Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/323830343a343664303a3a2f33322d313238203d3e20323637303133.roa
File:                     323830343a343664303a3a2f33322d313238203d3e20323637303133.roa (raw, json)
Hash identifier:          kTr94xDUZ+WRd76umny03lWFerpjLzXLcja7/Ad0/gM=
Subject key identifier:   01:DA:41:59:56:B8:F1:7C:DC:9F:7C:38:7B:55:50:C4:D9:6C:4A:50
Certificate issuer:       /CN=1C4D72EE314EFB7CE350AF052C58D3C8818D7575
Certificate serial:       0E5185E788F1B76B945787B933C3837E1EF61A37
Authority key identifier: 1C:4D:72:EE:31:4E:FB:7C:E3:50:AF:05:2C:58:D3:C8:81:8D:75:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/323830343a343664303a3a2f33322d313238203d3e20323637303133.roa
Signing time:             Wed 09 Apr 2025 20:44:12 +0000
ROA not before:           Wed 09 Apr 2025 20:39:12 +0000
ROA not after:            Wed 08 Apr 2026 20:44:12 +0000
asID:                     267013
IP address blocks:        2804:46d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.crl
                          rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 04:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:51:85:e7:88:f1:b7:6b:94:57:87:b9:33:c3:83:7e:1e:f6:1a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4D72EE314EFB7CE350AF052C58D3C8818D7575
        Validity
            Not Before: Apr  9 20:39:12 2025 GMT
            Not After : Apr  8 20:44:12 2026 GMT
        Subject: CN=01DA415956B8F17CDC9F7C387B5550C4D96C4A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a9:58:12:6a:0a:98:62:d0:a2:a3:58:c8:a6:
                    e7:d1:0a:93:d6:96:68:10:9f:79:82:88:50:ef:a3:
                    8a:4e:f5:e7:47:9f:c7:de:be:43:e6:be:b0:79:86:
                    58:0b:a7:86:37:78:52:52:ec:50:98:de:51:66:3e:
                    c0:fb:b0:3e:90:ce:60:14:4d:72:7d:b3:3f:aa:35:
                    08:db:28:94:e0:c0:dd:f3:fe:94:27:10:10:4f:28:
                    73:5a:2b:9a:cd:20:04:5e:77:9c:53:35:fc:04:28:
                    cc:4a:47:fe:d4:04:91:96:0a:34:ea:44:e4:30:11:
                    46:1d:0b:43:54:61:85:69:4b:d2:13:81:bb:fc:8e:
                    ca:1c:cb:35:4d:c0:b7:f6:07:f1:88:45:02:61:62:
                    90:5d:44:37:f3:cc:25:93:0d:03:d3:96:6a:2c:9f:
                    16:e9:55:40:4b:7d:26:96:8d:75:cd:8a:52:b9:e4:
                    52:7c:2f:79:24:f6:75:28:d5:e3:ea:ac:25:ca:e1:
                    25:65:ed:cf:1b:4a:4e:2a:f7:c0:ea:59:27:c8:af:
                    01:6e:5b:a5:dc:73:34:48:50:4f:de:a5:8f:ea:19:
                    cc:fa:47:ce:28:ec:bc:5a:d4:c8:ac:20:72:85:b0:
                    a8:71:b9:c4:d4:86:83:47:b4:7a:49:e6:5d:5b:62:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DA:41:59:56:B8:F1:7C:DC:9F:7C:38:7B:55:50:C4:D9:6C:4A:50
            X509v3 Authority Key Identifier:
                keyid:1C:4D:72:EE:31:4E:FB:7C:E3:50:AF:05:2C:58:D3:C8:81:8D:75:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C4D72EE314EFB7CE350AF052C58D3C8818D7575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4humeVeEjxFa7LbCXbrWjPJDYMvcWZ27e6Jbohhfsid3/0/323830343a343664303a3a2f33322d313238203d3e20323637303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:01:9f:6d:5d:b6:ee:b6:25:3c:b8:87:98:38:e9:b4:35:a4:
         f5:0b:27:02:55:05:8e:ec:9a:7a:de:4e:a6:e0:5a:6f:35:ee:
         f7:e9:75:9f:8c:6f:53:0b:72:01:86:71:43:0e:bb:73:2d:51:
         d4:0f:e8:fa:9d:4e:31:c6:75:37:ef:2a:da:e2:52:2c:16:89:
         c0:e4:f9:ad:d5:f5:6b:16:c8:7d:b8:dc:5b:12:cf:e4:09:c4:
         66:86:c7:cc:39:02:24:c5:dc:a7:4f:15:47:52:06:d6:ac:df:
         f6:25:a8:61:ae:25:65:7e:82:00:fd:94:30:e5:e2:c6:79:d5:
         cd:e5:e5:69:4a:32:33:50:4c:b8:d6:f4:5e:4d:3a:6e:c4:5e:
         98:a7:30:55:31:2b:06:02:dc:cd:7e:9c:f9:a2:75:2c:cc:db:
         49:f3:dc:f3:9a:43:fb:a8:e4:0f:bb:26:3b:50:f2:5f:0c:a5:
         02:09:5d:16:fe:3a:05:1a:09:d4:1f:43:94:7e:31:d5:24:44:
         ba:2d:4a:d1:c6:f7:30:d8:4a:77:53:c8:c4:51:fa:be:2f:46:
         8d:cd:43:a2:72:84:94:4a:2c:fd:4e:2b:ef:c8:d0:29:2b:f2:
         04:ee:13:74:33:a3:b0:60:22:04:0d:50:da:d9:2a:88:22:0b:
         c3:eb:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:12:09 2025 by rpki-client