Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33322d313238203d3e20323731343733.roa
File:                     323830343a376331303a3a2f33322d313238203d3e20323731343733.roa (raw, json)
Hash identifier:          UUqLMHXQ1D7Yctq96s4HaMLuot0UopuAvbAYPvxZGyw=
Subject key identifier:   08:86:91:BA:D8:86:35:C1:82:B4:DF:04:C2:70:19:09:36:9B:B2:4E
Certificate issuer:       /CN=27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492
Certificate serial:       2DFC191736BB283A49403D111C96FE6A5F12F412
Authority key identifier: 27:C4:A6:55:2B:2A:20:F6:DF:7C:4A:54:98:CC:6F:F9:53:BA:B4:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33322d313238203d3e20323731343733.roa
Signing time:             Wed 05 Feb 2025 13:18:53 +0000
ROA not before:           Wed 05 Feb 2025 13:13:53 +0000
ROA not after:            Wed 04 Feb 2026 13:18:53 +0000
asID:                     271473
IP address blocks:        2804:7c10::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.crl
                          rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 02:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fc:19:17:36:bb:28:3a:49:40:3d:11:1c:96:fe:6a:5f:12:f4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492
        Validity
            Not Before: Feb  5 13:13:53 2025 GMT
            Not After : Feb  4 13:18:53 2026 GMT
        Subject: CN=088691BAD88635C182B4DF04C2701909369BB24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:9b:30:36:e9:b8:d3:3a:7f:f4:e6:8b:e6:
                    55:65:88:54:62:39:15:51:32:cd:bc:a8:45:b9:e3:
                    e0:84:f6:8a:23:28:dd:91:c4:2c:37:bb:bb:38:a1:
                    7e:ac:f4:35:fe:6f:14:86:a6:97:7d:6b:83:d0:94:
                    87:0d:fc:b5:13:7d:91:3e:1d:e3:35:e3:31:ac:18:
                    04:6e:bd:eb:a6:3b:cd:7f:12:bd:74:c3:40:cb:e3:
                    4d:3f:e0:62:34:10:66:01:b7:7e:e6:73:85:f5:52:
                    ce:2f:cf:3b:3d:26:18:2b:a6:30:cc:d2:aa:ca:a3:
                    65:29:d9:ff:93:ea:98:61:b7:44:9f:88:56:ad:b4:
                    7b:63:fc:b8:73:96:a9:67:83:e8:53:9e:aa:72:b4:
                    5f:8a:a0:f8:5c:e6:07:3a:ae:27:9c:24:04:d6:02:
                    66:f9:76:84:de:d8:eb:39:5d:cb:b9:1c:3b:0e:be:
                    a7:ae:49:fd:e2:35:e9:3e:53:02:a9:89:93:f4:59:
                    4f:7c:de:7a:15:32:9e:1b:68:55:41:ec:13:6e:fe:
                    b7:97:50:97:6b:39:f0:1f:cb:d2:fd:30:83:34:82:
                    33:4e:2d:19:b0:a7:4d:88:bd:d8:9f:a8:77:af:c7:
                    df:9f:98:33:80:6a:70:37:da:6f:5a:44:cc:49:af:
                    51:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:86:91:BA:D8:86:35:C1:82:B4:DF:04:C2:70:19:09:36:9B:B2:4E
            X509v3 Authority Key Identifier:
                keyid:27:C4:A6:55:2B:2A:20:F6:DF:7C:4A:54:98:CC:6F:F9:53:BA:B4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27C4A6552B2A20F6DF7C4A5498CC6FF953BAB492.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4em1rdHuYBph6NqLLubg1TQrGxzJui89w33BdN2LSVU4/0/323830343a376331303a3a2f33322d313238203d3e20323731343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c10::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:11:f1:03:76:b0:cd:72:73:52:f0:c8:b6:dd:a8:b0:ae:91:
         9a:2f:2f:05:e5:85:82:f5:d0:d7:c4:fe:29:3c:68:8f:a8:95:
         33:d3:5b:93:97:77:70:b7:08:d1:7f:7d:d1:88:ac:23:e9:96:
         be:ec:bb:2d:c2:30:e5:63:5c:98:55:e9:2f:ff:73:bf:02:f9:
         1d:a3:d4:41:c9:65:38:c1:68:da:3e:48:af:63:32:1f:e2:17:
         fb:d0:84:66:8a:44:70:34:18:d7:d6:e5:0d:9d:06:e8:a9:2c:
         09:69:37:b0:91:65:39:d6:6a:4f:d8:c2:28:f4:52:50:58:1c:
         3f:ae:b0:5d:3d:83:36:95:38:81:f3:f2:02:a9:03:d8:a4:8d:
         9f:44:a5:09:41:74:68:1b:b4:f9:b0:10:30:a4:52:ce:51:4a:
         49:61:1f:66:22:1f:8c:cc:e0:53:7a:e4:3c:85:9a:ba:6a:fd:
         ed:f8:39:32:4b:9c:63:2d:01:ca:cc:1e:30:32:19:78:4e:6a:
         28:88:0f:f8:e7:73:90:27:3d:b9:86:ac:b5:62:ed:98:a2:e2:
         c7:80:26:0c:38:db:f9:ec:ed:ef:44:8c:d0:31:03:2c:5b:f1:
         40:92:fd:0a:5d:86:54:ad:26:a7:99:ab:ad:2b:53:e5:30:9b:
         9d:81:fc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:48 2025 by rpki-client