Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/323830343a3164633a3a2f33322d3438203d3e203533323032.roa
File:                     323830343a3164633a3a2f33322d3438203d3e203533323032.roa (raw, json)
Hash identifier:          PgXV8J2Qd7NngIygh5/nSAW9w+9Iq6Iq2O3ZLFIgI8Y=
Subject key identifier:   E2:02:E8:BB:0C:E1:95:B8:A0:E0:58:84:20:C5:37:0D:F9:0C:BF:AB
Certificate issuer:       /CN=FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA
Certificate serial:       454F3D8487B855094CFE516E5E8E54CAF68D229D
Authority key identifier: FB:48:35:D4:1A:7B:3A:7F:4D:75:86:CB:20:38:F3:C8:2A:77:56:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/323830343a3164633a3a2f33322d3438203d3e203533323032.roa
Signing time:             Thu 06 Mar 2025 09:58:18 +0000
ROA not before:           Thu 06 Mar 2025 09:53:18 +0000
ROA not after:            Thu 05 Mar 2026 09:58:18 +0000
asID:                     53202
IP address blocks:        2804:1dc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl
                          rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 22:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:4f:3d:84:87:b8:55:09:4c:fe:51:6e:5e:8e:54:ca:f6:8d:22:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA
        Validity
            Not Before: Mar  6 09:53:18 2025 GMT
            Not After : Mar  5 09:58:18 2026 GMT
        Subject: CN=E202E8BB0CE195B8A0E0588420C5370DF90CBFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:1c:3b:3d:86:80:01:bf:ed:df:af:76:68:
                    39:6b:ba:cd:b6:de:19:dd:53:f5:9c:cd:71:4c:e1:
                    c5:ff:81:5c:2f:7a:6d:d5:69:d6:05:0d:60:a6:61:
                    ae:0c:e2:5c:b9:79:af:b7:ad:79:21:ad:5d:c4:55:
                    37:a6:3b:6a:d2:ad:b8:d7:74:32:5e:69:2e:4a:24:
                    40:18:72:23:c4:e8:ca:4e:33:bc:02:b7:ec:54:86:
                    07:6a:69:44:c5:a0:22:a9:a7:d2:45:e7:85:4a:ca:
                    1d:5f:82:1f:96:37:80:8f:b7:9e:9d:49:42:e8:4e:
                    bb:b8:60:29:ce:ef:ac:3f:6d:ab:c5:e6:54:51:e6:
                    a0:43:be:02:0a:54:db:4f:8a:29:ec:06:54:91:06:
                    db:da:3b:c8:d4:f2:6a:6b:50:a8:4d:fc:4e:f7:b1:
                    f4:86:56:13:31:c8:17:ea:b8:d6:78:19:f0:fa:98:
                    bb:e0:37:9f:56:dc:a4:79:89:d8:87:0f:7f:98:d8:
                    87:1d:51:ef:7d:e5:cd:79:dd:72:76:83:0b:17:05:
                    b3:20:ce:64:cb:92:45:00:82:e2:aa:53:64:ad:5a:
                    58:69:d3:2d:d5:d7:58:c7:45:64:63:80:ef:fb:49:
                    41:32:30:61:79:76:60:d8:07:dc:d2:18:f8:02:e2:
                    06:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:02:E8:BB:0C:E1:95:B8:A0:E0:58:84:20:C5:37:0D:F9:0C:BF:AB
            X509v3 Authority Key Identifier:
                keyid:FB:48:35:D4:1A:7B:3A:7F:4D:75:86:CB:20:38:F3:C8:2A:77:56:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB4835D41A7B3A7F4D7586CB2038F3C82A7756CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/1/323830343a3164633a3a2f33322d3438203d3e203533323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:d8:d5:6c:ed:b8:66:a0:b6:e0:02:1c:8d:72:00:9b:4c:
         95:d1:28:75:80:04:cb:b0:51:6b:7c:1d:c7:1d:14:74:e3:93:
         84:46:64:53:2f:6f:51:e5:fe:86:ff:f5:8b:2e:41:cf:0f:0c:
         b1:c7:22:90:e6:84:04:15:b6:7c:56:2a:6a:bb:09:6b:c0:f9:
         77:50:7c:6e:ce:52:a6:a5:af:51:05:70:e9:3c:70:25:d4:62:
         5a:bf:ab:86:ab:e8:46:51:b1:cb:0a:62:41:a6:f0:81:d3:29:
         9d:89:75:a2:bf:3c:05:e3:ac:b2:ea:6b:2c:4b:52:b7:dd:f4:
         35:9b:51:7b:53:5c:c5:f0:e7:5b:f8:5f:97:b8:75:e5:30:b9:
         53:36:8a:be:c0:a4:61:62:53:35:26:b6:96:22:46:05:10:a1:
         d8:20:4a:9b:fc:56:1e:12:4b:c0:94:ed:d9:17:8a:cf:e5:59:
         cf:53:3e:04:03:70:45:ad:c9:87:e1:b4:46:5b:fd:b7:d3:4a:
         ce:40:09:63:05:72:86:3d:2e:4c:80:13:25:2d:a9:4e:d3:eb:
         38:69:07:26:69:b0:e5:6d:db:08:d5:a0:4a:1e:51:34:dd:9e:
         ae:99:14:c3:a6:4c:20:fa:49:84:63:c0:93:b9:eb:ad:44:7b:
         b2:b8:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:15:13 2025 by rpki-client