Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/323830343a343761633a3a2f33322d3438203d3e20323637303730.roa
File:                     323830343a343761633a3a2f33322d3438203d3e20323637303730.roa (raw, json)
Hash identifier:          Qx1DTOa4dYHr32cudgmg/g7CeYvya8QPtWWlzTCyATs=
Subject key identifier:   CC:40:4E:6F:65:4D:E2:F8:9C:79:DA:08:16:F3:8C:CF:EA:11:4A:E3
Certificate issuer:       /CN=C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E
Certificate serial:       1FB7E525D4AFCDF91F37B47DEB010BB30C505EDE
Authority key identifier: C9:DB:61:F5:2B:F7:A3:A7:8D:0E:8F:EC:C1:CC:92:2B:47:7A:F4:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/323830343a343761633a3a2f33322d3438203d3e20323637303730.roa
Signing time:             Wed 05 Mar 2025 20:25:42 +0000
ROA not before:           Wed 05 Mar 2025 20:20:42 +0000
ROA not after:            Wed 04 Mar 2026 20:25:42 +0000
asID:                     267070
IP address blocks:        2804:47ac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.crl
                          rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b7:e5:25:d4:af:cd:f9:1f:37:b4:7d:eb:01:0b:b3:0c:50:5e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E
        Validity
            Not Before: Mar  5 20:20:42 2025 GMT
            Not After : Mar  4 20:25:42 2026 GMT
        Subject: CN=CC404E6F654DE2F89C79DA0816F38CCFEA114AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fd:26:3c:99:e7:42:b2:59:91:24:54:1c:57:
                    15:47:90:b1:95:01:26:a2:a9:38:eb:54:2f:42:f3:
                    e2:aa:33:a1:37:a6:a6:39:de:86:a3:15:d6:f9:04:
                    dd:42:03:2e:e1:5b:86:d5:fd:74:4f:af:9f:ac:60:
                    17:85:c6:d4:91:a8:69:33:c7:b0:9c:ac:cd:59:33:
                    c0:d2:68:ad:29:9e:c1:99:b7:0d:ce:0e:43:d0:d6:
                    78:2b:e1:9b:42:40:b7:e9:45:ae:4a:62:89:af:14:
                    5d:d0:8f:4a:e7:99:66:b4:60:4a:21:65:4f:f6:d4:
                    d3:77:3c:b0:b4:41:41:10:95:f3:74:68:75:9d:29:
                    fd:91:67:0e:8f:fc:7a:ad:14:d9:8b:7b:05:e3:b6:
                    e5:41:91:d3:67:26:14:04:76:a2:30:48:09:a3:09:
                    3e:68:06:96:fa:2e:4b:cd:34:8d:42:4c:ed:3a:7c:
                    b4:62:30:16:0f:ac:9d:13:a7:29:cc:0a:0c:3a:82:
                    9f:85:39:b2:da:4b:dd:ae:41:6e:d2:7a:2d:36:e1:
                    bc:83:06:00:39:4a:55:f2:26:4e:ee:9a:e1:a1:d0:
                    be:7b:81:48:b7:5f:cd:a4:9f:ce:4d:af:f6:c6:9c:
                    7d:3f:c8:f5:45:be:d0:e5:a5:3c:85:98:d7:bb:6f:
                    af:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:40:4E:6F:65:4D:E2:F8:9C:79:DA:08:16:F3:8C:CF:EA:11:4A:E3
            X509v3 Authority Key Identifier:
                keyid:C9:DB:61:F5:2B:F7:A3:A7:8D:0E:8F:EC:C1:CC:92:2B:47:7A:F4:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB61F52BF7A3A78D0E8FECC1CC922B477AF43E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51YpTTTZpCYYCrCtjLVpK5vsXTAazDDsNxibGSdRxBgK/1/323830343a343761633a3a2f33322d3438203d3e20323637303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:54:99:ee:98:0f:39:d0:17:18:d3:ef:07:65:79:da:00:
         22:83:19:84:5e:37:b7:66:32:c6:0d:f4:d3:78:fa:88:c8:96:
         c3:6e:c5:c7:ac:81:97:2d:af:f7:34:2f:20:1e:99:c1:dd:ac:
         67:49:ae:99:db:6e:9c:cd:22:8d:b4:54:3a:76:04:27:86:2a:
         8e:51:0a:a4:f5:c4:5e:22:9c:05:b1:50:68:27:12:b0:96:29:
         c0:da:d2:b7:c3:b4:f0:fa:7c:a2:d5:a1:ca:ef:c9:c3:44:0d:
         cc:59:36:c6:29:ec:1a:98:77:bb:45:2a:fc:51:d9:8b:fa:70:
         dd:1b:59:b4:ca:5a:45:b9:dd:f7:82:fe:bf:f1:26:24:ad:36:
         09:b6:6c:9c:81:56:48:65:66:02:fe:2f:b3:23:6c:7c:51:11:
         9e:37:2e:57:a7:2b:5c:15:59:1b:a8:39:5f:f0:ac:0c:93:36:
         bc:94:2f:1f:38:2b:89:ba:d2:85:d0:33:a5:84:11:fd:34:c2:
         24:86:ac:b4:76:0d:48:1f:23:cb:7d:78:00:5a:8e:09:32:59:
         cc:39:26:9c:f1:1b:29:20:bc:b9:08:ac:d6:44:17:86:12:ef:
         1d:4d:92:20:69:3b:aa:fa:e2:2d:15:59:ee:68:25:1a:1f:e5:
         4b:66:99:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:47:59 2025 by rpki-client