Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/323830343a373533343a3a2f33322d3332203d3e20323731303331.roa
File:                     323830343a373533343a3a2f33322d3332203d3e20323731303331.roa (raw, json)
Hash identifier:          ugIddcjpw9rrizamY7xtp3MIRY8VG6NgtiL7aQFtuIE=
Subject key identifier:   2E:97:A7:D2:C8:0D:0E:68:12:98:C3:08:10:4C:A6:28:37:62:90:4B
Certificate issuer:       /CN=E116A9492035CFBB15FA99D51C520F4FAD579530
Certificate serial:       56FEEEE43706930B5BA93BC4A1BE4825A15AE0A0
Authority key identifier: E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/323830343a373533343a3a2f33322d3332203d3e20323731303331.roa
Signing time:             Wed 05 Mar 2025 20:31:05 +0000
ROA not before:           Wed 05 Mar 2025 20:26:05 +0000
ROA not after:            Wed 04 Mar 2026 20:31:05 +0000
asID:                     271031
IP address blocks:        2804:7534::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.crl
                          rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 10:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fe:ee:e4:37:06:93:0b:5b:a9:3b:c4:a1:be:48:25:a1:5a:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E116A9492035CFBB15FA99D51C520F4FAD579530
        Validity
            Not Before: Mar  5 20:26:05 2025 GMT
            Not After : Mar  4 20:31:05 2026 GMT
        Subject: CN=2E97A7D2C80D0E681298C308104CA6283762904B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2e:e8:bc:00:c7:b2:8d:0e:f2:17:27:60:b2:
                    d1:03:55:86:7f:03:57:46:2a:e5:79:2a:81:41:65:
                    b0:08:3e:f7:f3:5d:de:14:85:a5:88:65:25:08:50:
                    9c:24:2d:1c:65:00:80:7c:24:3d:18:cb:d2:9a:59:
                    41:74:53:aa:d5:31:b4:ba:6c:e9:c0:9b:65:d3:cd:
                    9c:a5:11:05:ed:1b:bf:c3:fa:99:31:9c:18:1e:19:
                    5b:cb:a7:a8:fa:bc:8c:84:d3:ec:c6:b9:68:e5:9b:
                    17:7e:30:c1:b4:a3:be:7b:c7:63:b0:f5:80:6f:48:
                    e1:86:44:87:2a:c2:74:a0:cc:87:9a:bc:f0:93:e1:
                    b4:f8:f3:e4:80:9a:ac:31:ab:ff:5c:30:7f:21:92:
                    f5:17:69:68:2c:cb:71:fd:3c:b1:b4:c8:46:5e:18:
                    74:4f:28:01:8c:00:26:d7:02:76:ae:d3:3c:17:81:
                    2f:ce:ea:40:cd:1c:bc:52:e6:03:49:67:28:8a:b0:
                    48:28:10:e6:24:f1:e0:11:3d:a7:d2:39:8a:6f:be:
                    39:a4:a0:b3:4d:68:98:06:69:f3:ab:1c:f2:fd:41:
                    6a:96:97:32:92:38:ab:4c:43:7e:b5:1b:01:16:d0:
                    d4:eb:a3:96:8b:24:13:38:fb:31:dd:5d:8b:04:6a:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:97:A7:D2:C8:0D:0E:68:12:98:C3:08:10:4C:A6:28:37:62:90:4B
            X509v3 Authority Key Identifier:
                keyid:E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/323830343a373533343a3a2f33322d3332203d3e20323731303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7534::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:72:57:97:c0:56:df:2e:12:9e:8b:76:f8:22:29:72:f7:
         69:7d:02:e1:c5:cc:de:e1:35:41:69:35:9c:4d:52:5a:7f:a5:
         9c:6e:0a:22:df:d3:a1:16:47:2a:37:7e:10:e5:69:f4:84:95:
         9e:f3:70:26:4a:48:b7:8a:bf:88:53:f5:d1:f8:3b:07:e3:ce:
         cf:07:d4:0c:9b:75:e4:16:b7:d0:59:0e:ee:2f:af:11:76:1c:
         0f:9d:cf:98:d0:a2:34:14:15:08:ff:9c:ad:23:f2:c0:67:b0:
         48:6e:36:77:09:e6:f0:72:bb:59:b9:7c:8e:ce:fb:23:a7:34:
         93:f6:47:94:19:cb:66:10:46:15:cd:46:39:b3:7a:1d:a5:58:
         1d:6c:d3:c1:c2:a6:6c:c5:ba:d6:03:2c:76:64:a2:f0:54:ff:
         60:f9:52:32:43:2b:5b:de:23:45:52:f6:ba:37:ed:5e:2a:9f:
         46:49:42:e8:46:9e:91:ae:8b:bc:0e:03:6c:3c:1d:c6:17:3d:
         99:59:3d:21:9a:f8:c3:9b:bc:4b:70:fe:87:4c:48:45:75:8d:
         03:cd:98:b4:73:c3:8f:7d:41:49:ae:98:31:61:da:a7:6d:93:
         7e:4e:39:67:0b:21:1c:2f:9b:31:75:41:18:5d:64:ce:d7:9d:
         4b:9c:e6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:50:27 2025 by rpki-client