Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33322d3332203d3e20323733373133.roa
File:                     323830343a386232303a3a2f33322d3332203d3e20323733373133.roa (raw, json)
Hash identifier:          pQOnfbDyMkYbjegBRXPNs0/vkTwxc3YQUhvCMCjVjnk=
Subject key identifier:   D2:A9:97:1A:29:9F:49:DD:73:1C:C3:74:08:BA:32:58:B4:18:84:08
Certificate issuer:       /CN=17C00B445C93E393C8337EE28B631DC91D3E7C96
Certificate serial:       4BF1F62F1B646019CEC87E85A0F6295CD400D35B
Authority key identifier: 17:C0:0B:44:5C:93:E3:93:C8:33:7E:E2:8B:63:1D:C9:1D:3E:7C:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C00B445C93E393C8337EE28B631DC91D3E7C96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33322d3332203d3e20323733373133.roa
Signing time:             Thu 30 Jan 2025 13:57:13 +0000
ROA not before:           Thu 30 Jan 2025 13:52:13 +0000
ROA not after:            Thu 29 Jan 2026 13:57:13 +0000
asID:                     273713
IP address blocks:        2804:8b20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/17C00B445C93E393C8337EE28B631DC91D3E7C96.crl
                          rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/17C00B445C93E393C8337EE28B631DC91D3E7C96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C00B445C93E393C8337EE28B631DC91D3E7C96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f1:f6:2f:1b:64:60:19:ce:c8:7e:85:a0:f6:29:5c:d4:00:d3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17C00B445C93E393C8337EE28B631DC91D3E7C96
        Validity
            Not Before: Jan 30 13:52:13 2025 GMT
            Not After : Jan 29 13:57:13 2026 GMT
        Subject: CN=D2A9971A299F49DD731CC37408BA3258B4188408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:10:f9:f7:9e:81:d2:8e:f3:3d:69:98:df:
                    9f:c4:fb:cd:9a:7e:c9:7a:e7:66:62:2d:97:0e:28:
                    da:8c:c7:97:ff:eb:f0:00:c3:bf:37:1f:09:99:7d:
                    63:59:89:8e:92:10:55:ba:96:1c:d4:da:75:c8:e2:
                    87:da:43:87:b9:2a:c6:b7:5f:46:34:42:3a:d4:d1:
                    34:56:53:f4:fc:d9:4b:cf:c3:75:a3:3e:a2:24:1e:
                    1c:53:b6:12:fa:89:4b:29:3b:48:c0:b3:54:46:0c:
                    0a:33:dd:20:4e:c2:3a:86:b8:14:8e:56:c4:da:7f:
                    4c:24:58:0a:23:a3:d3:e8:09:af:1d:29:04:5b:07:
                    ac:66:dd:45:1b:2b:8a:e2:56:af:ac:9b:52:93:cd:
                    a6:80:0e:ca:89:e4:d1:97:41:a1:e3:a1:fe:73:f6:
                    d0:5a:92:62:7a:b9:73:8d:8e:13:da:06:ab:d0:aa:
                    dd:94:6b:56:dd:72:70:e4:b8:86:57:36:29:2b:94:
                    49:e9:d7:fa:63:b4:54:6c:38:e7:fa:26:c0:61:b8:
                    f3:5e:15:5b:de:43:28:bd:34:07:9a:ea:99:c8:66:
                    9a:22:01:0b:57:98:86:6e:66:e2:a6:d3:e5:e8:40:
                    e4:d6:68:db:7d:5f:a0:02:88:22:b3:c9:e1:5c:6d:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A9:97:1A:29:9F:49:DD:73:1C:C3:74:08:BA:32:58:B4:18:84:08
            X509v3 Authority Key Identifier:
                keyid:17:C0:0B:44:5C:93:E3:93:C8:33:7E:E2:8B:63:1D:C9:1D:3E:7C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/17C00B445C93E393C8337EE28B631DC91D3E7C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17C00B445C93E393C8337EE28B631DC91D3E7C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/323830343a386232303a3a2f33322d3332203d3e20323733373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:95:cb:5f:b1:09:92:3e:92:97:14:d5:a1:0b:68:2b:f8:8c:
         db:39:8f:16:33:1d:6a:08:da:6a:b7:23:d3:4d:20:6c:26:43:
         ed:cc:59:05:90:28:28:5e:00:68:35:fe:ec:41:da:e4:6b:e3:
         29:a7:4b:b1:ee:6e:49:d4:75:cc:31:f8:38:60:80:d7:ed:ea:
         61:50:86:59:cc:b1:07:08:8c:5f:af:4a:24:9a:9a:8c:fc:c4:
         50:2a:e0:f0:db:d2:fa:c7:e8:7e:7c:45:0a:b6:73:1e:7e:bf:
         16:c1:e4:18:39:17:c1:3f:01:b6:62:6e:99:b1:2d:96:a6:47:
         e1:95:be:32:d9:59:40:c2:fa:cd:f7:41:78:b9:7a:a6:08:66:
         31:f5:21:f5:49:1f:15:21:f1:7a:e7:f9:0f:de:4e:7a:75:e4:
         a2:dc:9a:e6:0a:40:82:17:08:e3:7c:bf:21:05:08:58:de:e7:
         a3:cc:d5:93:4c:61:78:0f:0a:4c:9a:02:07:4f:bf:a5:01:08:
         6d:d7:82:4e:29:cf:53:20:93:33:d8:77:81:b8:5b:eb:63:a6:
         e8:cc:f3:50:99:f3:67:20:d6:c3:eb:a3:2c:cc:3a:d5:86:c7:
         55:17:70:01:04:92:79:23:e8:7f:0a:b2:47:66:bb:21:83:5f:
         ed:06:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:29:41 2025 by rpki-client