Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a633030303a3a2f33342d3334203d3e20323731333938.roa
File:                     323830343a376165343a633030303a3a2f33342d3334203d3e20323731333938.roa (raw, json)
Hash identifier:          R+wK0eHumMOZxiqeWtMRPqS2/GW4Eev2iOoS+R6aplc=
Subject key identifier:   37:2E:C7:6B:95:81:0E:2E:5E:39:D8:30:BA:F5:78:E3:92:B9:E8:D8
Certificate issuer:       /CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
Certificate serial:       4BB145417F8CD3C1CD698AF2252841B49D539710
Authority key identifier: 7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a633030303a3a2f33342d3334203d3e20323731333938.roa
Signing time:             Tue 18 Feb 2025 18:40:37 +0000
ROA not before:           Tue 18 Feb 2025 18:35:37 +0000
ROA not after:            Tue 17 Feb 2026 18:40:37 +0000
asID:                     271398
IP address blocks:        2804:7ae4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl
                          rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 19:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b1:45:41:7f:8c:d3:c1:cd:69:8a:f2:25:28:41:b4:9d:53:97:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA
        Validity
            Not Before: Feb 18 18:35:37 2025 GMT
            Not After : Feb 17 18:40:37 2026 GMT
        Subject: CN=372EC76B95810E2E5E39D830BAF578E392B9E8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:36:3c:85:a2:68:b1:dc:4d:c8:d8:29:07:f3:
                    e2:32:1f:96:61:4c:30:64:b6:1f:b9:c9:5b:d7:03:
                    41:47:7e:34:27:34:bd:60:9a:88:d1:d9:da:fc:80:
                    39:d7:d4:3c:24:3b:df:02:4f:f1:da:de:64:c7:55:
                    74:e8:eb:ec:26:e5:df:bb:92:94:f2:dd:16:6d:ae:
                    94:6e:ec:9c:67:09:a9:61:3c:53:86:bf:66:7f:12:
                    e7:05:3f:de:c3:6e:c1:7c:3e:1b:27:8f:b0:d9:90:
                    5c:53:61:43:06:66:8f:6b:2d:c2:ab:c9:8d:63:6f:
                    74:c6:51:50:e0:bd:e5:d7:be:14:3d:95:c3:84:25:
                    ac:73:f4:16:eb:86:18:d0:26:84:9a:73:63:36:9f:
                    e6:5a:14:7b:34:b3:f5:a2:69:23:79:ed:6b:4a:68:
                    d2:cf:39:e8:8d:49:a8:88:cc:18:a9:12:bb:b2:33:
                    0c:b6:b2:9c:57:2f:5b:8d:ec:a7:4b:3f:b1:b7:3a:
                    e3:fb:cf:11:6f:be:26:ab:5c:d6:df:a2:43:5d:05:
                    00:91:a9:b5:53:75:4a:2d:83:02:a6:9b:f4:4d:e7:
                    e2:bd:77:4e:80:00:a1:33:62:ac:37:f4:de:c2:b6:
                    b0:ad:19:97:93:7a:13:65:ad:d3:4c:c2:2e:05:48:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2E:C7:6B:95:81:0E:2E:5E:39:D8:30:BA:F5:78:E3:92:B9:E8:D8
            X509v3 Authority Key Identifier:
                keyid:7E:B6:6D:EF:DD:94:27:39:8C:BE:80:B8:EC:3D:1D:5B:CF:33:21:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7EB66DEFDD9427398CBE80B8EC3D1D5BCF3321AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W6i4jmJdnab1GEgq3MbtiB5RBSNZTQEsVViE94xTJri/0/323830343a376165343a633030303a3a2f33342d3334203d3e20323731333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ae4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         08:72:89:42:ef:95:73:e3:40:7f:a4:d6:cd:cf:00:53:ef:11:
         1c:f5:1a:1d:9d:2e:8d:f4:c3:71:68:2e:2a:3c:a3:b5:dc:31:
         e8:a6:b9:f0:2d:2b:c7:6f:93:f0:3f:a9:3a:a9:67:42:7f:55:
         ba:c8:ed:21:8c:f6:29:0e:56:2a:d9:3f:47:74:d2:70:a0:cb:
         19:7a:98:a7:68:12:5c:58:a4:c9:3b:08:c5:81:ff:9b:c5:a9:
         88:cf:a0:87:21:98:61:19:44:15:7d:47:43:d9:04:71:dc:8e:
         28:12:df:17:a7:25:a3:7a:2a:53:4f:fc:b3:57:b8:a5:a1:04:
         0b:c1:7a:c5:da:3f:ef:53:32:03:b7:03:7d:0f:e8:0c:49:fa:
         e5:7a:cc:ea:6b:1b:b6:d4:ba:83:e0:25:8f:f9:09:81:ac:81:
         be:6c:d3:ea:95:7f:1f:6a:a1:a0:f4:b5:0c:a6:76:64:5a:9d:
         a1:9b:41:19:72:b5:d2:62:0c:be:88:35:5f:ee:bc:66:4a:21:
         3c:d3:c3:5d:c4:77:29:ca:04:b1:bf:4b:57:29:ac:ba:45:9a:
         91:17:79:d6:24:86:06:7e:5a:1a:de:69:99:cd:bd:76:8e:4f:
         31:a6:1a:93:a5:1e:18:0f:f5:74:84:e1:9f:7a:cc:77:8f:14:
         6b:1f:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:32:40 2025 by rpki-client