Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a343030303a3a2f33342d3334203d3e20323639303735.roa
File:                     323830343a356631343a343030303a3a2f33342d3334203d3e20323639303735.roa (raw, json)
Hash identifier:          ZjI4oTtanZjHQSUnDe7wokLnk19PCZ7jwy7pwhswYRM=
Subject key identifier:   77:2A:D1:28:40:2D:14:D5:8E:F6:A8:CD:35:0D:93:D5:9D:EC:2E:F7
Certificate issuer:       /CN=46E0D678CE6FAC85144279EA7DE8AF4633267C1E
Certificate serial:       4CC095096D449C835DE430159907D7C8243BD8A9
Authority key identifier: 46:E0:D6:78:CE:6F:AC:85:14:42:79:EA:7D:E8:AF:46:33:26:7C:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a343030303a3a2f33342d3334203d3e20323639303735.roa
Signing time:             Wed 05 Feb 2025 12:33:14 +0000
ROA not before:           Wed 05 Feb 2025 12:28:14 +0000
ROA not after:            Wed 04 Feb 2026 12:33:14 +0000
asID:                     269075
IP address blocks:        2804:5f14:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.crl
                          rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c0:95:09:6d:44:9c:83:5d:e4:30:15:99:07:d7:c8:24:3b:d8:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46E0D678CE6FAC85144279EA7DE8AF4633267C1E
        Validity
            Not Before: Feb  5 12:28:14 2025 GMT
            Not After : Feb  4 12:33:14 2026 GMT
        Subject: CN=772AD128402D14D58EF6A8CD350D93D59DEC2EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4c:7d:70:2e:16:24:82:7e:1c:23:87:5d:56:
                    ad:1a:a0:56:c1:4b:50:96:bb:bb:07:23:5c:15:9d:
                    ef:50:5b:b4:12:ef:3f:5a:79:02:7d:98:0c:1c:4f:
                    0b:cf:1c:9f:ff:39:8b:d2:a8:39:66:55:e2:4a:b5:
                    36:a1:65:00:5c:d7:fb:52:65:6a:14:bf:c8:6f:c1:
                    84:a5:58:58:e4:f1:20:a0:23:af:a8:3a:4e:de:90:
                    ac:31:27:3c:fd:57:7f:80:3e:b3:67:73:d2:c7:63:
                    d6:62:05:72:09:4c:ae:7e:fd:4c:7e:00:9b:e4:e7:
                    48:57:9e:c7:ef:ae:45:36:ca:73:5b:69:91:b6:aa:
                    01:bf:5e:17:ba:ee:9f:04:f7:dd:fb:59:f7:65:84:
                    48:a0:52:cf:c3:3d:84:11:e9:50:f9:f3:43:52:2b:
                    83:38:9f:c0:40:e1:b7:7a:c2:62:72:03:51:42:c8:
                    26:39:e0:eb:a2:6b:f8:0c:23:a2:fc:52:93:71:cb:
                    c0:43:f3:4e:42:2f:8b:b1:18:4a:3b:67:ce:2c:8c:
                    f3:a5:5b:ca:2c:9f:8e:10:73:89:5f:b8:a2:ca:69:
                    47:d1:71:0b:c5:d1:0f:59:4f:87:06:e5:a9:02:fa:
                    7f:c3:24:c4:75:d4:d1:d8:50:b3:ae:ef:b1:d3:80:
                    68:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2A:D1:28:40:2D:14:D5:8E:F6:A8:CD:35:0D:93:D5:9D:EC:2E:F7
            X509v3 Authority Key Identifier:
                keyid:46:E0:D6:78:CE:6F:AC:85:14:42:79:EA:7D:E8:AF:46:33:26:7C:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46E0D678CE6FAC85144279EA7DE8AF4633267C1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5W7uSSxMN9HHSDKFLRZcf9QP7uP8o64aJkQyz7KkGbAp/0/323830343a356631343a343030303a3a2f33342d3334203d3e20323639303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f14:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:6c:3f:67:a6:72:0d:8c:e8:40:38:43:08:0a:ef:8c:bf:53:
         29:0a:85:c0:b4:21:d9:62:47:d2:73:de:59:11:3c:5a:3b:46:
         db:a7:34:40:3e:91:84:0b:5a:e3:90:3b:49:37:f5:15:17:48:
         3a:9b:68:71:3b:8d:d3:79:91:c3:82:82:7e:db:d5:ba:65:39:
         7c:a7:e5:ec:62:40:ff:af:76:50:d6:91:f7:c6:37:50:f5:97:
         ce:da:75:53:c5:f5:5b:72:97:65:b5:dd:ed:68:62:f5:8d:a9:
         a8:cf:19:df:32:41:d1:b3:f3:59:a7:8a:ce:b3:65:43:14:90:
         13:9f:6f:b4:b3:65:a1:52:c3:59:8a:44:98:f7:59:f6:0f:7a:
         76:be:1b:c7:15:f1:25:b4:14:a7:5b:95:27:a4:31:95:c8:b8:
         4b:56:eb:9a:94:c6:e7:b5:6c:5a:62:f1:5e:5d:62:b9:41:51:
         d9:2f:15:57:fc:3a:5f:da:15:1a:98:f7:bc:e2:6d:cd:16:23:
         b4:97:3a:5d:de:8d:7e:8b:26:04:42:2f:2e:d1:2a:ec:f8:bc:
         89:ea:55:2b:48:05:23:4b:9a:6d:d0:bd:ba:8c:fc:a4:6f:25:
         07:85:f4:02:ce:17:68:a3:e0:7c:e6:c5:f1:3d:e6:55:84:e7:
         82:69:17:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:34:10 2025 by rpki-client