Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/323830343a336266633a3a2f33322d3438203d3e203532363037.roa
File:                     323830343a336266633a3a2f33322d3438203d3e203532363037.roa (raw, json)
Hash identifier:          SkUiwPPRh8RlEDwLS6Lx4aUfllu6KV1Az1T8u5m5VNc=
Subject key identifier:   5B:C8:15:A7:13:72:DB:69:5C:E7:E7:46:6E:E4:41:60:50:23:27:6B
Certificate issuer:       /CN=EC37D17C061BE878628F004F6A8613266553C3FB
Certificate serial:       4DE0C9184C48AC8BFCBF46C37A17E497DA190B42
Authority key identifier: EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/323830343a336266633a3a2f33322d3438203d3e203532363037.roa
Signing time:             Thu 06 Mar 2025 19:00:01 +0000
ROA not before:           Thu 06 Mar 2025 18:55:01 +0000
ROA not after:            Fri 06 Mar 2026 19:00:01 +0000
asID:                     52607
IP address blocks:        2804:3bfc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl
                          rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e0:c9:18:4c:48:ac:8b:fc:bf:46:c3:7a:17:e4:97:da:19:0b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC37D17C061BE878628F004F6A8613266553C3FB
        Validity
            Not Before: Mar  6 18:55:01 2025 GMT
            Not After : Mar  6 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:2a:ac:61:62:62:a0:2c:7d:c1:3a:b9:63:
                    5f:28:3d:b8:63:a0:3d:5c:c2:88:53:ce:b4:31:a6:
                    af:6d:95:d9:b7:51:6c:5e:15:5d:32:2f:a0:3d:d6:
                    5c:60:1c:c9:df:1c:c8:66:6b:2d:9c:e4:49:49:a2:
                    f9:26:f3:63:83:22:5b:42:15:a2:38:6c:80:64:35:
                    df:d8:a0:1a:3a:e4:d6:24:82:81:fd:02:14:76:06:
                    54:2b:e0:c5:bd:77:ea:ca:02:94:53:e9:ef:e6:62:
                    13:cb:16:92:fe:c5:40:a0:c3:63:be:95:e9:d7:db:
                    76:59:0b:68:13:f6:51:23:52:23:68:ff:4b:b8:b8:
                    2f:87:30:20:02:6c:47:e3:44:09:60:20:a7:08:56:
                    a4:ab:04:7e:89:c7:4c:ec:8d:0a:38:88:6e:a5:80:
                    56:cd:e6:54:da:45:cc:68:4e:a1:40:77:28:79:81:
                    13:d6:99:51:36:d6:35:8d:cc:31:ac:8a:ca:0f:62:
                    c5:e0:68:e0:f3:4c:97:91:03:71:57:77:48:b1:4e:
                    86:86:2b:55:76:1f:ae:4a:07:77:a4:4c:03:50:4d:
                    72:db:41:9b:71:9e:1b:5d:c6:0d:12:0a:e7:34:44:
                    2c:77:77:32:f6:18:1a:26:66:b0:4d:22:2f:d2:a1:
                    a5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C8:15:A7:13:72:DB:69:5C:E7:E7:46:6E:E4:41:60:50:23:27:6B
            X509v3 Authority Key Identifier:
                keyid:EC:37:D1:7C:06:1B:E8:78:62:8F:00:4F:6A:86:13:26:65:53:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/EC37D17C061BE878628F004F6A8613266553C3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC37D17C061BE878628F004F6A8613266553C3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4TSmZvKRh7C5i7Qa5JmucSocd533Z9uHmccUpDsbRVw6/1/323830343a336266633a3a2f33322d3438203d3e203532363037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:ca:6f:07:96:9b:dd:1e:6c:5b:87:1f:b2:af:43:f1:b3:57:
         47:48:57:ad:22:8e:78:17:5d:4d:e0:5e:77:8f:21:14:0c:71:
         76:a9:96:fd:64:7b:ea:58:27:ad:5a:b0:79:c0:ca:e6:cc:57:
         2b:58:72:e2:5c:2f:66:24:a7:06:c5:82:c5:6e:29:ca:39:7b:
         44:30:6b:ad:a7:19:ff:90:4c:ee:a3:4e:c7:99:0a:ab:b7:12:
         0f:a6:d7:e4:00:0f:45:7f:54:1c:bc:3a:fe:44:c6:fa:79:8a:
         1c:1b:86:a6:5b:19:4e:f0:52:21:c5:73:2d:a8:4c:f0:42:63:
         5e:d1:df:0c:71:a1:0a:39:2d:fd:6f:2c:60:e0:a9:8e:65:55:
         39:e9:ab:cb:d7:4e:ab:fe:f0:91:28:5b:e6:d6:42:e3:d0:20:
         fe:41:52:e6:ad:a5:88:96:b7:38:5a:e0:a7:c6:d9:ff:6d:e2:
         5d:7d:de:f0:73:36:63:94:9f:4c:7c:5e:02:6f:45:cb:fd:1c:
         26:06:f9:54:d4:68:a3:2e:1a:6e:03:1d:dd:cd:4a:65:31:6b:
         23:03:4f:01:fb:00:cc:9c:80:55:31:5e:de:e6:99:a0:c8:6b:
         87:7d:56:a9:bd:5e:c7:37:e4:dc:42:23:28:27:e0:08:21:60:
         e7:a1:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:07 2025 by rpki-client