Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa
File:                     323830343a313037383a3a2f33322d3438203d3e20323633363337.roa (raw, json)
Hash identifier:          lUPZqGfCpDRojEAU272gZZqzqfvsVCx0cZfNwWhlszA=
Subject key identifier:   53:CA:23:B8:21:0D:34:97:AD:60:BA:18:35:4B:0D:4A:6C:13:06:14
Certificate issuer:       /CN=7E49036E8D3CAB92B7534D80E02A3FBA5AFE120B
Certificate serial:       64552C7F9C9F4F73F2CE1FFC29724373B4FB0B11
Authority key identifier: 7E:49:03:6E:8D:3C:AB:92:B7:53:4D:80:E0:2A:3F:BA:5A:FE:12:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E49036E8D3CAB92B7534D80E02A3FBA5AFE120B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa
Signing time:             Thu 06 Mar 2025 16:13:02 +0000
ROA not before:           Thu 06 Mar 2025 16:08:02 +0000
ROA not after:            Thu 05 Mar 2026 16:13:02 +0000
asID:                     263637
IP address blocks:        2804:1078::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/7E49036E8D3CAB92B7534D80E02A3FBA5AFE120B.crl
                          rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/7E49036E8D3CAB92B7534D80E02A3FBA5AFE120B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E49036E8D3CAB92B7534D80E02A3FBA5AFE120B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 11:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:55:2c:7f:9c:9f:4f:73:f2:ce:1f:fc:29:72:43:73:b4:fb:0b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E49036E8D3CAB92B7534D80E02A3FBA5AFE120B
        Validity
            Not Before: Mar  6 16:08:02 2025 GMT
            Not After : Mar  5 16:13:02 2026 GMT
        Subject: CN=53CA23B8210D3497AD60BA18354B0D4A6C130614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:f9:98:b0:03:5d:2a:8f:90:17:59:cd:bb:
                    3f:3b:f6:68:2b:a5:b9:d0:0c:19:78:dd:c4:7b:57:
                    40:54:2c:1a:a9:0a:58:e9:ec:2d:3d:70:9a:e8:fe:
                    71:a0:7c:05:86:fe:8a:8c:49:72:7d:8f:38:eb:c9:
                    78:22:ea:96:ea:fd:9d:8d:80:be:86:4e:ef:af:90:
                    82:69:6c:27:f6:d2:20:05:c6:3f:38:92:fd:ae:fa:
                    1e:46:a9:6d:34:73:f6:80:0b:8b:78:82:ac:8f:89:
                    f8:cf:1c:06:ac:2e:8b:20:86:e8:c6:08:e4:4f:d7:
                    2b:8f:de:23:30:76:b2:8e:35:70:bd:20:70:57:2f:
                    9b:7c:95:39:51:22:b7:06:ba:fa:6d:38:8a:7d:46:
                    7c:80:9a:66:4c:db:01:33:5b:e6:cc:aa:40:43:ea:
                    64:d0:cb:f9:d8:dd:f8:0a:58:6a:60:44:b6:ef:31:
                    97:94:63:bb:80:0a:9d:1c:39:71:7f:75:0f:71:0c:
                    5e:64:4f:25:a2:58:47:85:ae:8e:18:e6:48:6a:77:
                    49:6e:67:ff:7a:ea:6f:8e:d1:52:1e:ad:d3:2d:e4:
                    a9:91:65:46:6c:7c:b7:68:c3:65:ef:f5:99:5f:0f:
                    d7:6b:8e:8c:c4:c9:4e:9a:ae:1d:8c:09:60:4f:d5:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CA:23:B8:21:0D:34:97:AD:60:BA:18:35:4B:0D:4A:6C:13:06:14
            X509v3 Authority Key Identifier:
                keyid:7E:49:03:6E:8D:3C:AB:92:B7:53:4D:80:E0:2A:3F:BA:5A:FE:12:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/7E49036E8D3CAB92B7534D80E02A3FBA5AFE120B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E49036E8D3CAB92B7534D80E02A3FBA5AFE120B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nr8oZ11ZH7uzNNJ5XGUVvDK7EstL6Z2LBbUCYg7RmeP/1/323830343a313037383a3a2f33322d3438203d3e20323633363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1078::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:f7:5a:46:6e:0c:77:a9:29:0d:6c:38:14:63:d9:95:cb:2a:
         6b:f0:fe:f2:db:73:07:2d:e3:ad:fc:6f:00:9d:12:41:d8:28:
         00:ee:bc:fb:9e:e9:3b:2f:ad:0a:d5:4d:c5:20:6c:03:97:0e:
         a0:ab:31:d8:de:73:0a:30:d9:b7:eb:91:19:e4:59:39:8b:3e:
         26:2a:5e:05:19:c7:e2:c1:f7:b9:ac:e1:06:c8:d6:13:5e:c5:
         90:5f:dd:0e:95:2b:89:16:33:c3:f9:b8:3c:88:9a:4f:ce:19:
         b7:1d:a3:bf:e8:9e:1d:c8:77:ab:71:1e:66:87:b6:3d:03:64:
         58:74:09:96:72:8a:c9:a8:53:44:77:db:d4:71:75:91:69:dc:
         2a:82:24:4e:78:a7:39:be:52:33:8d:0b:d7:d6:a8:26:af:33:
         13:84:31:4b:18:18:c5:fb:a3:ac:91:a4:d6:b6:ff:ed:66:36:
         50:9c:a9:6e:94:e4:d0:ec:61:84:22:ef:c7:3b:f2:6b:d7:85:
         bc:eb:1f:f6:5d:88:5d:7e:0d:ea:4a:6e:65:8c:4a:41:30:c5:
         58:ff:87:09:f8:6f:ba:77:19:14:0f:cb:40:d3:24:7c:a9:88:
         62:72:b8:bf:07:ba:b3:21:c8:1c:c2:55:3c:67:44:20:fd:73:
         8b:71:b6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:31:44 2025 by rpki-client