484A6A6039334832AACC4C4D1C03FAB42BF
Authority key identifier: 0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     61779
IP address blocks:        2801:80:ae0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl
                          rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 18:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c0:94:84:a6:a6:03:93:34:83:2a:ac:c4:c4:d1:c0:3f:ab:42:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=190E8AFCA02DDC091BC63A56B835E449E612F52B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a0:eb:e2:71:c6:98:12:c6:fc:50:34:e5:ca:
                    7c:15:f5:55:ae:2d:7b:da:6d:62:c0:60:fa:c1:12:
                    d3:60:e1:6b:26:d0:b5:bb:ae:cc:c5:06:b8:ce:74:
                    04:38:32:6f:bf:b0:15:09:fb:47:e9:62:07:b0:20:
                    09:87:13:85:a4:9d:0f:49:03:f3:19:7a:d5:2c:7a:
                    ed:f2:3a:39:7d:74:eb:48:44:4d:b8:07:a2:61:cd:
                    b2:03:00:4c:66:69:1a:8a:5f:b9:9f:8e:4d:e2:31:
                    64:36:c2:21:0f:65:7f:9f:1f:6d:9e:96:60:75:eb:
                    bd:9a:b8:ee:10:7b:f8:ab:62:c8:9f:4a:20:e7:45:
                    f3:47:bb:d4:db:56:67:ee:61:33:98:08:b2:9a:b4:
                    48:6a:da:20:f8:e9:50:fb:78:44:c4:17:fb:ce:cb:
                    a9:74:d7:72:7a:e8:0b:03:e0:af:f1:5f:4f:32:4a:
                    0a:7c:73:2b:98:ce:2e:15:f9:21:c5:e0:db:65:0b:
                    b9:cf:b7:7d:be:4d:bb:45:be:20:16:20:39:ba:28:
                    5b:3a:d7:64:5a:1e:c2:fe:7e:bc:db:a0:62:84:fb:
                    d5:4d:fb:87:b4:83:dd:41:02:c6:c4:a8:e5:c8:3a:
                    c3:64:a7:31:c7:82:78:4a:f9:ea:ac:df:b8:f1:64:
                    68:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0E:8A:FC:A0:2D:DC:09:1B:C6:3A:56:B8:35:E4:49:E6:12:F5:2B
            X509v3 Authority Key Identifier:
                keyid:0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/323830313a38303a6165303a3a2f34382d3438203d3e203631373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:ae0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:c1:8c:8b:c0:66:f0:d4:77:a5:d9:ae:47:3a:17:97:14:a3:
         30:8a:9c:cf:2c:0f:a2:39:3f:65:62:49:94:7a:07:e5:c1:2c:
         fd:a0:10:e0:43:90:37:42:bf:d5:ec:5f:46:fb:1d:29:0f:b6:
         28:f9:66:26:b0:95:54:65:a9:e1:2f:69:7f:ee:22:b3:bf:87:
         8f:ce:d8:05:72:37:95:4b:77:8f:b5:74:8a:46:03:1d:15:5b:
         5e:aa:df:58:99:64:d2:18:33:c4:f5:07:d3:c4:f8:9d:a4:39:
         01:ae:d8:39:4f:88:fa:37:54:91:cb:a9:2d:04:8e:c3:d0:b7:
         d7:ab:0e:d4:fa:6d:65:81:3c:08:18:1b:f8:67:cc:d6:46:d2:
         8a:72:69:10:6c:c2:b5:54:8e:01:8d:8d:9f:dc:75:c4:3e:61:
         74:f0:6d:b1:94:f2:56:6a:ba:1a:38:b8:20:53:ac:3d:df:6d:
         fe:e5:0f:70:d8:91:a3:f0:d6:77:47:78:54:2c:b3:13:5a:a0:
         1e:2c:7f:a1:dc:52:94:33:56:b5:7b:a0:ca:75:df:50:ca:30:
         39:e2:d7:56:31:37:39:8e:aa:46:d7:7b:f3:13:59:82:b4:4c:
         73:91:d2:03:4d:7d:d3:41:70:06:b8:ac:93:f5:18:d0:05:d9:
         42:4c:fd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:04:43 2025 by rpki-client