Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3332203d3e20323731333837.roa
File:                     323830343a376162343a3a2f33322d3332203d3e20323731333837.roa (raw, json)
Hash identifier:          Ad1hesPC8dEzad8p0V4OqqewgDp9POZhp/8izwVbIk0=
Subject key identifier:   83:01:2D:DE:BC:1F:BE:16:DA:23:04:81:AC:8A:00:83:14:C0:72:C6
Certificate issuer:       /CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Certificate serial:       1314285D4E61CA06FEC02C6F472D1EEA0E603203
Authority key identifier: E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3332203d3e20323731333837.roa
Signing time:             Thu 30 Jan 2025 13:56:34 +0000
ROA not before:           Thu 30 Jan 2025 13:51:34 +0000
ROA not after:            Thu 29 Jan 2026 13:56:34 +0000
asID:                     271387
IP address blocks:        2804:7ab4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl
                          rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 14:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:14:28:5d:4e:61:ca:06:fe:c0:2c:6f:47:2d:1e:ea:0e:60:32:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
        Validity
            Not Before: Jan 30 13:51:34 2025 GMT
            Not After : Jan 29 13:56:34 2026 GMT
        Subject: CN=83012DDEBC1FBE16DA230481AC8A008314C072C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8d:88:31:d1:a8:ed:64:31:7a:36:1c:bd:25:
                    73:3d:d6:d1:f0:3e:65:bb:7f:d1:67:67:26:a3:6a:
                    aa:50:3e:15:70:e0:c3:9a:b9:29:87:e1:df:9d:65:
                    91:39:61:a9:13:23:8a:d2:72:34:5d:a7:6d:eb:3e:
                    a9:e8:d0:22:33:cb:54:65:ed:81:e9:a1:62:51:ae:
                    8c:8d:4e:6e:a6:1f:58:95:39:b1:a5:f6:bf:e0:2f:
                    02:07:34:c4:f7:01:34:95:5c:69:69:66:7a:2b:f6:
                    24:50:09:7b:fe:49:b7:30:43:ec:f2:24:d3:16:90:
                    64:da:be:cb:2c:00:fd:5b:b2:2e:53:b1:19:b2:36:
                    da:8e:1f:52:19:fb:07:1d:23:ba:37:9c:ba:33:8c:
                    9d:1c:27:91:38:3e:63:18:49:3f:78:10:f1:d4:dc:
                    3a:db:bf:06:aa:87:8a:c8:03:c5:86:25:02:29:73:
                    19:33:76:af:9a:2e:4a:55:2b:5e:14:8b:a8:d1:0e:
                    91:7e:dd:4f:18:e8:ae:16:f4:7f:4e:86:1c:94:af:
                    4d:a2:0c:a4:ae:1c:0d:1a:40:a2:ac:cd:26:68:2e:
                    0c:ce:fb:0f:3c:b7:47:d5:42:c1:f1:91:e8:9e:fe:
                    08:db:56:9a:d6:14:b9:3e:6d:67:df:ef:26:1d:6f:
                    d8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:01:2D:DE:BC:1F:BE:16:DA:23:04:81:AC:8A:00:83:14:C0:72:C6
            X509v3 Authority Key Identifier:
                keyid:E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3332203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ab4::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:2a:85:bb:dc:fe:88:92:6e:e8:93:79:f4:4f:2d:de:ef:cc:
         96:90:16:c2:a7:33:03:43:2e:7a:be:fd:9c:12:ee:16:b2:92:
         6d:25:1b:4a:2c:64:52:6b:0d:2a:71:24:47:e7:fa:3e:ab:3c:
         8e:27:2d:dc:f7:06:a4:42:e3:ce:70:63:12:b1:ba:08:89:84:
         40:fc:98:e3:57:9d:d2:d1:65:0c:ae:c0:27:70:3b:28:6b:56:
         c8:be:76:94:d9:54:d2:84:8a:b7:5c:87:ad:9f:34:68:22:14:
         2f:4c:0c:85:ec:d2:25:8a:b7:68:5e:a3:d7:9e:df:0b:37:6d:
         c8:e1:6d:c4:78:b4:30:df:d2:95:2f:28:74:d2:50:1a:70:e2:
         4f:6c:a5:da:51:9d:74:b3:14:ff:2c:a5:01:61:3d:af:c2:43:
         48:34:6c:f2:ab:08:6d:52:56:8d:3b:62:e9:5d:cb:ac:1c:b3:
         7f:7f:34:d5:78:32:10:55:d0:ce:b7:95:1e:6a:a1:4b:6b:8b:
         9e:45:42:6e:1e:db:38:16:e7:49:26:e7:88:12:dd:16:22:f2:
         1f:06:f5:3a:51:3e:82:55:45:4a:81:8e:00:c6:5d:b5:d7:31:
         fd:bf:06:31:bc:94:ce:d6:d8:b0:5f:ba:0d:b4:37:4c:38:ec:
         81:7f:b5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:58:39 2025 by rpki-client