Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/323830343a346538383a3a2f33322d3332203d3e20323638323637.roa
File:                     323830343a346538383a3a2f33322d3332203d3e20323638323637.roa (raw, json)
Hash identifier:          yetyCb5q23xZFnohcrDpw2Ovdn2gIbGM3d+DRRluBVo=
Subject key identifier:   B7:86:02:4D:65:79:29:2A:71:16:25:D4:70:14:90:CA:F3:F8:B0:BC
Certificate issuer:       /CN=E0E56E765738AF9709155514C8A4C6494D4155B3
Certificate serial:       1CB7E97E5295A2F0FFBF2F3D7CBF8C4F82934F55
Authority key identifier: E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/323830343a346538383a3a2f33322d3332203d3e20323638323637.roa
Signing time:             Mon 23 Dec 2024 15:43:05 +0000
ROA not before:           Mon 23 Dec 2024 15:38:05 +0000
ROA not after:            Mon 22 Dec 2025 15:43:05 +0000
asID:                     268267
IP address blocks:        2804:4e88::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl
                          rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 06:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b7:e9:7e:52:95:a2:f0:ff:bf:2f:3d:7c:bf:8c:4f:82:93:4f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0E56E765738AF9709155514C8A4C6494D4155B3
        Validity
            Not Before: Dec 23 15:38:05 2024 GMT
            Not After : Dec 22 15:43:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:28:ca:1f:45:1c:f9:f4:bf:4f:c9:7c:6e:57:
                    d2:72:0f:dc:e6:31:34:35:ca:03:82:9b:be:63:66:
                    73:21:5c:fc:93:ac:9e:e4:16:8a:54:96:b1:15:dd:
                    0d:4b:0b:d3:0a:9b:45:2f:a5:aa:67:71:ad:3d:b2:
                    fe:0b:1c:c6:e2:15:55:8e:b6:db:e8:0b:56:05:ce:
                    c2:c0:8f:b8:e9:e5:83:33:fb:23:58:19:96:80:35:
                    ae:52:06:56:12:a0:39:8d:69:f8:eb:c9:56:00:7d:
                    c4:1b:50:b0:02:e5:21:3a:19:30:eb:0c:9b:82:6f:
                    95:a9:76:a5:ca:73:24:ab:61:54:7d:f4:71:2e:8b:
                    ad:6a:ea:b7:e2:30:bc:3e:b6:b9:93:ab:94:31:c4:
                    aa:4c:b4:45:a1:8c:13:6b:fb:b6:4f:a0:47:6d:3c:
                    a3:ea:06:f6:a3:e1:2c:15:96:12:5e:5a:a5:90:4d:
                    d4:d2:d2:c6:ff:ae:5e:df:4b:12:52:42:e6:69:a3:
                    dd:0a:33:8f:97:8e:a9:c6:5c:9a:0f:d3:33:38:89:
                    1b:38:e6:73:46:46:50:4e:16:9a:ee:1c:62:80:15:
                    17:09:4f:9b:fd:f4:58:db:a2:b1:dc:f9:54:40:e3:
                    1d:92:37:58:e7:74:ae:51:fe:48:1f:d4:6b:81:8b:
                    22:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:86:02:4D:65:79:29:2A:71:16:25:D4:70:14:90:CA:F3:F8:B0:BC
            X509v3 Authority Key Identifier:
                keyid:E0:E5:6E:76:57:38:AF:97:09:15:55:14:C8:A4:C6:49:4D:41:55:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/E0E56E765738AF9709155514C8A4C6494D4155B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E0E56E765738AF9709155514C8A4C6494D4155B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/1/323830343a346538383a3a2f33322d3332203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e88::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:18:04:7a:95:2d:6a:e8:55:69:cb:e7:8b:49:01:d3:a1:27:
         6a:99:ed:88:26:fe:38:ee:ac:d8:cf:2c:c7:ed:2e:9c:82:79:
         33:dd:3b:63:35:8a:07:16:86:dc:ea:7d:5f:2f:01:53:88:c2:
         f3:07:a2:f3:1f:ac:a8:cd:e4:75:09:ff:ff:9e:91:8f:88:fe:
         86:26:cc:2b:b4:ef:62:73:8b:f7:84:31:93:dc:0d:64:2d:9c:
         e2:bb:41:48:40:0f:88:f0:15:4f:d9:06:b9:18:17:a0:d5:f6:
         5a:7b:a3:4e:43:df:fc:86:55:d8:3c:09:77:c7:79:06:41:28:
         fa:09:24:f8:01:5d:77:2c:08:de:35:2a:1e:e4:2c:e0:4c:5a:
         4e:93:5a:70:be:c2:bc:f1:d2:51:05:e1:6b:6a:5b:b0:f2:c2:
         b8:3f:e6:4c:c0:d8:17:47:55:c4:a6:d8:e2:42:93:da:dd:48:
         86:ec:12:c9:83:eb:2f:06:5c:d7:ab:53:31:1c:1c:1e:be:a5:
         51:10:eb:a9:9c:19:48:aa:2a:08:dd:a2:e8:4f:16:fb:d3:ca:
         29:9b:c8:d0:17:51:34:7f:eb:8b:dd:3f:1e:9c:98:2a:3c:33:
         f4:55:d0:78:61:af:56:e8:94:4d:e8:18:5b:44:f6:55:88:2a:
         6f:cf:9d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:14 2025 by rpki-client