Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/323830343a353133633a3a2f33322d313238203d3e20323638343339.roa
File:                     323830343a353133633a3a2f33322d313238203d3e20323638343339.roa (raw, json)
Hash identifier:          oSiPasVJgzQOXTv3RQx4cITchlEzwDdr8/6o725jqPw=
Subject key identifier:   B7:1C:3B:67:DE:69:B4:4C:24:7E:EE:A4:B1:D8:87:01:8E:79:9F:C1
Certificate issuer:       /CN=97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF
Certificate serial:       18D77839C54F06C40A064ED524931CB037EB78B4
Authority key identifier: 97:07:7A:C3:40:D1:A4:BF:1F:11:1F:65:68:A2:BD:C8:5C:B6:A5:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/323830343a353133633a3a2f33322d313238203d3e20323638343339.roa
Signing time:             Wed 08 May 2024 19:52:01 +0000
ROA not before:           Wed 08 May 2024 19:47:01 +0000
ROA not after:            Wed 07 May 2025 19:52:01 +0000
asID:                     268439
IP address blocks:        2804:513c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.crl
                          rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Mar 2025 21:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d7:78:39:c5:4f:06:c4:0a:06:4e:d5:24:93:1c:b0:37:eb:78:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF
        Validity
            Not Before: May  8 19:47:01 2024 GMT
            Not After : May  7 19:52:01 2025 GMT
        Subject: CN=B71C3B67DE69B44C247EEEA4B1D887018E799FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:f0:65:81:3f:61:3b:66:d1:e5:08:b0:5d:
                    a2:0c:15:3c:bf:0b:f4:47:ee:c2:f4:79:f5:ca:2a:
                    0b:dd:ac:6a:30:94:b6:81:0e:91:c2:08:3c:25:52:
                    84:16:b1:fa:d8:90:4e:ef:7c:eb:3c:05:98:18:95:
                    fa:35:0d:3d:ce:9e:b4:b5:88:bb:fb:85:f1:00:dd:
                    fa:72:ea:fe:47:78:0e:b2:99:92:5e:b0:d6:8c:2f:
                    9e:a8:c4:21:be:17:19:79:7b:28:85:63:20:4c:6d:
                    9f:b1:36:af:7a:84:c4:38:14:4a:2f:51:84:39:f9:
                    24:3f:b3:4a:21:65:47:7b:29:3f:d8:7e:7b:76:e3:
                    03:31:a4:27:db:2d:25:0f:16:ea:ee:86:42:54:8d:
                    16:18:99:ed:19:2c:d7:82:40:ac:8b:65:1a:34:20:
                    7b:ad:6a:0d:71:05:b6:78:61:80:ee:26:68:81:74:
                    8e:23:88:99:37:db:99:50:ff:ea:53:e8:37:25:80:
                    d6:97:29:75:20:68:b4:b5:e8:6e:5d:8b:b3:08:d8:
                    91:af:10:a8:cf:46:b1:b3:e8:1f:74:7d:0c:bc:81:
                    78:48:80:6a:1c:5b:43:35:7a:68:d9:e8:3b:66:16:
                    ce:8b:2a:e5:bb:02:d5:03:26:ee:20:69:f7:17:6e:
                    46:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1C:3B:67:DE:69:B4:4C:24:7E:EE:A4:B1:D8:87:01:8E:79:9F:C1
            X509v3 Authority Key Identifier:
                keyid:97:07:7A:C3:40:D1:A4:BF:1F:11:1F:65:68:A2:BD:C8:5C:B6:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97077AC340D1A4BF1F111F6568A2BDC85CB6A5CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/323830343a353133633a3a2f33322d313238203d3e20323638343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:513c::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:26:53:b1:31:04:85:02:0c:cd:26:5d:c1:7b:4c:a8:5b:15:
         77:ff:24:f2:bf:de:ac:6d:77:9d:71:88:08:67:dd:eb:dc:b7:
         c8:c0:22:bd:5c:9b:1f:95:73:5d:5c:14:d9:e8:44:ef:eb:0f:
         33:90:05:b3:da:31:18:09:dd:0c:d6:74:b6:9c:91:2c:ca:40:
         e0:c7:99:bd:3d:52:c3:71:0b:ce:db:2b:af:45:b7:b6:4a:1d:
         00:b5:44:27:8e:01:7a:58:e2:f8:b5:6c:ad:08:c4:50:c6:26:
         78:bc:48:8e:f8:68:89:9a:81:ed:f7:e8:4d:d3:89:61:7c:4d:
         ba:6b:30:f8:38:2e:81:92:52:d0:a7:4f:c7:4a:99:5e:ed:5f:
         65:c7:17:46:91:40:a0:98:c3:16:50:60:fc:61:41:39:07:53:
         5a:6d:e1:52:6c:6e:68:97:ba:7e:ca:21:0d:8f:2d:91:e7:83:
         a7:60:ba:c1:06:6f:b1:15:19:1d:55:71:5b:73:c2:44:0d:da:
         0d:a2:cd:52:fa:3c:66:4a:11:be:29:da:f3:35:ae:f0:d7:0a:
         22:e9:9d:24:9f:89:9b:94:cc:c9:ea:ed:60:0c:d8:ef:fe:70:
         98:1c:5c:e6:0e:d6:ca:e7:d1:e8:b2:8d:55:bc:92:23:8e:7a:
         f0:ff:a4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:44:03 2025 by rpki-client