Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/323830343a6566343a3a2f33322d3438203d3e203238363432.roa
File:                     323830343a6566343a3a2f33322d3438203d3e203238363432.roa (raw, json)
Hash identifier:          JzjGQK1M4rtVwprTOjmnKYKUuAzDPuYVn8oR4j2kpmA=
Subject key identifier:   7A:7E:42:9C:CD:D9:FE:AA:3E:48:F0:29:06:B2:5A:4E:39:B8:7E:80
Certificate issuer:       /CN=66335F04863CA1159D16D18E655231764F6FB821
Certificate serial:       62E90164DD7877F37DE3A9AD0D519258FEB315E9
Authority key identifier: 66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/323830343a6566343a3a2f33322d3438203d3e203238363432.roa
Signing time:             Fri 07 Mar 2025 01:25:00 +0000
ROA not before:           Fri 07 Mar 2025 01:20:00 +0000
ROA not after:            Fri 06 Mar 2026 01:25:00 +0000
asID:                     28642
IP address blocks:        2804:ef4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.crl
                          rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 12:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e9:01:64:dd:78:77:f3:7d:e3:a9:ad:0d:51:92:58:fe:b3:15:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66335F04863CA1159D16D18E655231764F6FB821
        Validity
            Not Before: Mar  7 01:20:00 2025 GMT
            Not After : Mar  6 01:25:00 2026 GMT
        Subject: CN=7A7E429CCDD9FEAA3E48F02906B25A4E39B87E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:3c:3a:28:18:d7:e6:64:f2:59:33:2e:06:
                    83:95:ad:cc:cf:e0:0b:ee:af:b2:75:53:41:e2:6c:
                    2f:11:da:49:35:30:21:fe:7d:59:c4:60:51:dd:1f:
                    a5:2c:a0:a9:4b:51:e7:ca:bc:d7:a9:1a:cd:b1:e3:
                    63:d3:78:c3:27:1a:20:3d:47:8a:95:94:df:b4:d2:
                    5e:39:e3:4c:a0:5a:29:8d:5a:bd:bb:f2:fd:65:86:
                    d4:49:4e:c5:15:16:7c:ac:7b:7c:b1:a5:3a:fb:9b:
                    f9:5d:75:1c:fe:1a:13:1b:52:c9:e2:e0:a3:d7:61:
                    db:3d:d9:22:21:3f:0a:fe:19:aa:d4:dd:a1:81:8c:
                    8a:f7:a3:73:87:5f:b0:a7:11:d3:d8:ae:dc:24:9e:
                    57:42:2d:e8:3e:f3:dc:54:aa:23:50:5b:86:d9:00:
                    73:5f:95:3b:d4:ac:0a:18:80:d4:32:e7:7d:4d:bf:
                    5e:d2:27:7e:6d:c3:bc:b8:44:d4:74:46:4e:4a:0d:
                    52:ff:6d:36:22:7e:f3:a1:88:eb:18:fa:65:d3:14:
                    95:fa:64:90:1d:ff:96:74:b4:ca:36:ed:f2:db:59:
                    2d:24:ff:66:89:27:0b:80:ff:e9:b5:b0:2a:8f:66:
                    c3:fe:75:8c:4b:b9:06:52:2d:08:73:5c:6a:9a:cb:
                    84:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7E:42:9C:CD:D9:FE:AA:3E:48:F0:29:06:B2:5A:4E:39:B8:7E:80
            X509v3 Authority Key Identifier:
                keyid:66:33:5F:04:86:3C:A1:15:9D:16:D1:8E:65:52:31:76:4F:6F:B8:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/66335F04863CA1159D16D18E655231764F6FB821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66335F04863CA1159D16D18E655231764F6FB821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XQvGN2XZmWtoGxkn3sRsnXXCS6SxZHFQrx3hGa69EAd/1/323830343a6566343a3a2f33322d3438203d3e203238363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ef4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:dc:19:b1:02:94:83:c9:6c:e5:15:9c:e8:8a:ee:f2:51:c6:
         1b:5e:f4:c8:b7:4b:20:1b:d0:5d:49:06:ee:24:32:e3:76:53:
         88:9f:cb:e5:91:0f:90:97:b4:be:5e:ad:3c:47:62:7d:f6:ce:
         f8:72:82:f3:c8:e0:55:c6:5f:83:c9:12:4e:07:ef:e6:c2:89:
         44:46:36:30:a1:48:79:ea:1f:ce:60:22:af:d9:00:d0:d5:e3:
         bc:ad:5c:78:39:9b:3a:6a:8b:f5:9a:13:3a:c0:fc:69:60:bd:
         ba:06:50:a8:18:7d:c6:eb:9f:de:30:41:77:ee:83:2f:0e:bf:
         cf:5b:0d:3c:af:34:07:d2:41:62:c6:31:3f:81:1b:3a:30:1b:
         3b:53:2c:37:42:fb:a7:e8:44:c2:b5:a4:13:4c:5c:1f:9a:14:
         01:08:e7:e4:f9:d7:36:df:32:36:bd:75:ad:2c:d5:28:62:b1:
         f5:99:2f:52:7d:04:2c:ab:be:12:9b:87:84:d1:a3:d0:51:a4:
         92:f4:88:fb:0c:52:46:72:35:6b:ba:37:82:32:60:09:8d:4d:
         ea:5f:7a:02:aa:a6:ba:6a:3e:18:53:64:05:e7:ab:e9:b1:de:
         11:d1:9d:a4:2d:20:6c:2d:83:97:24:0b:6a:92:c9:9d:36:c7:
         b9:df:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:31:36 2025 by rpki-client