Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/323830343a333234383a3a2f33322d3438203d3e203631353832.roa
File:                     323830343a333234383a3a2f33322d3438203d3e203631353832.roa (raw, json)
Hash identifier:          6cGqxAJyFs/ef/5Scq35NoTtQ9ZBlPGKbl+DG0ikhtg=
Subject key identifier:   EF:91:82:02:51:34:29:C5:EC:E4:65:00:6A:E2:3B:17:56:24:C3:E2
Certificate issuer:       /CN=F3A58196CD0A4AD290F3F47F168D539B895B28A6
Certificate serial:       7C112404B7A4470B7008279AB26A9357ACCE8F61
Authority key identifier: F3:A5:81:96:CD:0A:4A:D2:90:F3:F4:7F:16:8D:53:9B:89:5B:28:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/323830343a333234383a3a2f33322d3438203d3e203631353832.roa
Signing time:             Tue 18 Mar 2025 14:47:31 +0000
ROA not before:           Tue 18 Mar 2025 14:42:31 +0000
ROA not after:            Tue 17 Mar 2026 14:47:31 +0000
asID:                     61582
IP address blocks:        2804:3248::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.crl
                          rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 13:12:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:11:24:04:b7:a4:47:0b:70:08:27:9a:b2:6a:93:57:ac:ce:8f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3A58196CD0A4AD290F3F47F168D539B895B28A6
        Validity
            Not Before: Mar 18 14:42:31 2025 GMT
            Not After : Mar 17 14:47:31 2026 GMT
        Subject: CN=EF918202513429C5ECE465006AE23B175624C3E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:7b:79:fd:0f:21:c5:5c:25:c9:0d:54:c8:
                    91:9b:f5:e8:29:c7:61:12:00:e6:2a:d7:1e:b9:f7:
                    9c:34:fe:72:28:e9:35:56:81:d0:b9:8b:81:01:e5:
                    83:90:e2:15:63:47:6f:e4:6e:36:12:c2:c8:57:90:
                    f6:7d:78:b1:04:21:48:b6:6a:de:2d:9e:74:28:4a:
                    7a:ac:a9:38:a3:28:aa:06:d2:30:65:fd:8b:c7:e8:
                    c5:6b:77:1f:6d:6a:ac:62:82:32:f1:e4:a5:96:54:
                    9d:81:2e:cd:23:b5:d9:f7:5c:b6:38:a1:a7:3e:43:
                    02:aa:12:7b:d8:42:11:db:b8:82:44:a5:46:20:04:
                    d3:d8:97:e8:5c:58:ce:3e:bc:88:44:df:43:27:2f:
                    43:46:2a:6f:69:09:36:01:fa:6b:18:b3:42:f7:cc:
                    14:2a:ac:af:b3:71:a8:84:1e:34:96:5e:88:c3:0f:
                    ae:ae:53:f0:a6:c6:a9:9a:b8:1d:4e:2a:38:0c:33:
                    b7:ee:69:09:17:2d:93:65:06:68:00:55:3f:f1:48:
                    ff:5a:15:83:f0:2e:97:6d:5b:2c:27:9e:7a:7c:8c:
                    cb:f5:25:11:22:2d:49:94:23:03:e4:42:06:d9:af:
                    6e:7a:43:76:0c:2b:b0:a4:51:de:b5:d4:f4:3a:a5:
                    0f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:91:82:02:51:34:29:C5:EC:E4:65:00:6A:E2:3B:17:56:24:C3:E2
            X509v3 Authority Key Identifier:
                keyid:F3:A5:81:96:CD:0A:4A:D2:90:F3:F4:7F:16:8D:53:9B:89:5B:28:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/F3A58196CD0A4AD290F3F47F168D539B895B28A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3A58196CD0A4AD290F3F47F168D539B895B28A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Tgb93WfXaLkiuhHsb4cYs3by32YnfrNbvuLfMuYiyb2/0/323830343a333234383a3a2f33322d3438203d3e203631353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3248::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:01:55:ac:20:f8:80:22:53:09:a4:de:02:b8:f5:da:60:06:
         96:73:39:28:88:f1:ca:d0:48:6d:9a:fd:b9:98:03:b9:43:24:
         64:d5:39:5a:38:dd:eb:bb:3d:d2:79:1e:e3:7b:48:21:f5:6b:
         cc:8f:8f:86:44:26:ec:9d:59:8d:f4:d9:29:f4:cb:9d:c7:72:
         70:8a:1e:4f:11:65:cf:2a:ab:c5:d5:c2:0d:76:64:d3:dc:a1:
         c5:97:4d:62:a9:c7:11:53:8c:00:bf:6c:a2:54:e8:96:93:d2:
         ce:bc:30:f8:9f:6e:0e:cb:7f:b7:5a:f0:fe:e7:34:c6:1d:ed:
         65:7c:a7:67:1d:51:db:4f:44:7a:d7:96:c6:73:73:d7:5c:1b:
         89:54:c9:42:ac:69:4c:cd:41:ae:9d:e5:b1:83:c7:ca:71:5e:
         a7:af:5a:8b:62:4d:41:29:2a:75:35:9e:5b:ca:59:1f:b4:7b:
         eb:65:71:49:06:d1:26:6c:bc:70:c8:2c:41:0b:b9:4c:9c:8a:
         b6:18:d3:8f:33:be:fa:39:e1:ee:4b:f3:35:d3:46:eb:1d:b3:
         12:ac:8e:95:0f:65:5f:75:ca:23:70:d4:68:5a:17:9b:76:12:
         c8:a1:8b:47:10:3c:7a:45:a9:3e:3d:fb:08:46:20:5d:a2:4c:
         20:5b:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:45 2025 by rpki-client