Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/323830343a326566633a3a2f33322d3438203d3e20323634383634.roa
File:                     323830343a326566633a3a2f33322d3438203d3e20323634383634.roa (raw, json)
Hash identifier:          9xVYOzzediMPnfiX1Ak3rOgHT0IQIblfP+MGEdic5MQ=
Subject key identifier:   B1:26:E5:BD:DB:B8:5A:42:7C:2B:93:A2:DD:F7:34:F0:9C:8F:3E:5F
Certificate issuer:       /CN=3071090FBC805FB9D55E39C8A4C6C934680AAC8C
Certificate serial:       08EE1FCADC0192E58ABCD0824909EC862BC7D86A
Authority key identifier: 30:71:09:0F:BC:80:5F:B9:D5:5E:39:C8:A4:C6:C9:34:68:0A:AC:8C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/323830343a326566633a3a2f33322d3438203d3e20323634383634.roa
Signing time:             Wed 27 Nov 2024 21:56:18 +0000
ROA not before:           Wed 27 Nov 2024 21:51:18 +0000
ROA not after:            Wed 26 Nov 2025 21:56:18 +0000
asID:                     264864
IP address blocks:        2804:2efc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.crl
                          rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 04:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ee:1f:ca:dc:01:92:e5:8a:bc:d0:82:49:09:ec:86:2b:c7:d8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3071090FBC805FB9D55E39C8A4C6C934680AAC8C
        Validity
            Not Before: Nov 27 21:51:18 2024 GMT
            Not After : Nov 26 21:56:18 2025 GMT
        Subject: CN=B126E5BDDBB85A427C2B93A2DDF734F09C8F3E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:74:89:d9:74:a8:01:c0:99:ad:bc:24:21:
                    72:7b:19:10:63:b5:ba:90:93:56:ed:fa:6a:6e:21:
                    f4:98:6e:c7:79:67:d4:dd:8e:06:38:ea:05:54:03:
                    35:52:22:47:05:ee:4d:ee:97:8e:4f:23:5a:32:5f:
                    70:45:3f:75:f9:b1:f1:53:25:2b:18:6a:a5:25:cd:
                    a1:6e:b6:e8:1f:a6:36:f2:ba:77:65:e0:e9:1d:7f:
                    da:a6:2f:d0:0b:97:b2:83:0e:62:63:fd:0b:96:c1:
                    4e:1b:2b:98:b2:23:55:ae:c5:08:13:52:8a:f4:11:
                    99:97:34:a6:3a:c7:0f:be:ca:b3:cd:75:05:e1:4a:
                    91:b2:36:22:b8:73:76:c8:32:20:e4:e7:ea:4f:e6:
                    dc:86:53:07:bf:2f:1f:2c:a0:29:9c:6e:67:80:de:
                    67:05:45:c2:82:c1:d0:6b:01:22:6f:d3:04:ae:d8:
                    30:9e:05:fe:73:50:84:08:94:5c:fe:c2:8c:fe:7b:
                    ad:5b:05:ef:80:d2:59:d1:fc:cc:50:b3:65:5f:06:
                    f3:75:0f:60:d7:4c:5e:08:7f:31:33:d3:31:50:e4:
                    e0:34:c1:a1:a9:a8:5d:5a:9d:bc:35:39:57:48:6d:
                    c1:59:34:7d:9c:7c:7a:31:a7:2e:b8:62:28:04:17:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:26:E5:BD:DB:B8:5A:42:7C:2B:93:A2:DD:F7:34:F0:9C:8F:3E:5F
            X509v3 Authority Key Identifier:
                keyid:30:71:09:0F:BC:80:5F:B9:D5:5E:39:C8:A4:C6:C9:34:68:0A:AC:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3071090FBC805FB9D55E39C8A4C6C934680AAC8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48yMyWWV9meVo6ruiCGPTasAsn1ZxvKDihcRmhk73tfu/0/323830343a326566633a3a2f33322d3438203d3e20323634383634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2efc::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:6e:f3:54:79:ba:ff:62:c4:ff:35:99:df:bf:1b:3d:19:a5:
         75:cf:b3:c2:71:c3:dd:63:1e:7d:99:6a:90:e6:8f:63:81:d7:
         84:31:97:3e:c0:45:9e:cf:7f:ff:5a:ee:21:29:69:a2:88:ca:
         69:f3:39:e7:fc:54:3c:bf:02:58:ae:a1:23:3d:55:ec:6b:84:
         c0:52:b9:9a:28:ce:6b:dc:22:bb:b1:0a:56:8f:1c:24:b2:c5:
         ce:dd:b1:43:0f:cc:8b:c1:74:ff:7e:55:63:2f:17:82:9c:de:
         9e:e5:50:8d:6b:49:ac:aa:d1:13:6b:4c:af:63:be:74:75:cc:
         f5:6f:0d:b5:72:91:be:07:3f:9c:36:41:d6:ab:11:c4:d2:bb:
         04:cf:10:1e:a3:57:31:d4:5b:2e:00:75:6f:8e:56:b7:f7:b3:
         c6:48:70:1f:bf:2b:91:92:fb:38:58:95:f8:46:ee:d6:7e:a5:
         3b:c1:dd:27:3e:8d:6f:1a:16:4a:ec:c4:6c:93:5c:3d:ce:ad:
         30:37:c0:1b:14:4d:65:85:42:b6:30:92:ce:da:27:4a:d2:7e:
         83:af:e3:64:ab:0b:d6:d1:fe:f2:75:95:5c:c8:0c:87:21:1c:
         0e:bb:6e:20:21:e0:eb:71:ef:ba:87:d9:88:52:e7:b6:2d:9c:
         33:c1:5d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:11:52 2025 by rpki-client