Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa
File:                     323830343a376266383a3a2f33332d3333203d3e20323731343636.roa (raw, json)
Hash identifier:          Km9pDTC9knJePK8bHjlSIPWDCcjavNilNtIQxP7nZoM=
Subject key identifier:   16:FE:2F:F5:C3:12:B1:53:5A:D1:51:91:92:0C:1F:F6:5C:34:A9:64
Certificate issuer:       /CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
Certificate serial:       3D5E5D0032EF31EE3F55A713AA035501DBF661FA
Authority key identifier: E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa
Signing time:             Thu 06 Mar 2025 14:31:48 +0000
ROA not before:           Thu 06 Mar 2025 14:26:48 +0000
ROA not after:            Thu 05 Mar 2026 14:31:48 +0000
asID:                     271466
IP address blocks:        2804:7bf8::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 21:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:5e:5d:00:32:ef:31:ee:3f:55:a7:13:aa:03:55:01:db:f6:61:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C82FC45003FEB00DB928E6AF419E57721933EC
        Validity
            Not Before: Mar  6 14:26:48 2025 GMT
            Not After : Mar  5 14:31:48 2026 GMT
        Subject: CN=16FE2FF5C312B1535AD15191920C1FF65C34A964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:e5:43:43:e5:81:b0:95:29:4f:7b:4e:6b:
                    de:2b:bb:fa:b2:05:9e:3b:b3:da:3b:2f:3a:2c:6a:
                    4e:aa:d5:06:0e:20:77:7b:7a:74:73:55:3c:7c:e6:
                    93:fd:80:f5:d7:16:46:5d:9a:de:ee:e8:64:d2:ea:
                    6a:5e:82:88:01:30:38:af:c7:b8:15:67:67:70:af:
                    ec:1c:96:81:7b:a6:af:2e:19:bf:d4:7e:00:7f:6b:
                    f6:26:3c:f5:10:62:81:c6:6f:57:92:2d:26:d4:08:
                    eb:5f:d3:19:1b:f8:1b:0c:8b:91:da:44:85:c6:f6:
                    8e:f3:ec:90:f1:e8:81:1e:f4:50:32:9c:80:58:b4:
                    c4:e4:13:f3:0e:7e:33:e0:d9:dc:9e:9e:c3:ee:a0:
                    a1:09:16:39:c8:67:3b:d7:fb:5c:3a:d6:f6:f7:96:
                    1f:dc:b0:d5:c7:cd:5f:ca:df:d5:e8:c6:47:46:1c:
                    9a:c4:63:d8:0b:e4:d4:f2:c2:5a:26:34:02:40:fd:
                    f7:b3:5b:47:2f:ac:63:db:ed:a4:56:60:64:54:a9:
                    06:09:2c:18:f4:5d:a0:4e:0a:ae:3e:16:56:84:f3:
                    fb:7e:ce:04:d5:4e:ee:62:cc:41:72:f3:a3:05:44:
                    c9:fb:ae:df:98:f9:61:39:0a:d4:76:c0:41:b0:ef:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FE:2F:F5:C3:12:B1:53:5A:D1:51:91:92:0C:1F:F6:5C:34:A9:64
            X509v3 Authority Key Identifier:
                keyid:E8:C8:2F:C4:50:03:FE:B0:0D:B9:28:E6:AF:41:9E:57:72:19:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C82FC45003FEB00DB928E6AF419E57721933EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/1/323830343a376266383a3a2f33332d3333203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8::/33

    Signature Algorithm: sha256WithRSAEncryption
         7f:2d:bd:11:d1:6d:b4:df:66:99:2f:bc:eb:4e:1e:e5:87:1c:
         de:b1:1c:98:cf:3a:24:b7:8f:a4:a5:e4:e0:8a:22:a6:e9:4d:
         89:4b:4b:09:98:71:85:08:95:9c:de:43:2a:d5:50:0d:d7:2d:
         01:ac:3b:b1:79:a8:a6:79:10:fb:3b:19:d9:56:58:4c:68:0e:
         68:68:eb:f0:96:f7:39:e3:6f:5c:3a:9a:71:05:41:c3:21:04:
         47:8e:b2:60:05:a3:5b:70:34:a0:9c:a9:a3:81:ab:61:41:89:
         39:69:7d:cc:80:db:5e:d8:a3:51:df:c4:e1:4f:1e:78:9d:16:
         fc:a1:db:20:fc:3c:b2:c5:20:5b:e9:ab:a0:41:5c:87:a9:4b:
         9d:89:5b:4e:eb:84:e4:37:37:6e:7b:4a:b1:80:bf:90:c9:48:
         00:28:58:97:92:27:4f:c7:1b:36:91:a8:14:49:bc:3a:d2:7e:
         af:6e:5e:54:e0:65:d3:a6:9d:47:78:22:cf:d3:88:5c:b8:ee:
         f8:b0:bd:f2:a5:bf:43:ea:ef:fb:b1:e5:76:56:ab:c5:4a:48:
         aa:62:fb:33:8b:49:ac:01:6f:3c:5c:1e:91:78:4b:bb:dc:16:
         a2:7f:7f:7f:64:49:02:64:cf:b5:fc:be:a8:93:de:ef:95:e5:
         44:11:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:48:08 2025 by rpki-client