Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/323830343a326663633a3a2f33322d313238203d3e20323634393132.roa
File:                     323830343a326663633a3a2f33322d313238203d3e20323634393132.roa (raw, json)
Hash identifier:          Bjl8br3vFBSlFT3tbWGmmMhH9xDDhVw6vdzMuzsf+Dc=
Subject key identifier:   A4:EC:C3:C0:21:3B:76:C1:F6:31:91:83:0D:D5:C0:B9:95:F1:B5:11
Certificate issuer:       /CN=843E46AA209E75F9302824E3938E138395B4B3A9
Certificate serial:       49E2D8873C7B87D1F1D7F29AC4F062C2844A87C1
Authority key identifier: 84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/323830343a326663633a3a2f33322d313238203d3e20323634393132.roa
Signing time:             Mon 03 Feb 2025 21:37:54 +0000
ROA not before:           Mon 03 Feb 2025 21:32:54 +0000
ROA not after:            Mon 02 Feb 2026 21:37:54 +0000
asID:                     264912
IP address blocks:        2804:2fcc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl
                          rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e2:d8:87:3c:7b:87:d1:f1:d7:f2:9a:c4:f0:62:c2:84:4a:87:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843E46AA209E75F9302824E3938E138395B4B3A9
        Validity
            Not Before: Feb  3 21:32:54 2025 GMT
            Not After : Feb  2 21:37:54 2026 GMT
        Subject: CN=A4ECC3C0213B76C1F63191830DD5C0B995F1B511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:21:57:c7:6c:b3:10:3f:7f:98:1d:1f:83:e3:
                    b9:5f:0f:27:04:25:90:d8:b1:1c:9b:76:41:05:69:
                    82:0f:50:c7:e3:48:81:fc:5d:20:b1:25:9e:87:2e:
                    4a:b5:ac:18:5b:65:72:e1:fa:50:7b:e2:fb:b0:8d:
                    d5:67:c0:93:67:ad:7a:4d:4c:96:d4:02:ac:04:44:
                    4e:36:39:7b:71:4f:b4:39:0d:8a:55:f4:52:17:24:
                    86:10:a0:e1:c7:61:0d:1f:9f:e1:3b:2e:4b:c3:52:
                    79:18:50:25:2a:26:8d:6c:30:c8:47:d0:3d:57:bd:
                    1d:02:6b:eb:f9:bd:95:69:d8:ce:3d:6e:5e:ce:c3:
                    cb:b3:98:b4:69:68:aa:ad:c4:19:c8:52:fe:10:c3:
                    23:d4:89:72:75:5b:63:cb:f3:6e:f8:33:23:57:e0:
                    68:e5:35:1c:8f:d8:bd:0e:81:fd:95:92:6f:64:9f:
                    6b:8e:4b:40:2a:2b:6a:41:4a:2b:29:ab:e6:97:84:
                    b9:cc:00:32:f4:49:0b:76:28:36:5f:82:1f:13:f0:
                    d2:ef:bb:98:ad:e4:53:6d:15:e2:b2:64:9e:99:91:
                    2d:7c:d1:c4:ec:96:bd:a7:32:27:16:a3:55:3b:b7:
                    70:22:dd:68:9b:02:1e:88:99:95:cf:35:3c:08:23:
                    d8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EC:C3:C0:21:3B:76:C1:F6:31:91:83:0D:D5:C0:B9:95:F1:B5:11
            X509v3 Authority Key Identifier:
                keyid:84:3E:46:AA:20:9E:75:F9:30:28:24:E3:93:8E:13:83:95:B4:B3:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/843E46AA209E75F9302824E3938E138395B4B3A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/843E46AA209E75F9302824E3938E138395B4B3A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/692dVQPCtipWndW42mUgAaWbAm6rooJngKg8pkcdtyhp/0/323830343a326663633a3a2f33322d313238203d3e20323634393132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:f6:d7:13:e7:71:4b:f4:77:9f:40:d3:b8:4f:8e:5c:cc:49:
         81:f3:a5:78:c9:42:c4:a8:7a:9c:8e:18:dd:1c:59:ed:f8:56:
         a3:ce:dc:22:d0:7d:ad:a9:13:47:be:b7:ee:f8:33:b9:ca:4c:
         06:c1:c7:6f:43:0a:bf:0f:6f:56:d2:00:ba:ad:18:ec:8d:71:
         f2:04:ed:ab:e8:4a:8b:2c:13:51:04:37:97:d9:3a:8b:39:b6:
         1a:14:ae:bc:e6:cc:62:ee:ff:6e:f0:f8:a6:79:ac:7c:c4:04:
         21:77:d9:8d:37:c7:b9:6c:53:60:14:02:20:4d:59:fe:3b:ef:
         c5:ef:df:0e:cd:69:00:f4:1b:b1:01:c3:9f:09:90:d2:aa:26:
         4c:7c:9a:c0:fc:19:e6:30:f9:24:a0:1e:e4:a3:d8:2f:a0:41:
         96:2c:c1:23:34:4b:48:bf:0b:24:55:b1:0e:7f:01:51:9f:f3:
         26:90:88:9d:c4:99:2a:ed:0b:c8:ea:76:8c:ed:5d:e7:41:a8:
         65:5d:b6:78:bc:08:bb:06:ae:1c:20:73:8a:06:9e:27:4b:0b:
         65:b2:d8:eb:b3:f7:9e:63:e4:60:6a:fb:3a:6a:ed:16:c6:f4:
         57:3b:b7:8e:40:9e:c3:b3:3d:8b:8e:62:c8:7c:9b:2a:e4:17:
         de:45:a1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:39 2025 by rpki-client