Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33332d3333203d3e20323731333837.roa
File:                     323830343a376162343a3a2f33332d3333203d3e20323731333837.roa (raw, json)
Hash identifier:          QsDdDmpEkutslVtHtu47v9k+BpoTPq7dcNr9H18d7KU=
Subject key identifier:   57:C0:AC:06:AC:D2:A4:F1:C1:B0:8D:6C:89:7E:0C:E1:00:C2:90:83
Certificate issuer:       /CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
Certificate serial:       754E0FEFF88928740EAE62E8FD148444381C575A
Authority key identifier: E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33332d3333203d3e20323731333837.roa
Signing time:             Thu 30 Jan 2025 13:59:00 +0000
ROA not before:           Thu 30 Jan 2025 13:54:00 +0000
ROA not after:            Thu 29 Jan 2026 13:59:00 +0000
asID:                     271387
IP address blocks:        2804:7ab4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl
                          rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 14:54:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:4e:0f:ef:f8:89:28:74:0e:ae:62:e8:fd:14:84:44:38:1c:57:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C
        Validity
            Not Before: Jan 30 13:54:00 2025 GMT
            Not After : Jan 29 13:59:00 2026 GMT
        Subject: CN=57C0AC06ACD2A4F1C1B08D6C897E0CE100C29083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:53:5c:46:55:cb:bf:a8:e3:0a:67:8d:ae:db:
                    01:96:c0:c8:21:0b:c6:31:01:81:9f:83:e3:67:1c:
                    11:bf:7a:d4:04:1a:b6:63:50:cf:b3:24:c0:95:7e:
                    dc:7b:82:69:fb:90:c8:56:78:ce:8d:72:c8:79:9d:
                    a1:36:19:ce:99:75:62:00:79:64:a2:1e:db:11:20:
                    2a:94:95:ef:a5:be:15:dc:f7:4c:93:da:04:31:db:
                    5b:b5:97:e2:a3:96:56:61:fc:1d:57:04:ac:5a:47:
                    8e:87:83:41:7d:7f:f9:95:58:59:7d:79:52:99:8a:
                    18:cc:b2:80:8d:5f:58:2e:19:14:54:55:53:9e:54:
                    72:51:c8:1f:0f:1f:2a:8f:11:cb:05:22:57:21:67:
                    a8:2b:3d:b6:d5:30:44:63:e3:aa:f2:b7:73:10:3a:
                    c9:2d:2e:c5:cd:f6:0d:24:f8:69:dd:03:dd:0c:27:
                    da:ca:c5:03:4b:ea:72:15:69:d3:77:a6:f5:36:7a:
                    33:15:cb:74:a6:62:e0:b5:bc:6d:6f:6b:d9:7e:d9:
                    d4:30:1d:ec:ad:f3:bf:f2:62:08:72:16:31:e7:88:
                    ec:30:6e:52:f4:85:0c:32:da:99:fa:8b:9b:fc:ec:
                    30:e5:3f:85:e3:9e:26:69:07:53:64:18:12:e0:f6:
                    ba:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C0:AC:06:AC:D2:A4:F1:C1:B0:8D:6C:89:7E:0C:E1:00:C2:90:83
            X509v3 Authority Key Identifier:
                keyid:E1:BA:EE:8C:47:55:5E:78:CA:DE:1F:AE:AA:82:C1:18:6C:DF:C1:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1BAEE8C47555E78CADE1FAEAA82C1186CDFC18C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33332d3333203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ab4::/33

    Signature Algorithm: sha256WithRSAEncryption
         34:5a:b3:a2:f0:5b:09:26:78:2a:68:61:b8:7c:e3:df:ae:b4:
         79:b1:5c:3c:37:83:91:ef:38:95:4d:d7:2d:ea:bb:c5:b2:f8:
         ed:5d:ed:c5:44:b2:d0:11:89:f6:a3:ea:17:b5:c2:cb:41:2b:
         f2:3c:4e:82:be:bf:50:13:98:e5:ec:40:59:ac:cf:b1:dc:27:
         4a:85:06:fd:04:e2:9c:0c:e8:76:48:38:b9:e7:58:44:48:ca:
         a6:da:54:b7:c0:e9:23:7b:cf:9c:27:d5:35:a3:f3:53:c3:17:
         88:b5:b8:ae:63:f3:4a:27:84:2c:04:1f:07:77:aa:bc:a8:89:
         30:60:ed:2c:4b:3a:23:a1:39:30:fd:b9:71:ed:9a:62:1a:e0:
         ad:ff:63:85:27:11:c8:5a:1d:51:d7:99:66:df:8b:39:40:53:
         f9:82:8b:90:82:bc:9a:39:fb:2d:47:7a:ca:12:03:23:90:e0:
         e8:32:36:4d:97:aa:1d:5a:2e:fe:2d:de:ef:78:68:8b:aa:a5:
         1a:e5:09:fc:95:84:5e:a7:68:e9:23:21:38:e1:45:9a:da:f8:
         de:66:ce:8b:61:33:67:be:de:99:7b:99:d7:a1:16:6e:ae:cf:
         9e:17:76:08:d4:d8:f6:d2:ba:1d:ec:04:06:12:45:9d:f0:45:
         f5:d4:d9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:58:38 2025 by rpki-client