Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3a2f33372d3337203d3e20323632343234.roa
File:                     323830343a363136343a3a2f33372d3337203d3e20323632343234.roa (raw, json)
Hash identifier:          crGJfv0anZJnZ2fOY6HOjqhZxkGa5XJDBC+gRFMCYpY=
Subject key identifier:   3E:26:07:EB:CA:4C:2C:E3:FA:50:8C:CD:6B:DB:C8:89:3E:75:9A:24
Certificate issuer:       /CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
Certificate serial:       48DA6290E3BACB4CE0E8ED1ECCDD6246B54FF499
Authority key identifier: 75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3a2f33372d3337203d3e20323632343234.roa
Signing time:             Wed 16 Apr 2025 14:25:42 +0000
ROA not before:           Wed 16 Apr 2025 14:20:42 +0000
ROA not after:            Wed 15 Apr 2026 14:25:42 +0000
asID:                     262424
IP address blocks:        2804:6164::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 23:26:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:da:62:90:e3:ba:cb:4c:e0:e8:ed:1e:cc:dd:62:46:b5:4f:f4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759EC53097E7248C408C3D1A6422DB85BB4470A3
        Validity
            Not Before: Apr 16 14:20:42 2025 GMT
            Not After : Apr 15 14:25:42 2026 GMT
        Subject: CN=3E2607EBCA4C2CE3FA508CCD6BDBC8893E759A24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b1:17:d4:71:ff:0f:15:e7:2d:f0:0f:92:41:
                    f7:6c:8e:36:6e:32:94:6a:95:aa:64:2e:5e:81:3e:
                    74:60:14:84:7e:4e:ba:f6:7d:d6:0a:c5:a8:cd:ff:
                    3e:45:25:4b:97:bd:e1:c0:98:12:af:12:7a:3b:d7:
                    d3:04:ef:81:ff:d9:08:11:3b:21:2b:65:a6:ea:aa:
                    48:19:64:44:51:34:26:e2:5d:86:9b:63:34:79:bf:
                    55:6f:d7:7b:f5:15:4e:24:16:1a:4a:50:6d:37:24:
                    5f:29:e2:46:7e:17:4a:14:f5:97:c4:f7:68:7a:72:
                    72:fd:ed:eb:12:b7:c1:32:0f:98:65:95:cd:89:90:
                    e4:fb:80:f1:c4:99:73:68:b9:f4:b3:5b:a9:94:9d:
                    e2:cd:92:02:27:15:aa:bd:95:43:a6:80:fe:80:9d:
                    fb:8f:51:2b:32:b4:5c:3a:d9:dc:a5:5d:64:ce:6c:
                    1e:84:d2:69:21:75:61:b8:db:94:52:3a:6a:b5:6a:
                    13:c7:93:72:c6:81:77:4a:ca:8a:59:88:44:ff:04:
                    fa:e1:d4:cf:e2:5c:26:de:1a:1f:6e:a8:2d:ff:34:
                    a0:1a:3f:f3:52:39:44:0f:5f:f2:91:7b:be:36:e7:
                    75:63:93:b5:5d:5e:2b:bb:8d:49:d3:5b:f1:18:46:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:26:07:EB:CA:4C:2C:E3:FA:50:8C:CD:6B:DB:C8:89:3E:75:9A:24
            X509v3 Authority Key Identifier:
                keyid:75:9E:C5:30:97:E7:24:8C:40:8C:3D:1A:64:22:DB:85:BB:44:70:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/759EC53097E7248C408C3D1A6422DB85BB4470A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/759EC53097E7248C408C3D1A6422DB85BB4470A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/323830343a363136343a3a2f33372d3337203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6164::/37

    Signature Algorithm: sha256WithRSAEncryption
         6f:67:d0:28:77:37:b6:de:f9:57:4d:34:a1:f2:ed:19:c8:d8:
         fa:3b:38:99:2f:5d:b6:5e:80:91:2b:cc:88:1d:55:5a:db:46:
         53:ad:a0:78:f0:95:0d:92:ba:af:fa:0f:45:af:3e:77:d0:0b:
         9e:b4:0f:79:5f:65:12:b0:0a:73:4e:d8:14:ff:cb:cb:fa:ed:
         be:26:53:2a:15:4d:1a:11:e5:32:d1:d0:68:47:3d:a4:b6:32:
         70:b9:62:10:8f:50:ae:66:3b:5e:ac:b4:35:61:9a:89:62:8a:
         ea:5a:84:9d:15:7d:db:e4:ea:c2:79:36:6c:10:48:ce:39:41:
         96:b3:be:1d:33:90:35:1e:4e:79:a8:a1:85:f6:6c:08:1b:6e:
         92:b0:4c:29:1e:2a:0e:8c:23:67:92:bf:34:e0:51:1b:02:d7:
         77:22:bc:5e:a1:b7:21:2d:d0:3c:35:69:7d:b7:02:82:54:df:
         92:e7:11:34:6f:72:89:6a:0b:d2:6d:86:a6:44:1c:00:f0:c1:
         1d:7b:ba:05:8e:af:63:7b:39:48:b2:11:78:6b:5f:75:8a:34:
         0c:48:88:93:1a:0d:6f:9c:a4:0e:4d:b7:05:93:22:5d:44:54:
         c5:32:74:66:c8:1b:9d:d3:e0:d2:1a:af:8f:50:50:69:c4:54:
         0f:85:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:32:17 2025 by rpki-client