Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/323830343a313964383a3a2f33322d3335203d3e203631383232.roa
File:                     323830343a313964383a3a2f33322d3335203d3e203631383232.roa (raw, json)
Hash identifier:          1jEmiR0p4M2PCgSwG4POl2YOH1WhDRLajzyy+1C0mzc=
Subject key identifier:   A2:40:74:E3:79:84:C7:14:30:63:C8:8C:81:C0:14:A7:92:DF:B9:34
Certificate issuer:       /CN=D83644536B842CD15686D699796D2336D6F94682
Certificate serial:       2BEAB6F62C925FDCC5CB0D7BC22D2AC30656DE8B
Authority key identifier: D8:36:44:53:6B:84:2C:D1:56:86:D6:99:79:6D:23:36:D6:F9:46:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/323830343a313964383a3a2f33322d3335203d3e203631383232.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     61822
IP address blocks:        2804:19d8::/32 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.crl
                          rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ea:b6:f6:2c:92:5f:dc:c5:cb:0d:7b:c2:2d:2a:c3:06:56:de:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D83644536B842CD15686D699796D2336D6F94682
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2f:49:1f:dd:ed:a6:29:84:97:9f:51:77:8b:
                    9d:89:d5:fd:c5:65:37:2b:7b:77:f0:ca:db:6b:24:
                    0f:da:d1:e2:62:29:73:d0:5a:7d:c1:10:c4:e3:70:
                    c5:ed:5a:d0:66:b1:ba:c1:d6:fd:22:88:25:4c:63:
                    45:9c:9b:69:c0:cb:56:ca:b4:39:39:46:53:9d:82:
                    dd:66:84:89:3d:47:07:5c:0b:93:30:00:5a:1c:27:
                    da:c6:b0:5b:aa:b6:25:f5:5a:1f:ea:13:d5:12:16:
                    47:0c:2b:99:e7:1b:ff:01:89:a8:e0:45:61:e6:cd:
                    e2:e9:9b:57:bf:7c:88:1d:f2:ef:10:12:fd:08:ba:
                    d8:0f:88:72:91:dd:18:95:96:44:30:a6:df:25:43:
                    f7:7e:e6:91:af:13:17:e6:3e:89:24:18:1d:89:45:
                    91:d6:75:65:50:b4:c5:20:f1:cb:e0:98:f8:9f:81:
                    78:38:85:5b:c8:16:7a:f3:41:e1:36:16:a9:ca:cd:
                    cf:e7:32:45:06:fc:90:39:5a:2a:76:f1:e0:22:67:
                    59:aa:36:f4:39:5b:84:b6:a8:a2:2f:2b:98:5c:5d:
                    2c:3c:b1:e2:b6:49:e4:07:8b:e3:71:af:0e:5b:e1:
                    c4:37:07:58:6d:e8:77:8e:0a:d9:20:67:db:fa:48:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:40:74:E3:79:84:C7:14:30:63:C8:8C:81:C0:14:A7:92:DF:B9:34
            X509v3 Authority Key Identifier:
                keyid:D8:36:44:53:6B:84:2C:D1:56:86:D6:99:79:6D:23:36:D6:F9:46:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/D83644536B842CD15686D699796D2336D6F94682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D83644536B842CD15686D699796D2336D6F94682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4niNMbKxUFqTvuiNomjnEYU2VgEVtYEDaMS7H23Sgqg8/1/323830343a313964383a3a2f33322d3335203d3e203631383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:19d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:ef:d3:8d:2a:5a:92:c6:6e:49:0e:01:c2:6e:ec:b4:27:a0:
         d6:5c:bd:96:cd:67:fd:7b:0d:09:7c:64:38:6c:2c:fa:bc:d5:
         64:61:a5:04:95:f8:7d:77:8d:db:92:13:c2:b4:48:c4:6c:5f:
         09:04:eb:2c:60:10:fc:43:1b:28:33:88:74:21:c8:e7:3b:f9:
         c7:96:d7:1c:e6:1b:a7:3a:33:dd:d0:2f:ab:62:19:86:69:c4:
         b0:be:08:ce:76:b6:82:d6:bc:f7:80:16:1a:1a:19:73:d9:da:
         ec:62:2a:bb:89:93:63:2f:9a:81:2c:e7:7c:4a:3e:9f:d6:75:
         22:c9:e3:10:7c:55:8a:44:f0:72:6a:f1:1e:1d:02:eb:7d:e1:
         e2:b5:37:7a:33:f0:9c:d7:eb:96:45:a3:98:67:83:ed:a0:26:
         50:07:23:c2:cb:7d:be:1d:3b:3b:17:05:8a:83:c7:34:df:e8:
         75:0d:d9:35:7a:ab:69:3e:41:41:a0:4b:eb:14:8a:5d:81:e4:
         88:6f:56:a8:67:04:f4:f3:6f:91:9a:9a:a1:76:f9:91:76:a8:
         40:cf:97:1a:81:a2:01:10:e9:91:16:22:93:b1:38:96:d5:1d:
         05:2e:ee:d7:17:da:f9:96:d6:e0:1a:97:b9:94:7b:5b:bf:d7:
         72:13:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:57:40 2025 by rpki-client