Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/323830343a313032633a3a2f33322d3438203d3e20323633363233.roa
File:                     323830343a313032633a3a2f33322d3438203d3e20323633363233.roa (raw, json)
Hash identifier:          cB1zGvvjDInTlSUTOlC3yRx0oOjqN0abQELHCyCZ9cE=
Subject key identifier:   97:E3:A0:E4:27:0B:C0:0C:7D:85:AC:D6:AE:24:DC:FD:05:FD:C9:B0
Certificate issuer:       /CN=E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1
Certificate serial:       1001AF0037B561DD40660256DB31868577161A01
Authority key identifier: E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/323830343a313032633a3a2f33322d3438203d3e20323633363233.roa
Signing time:             Mon 12 Aug 2024 16:58:50 +0000
ROA not before:           Mon 12 Aug 2024 16:53:50 +0000
ROA not after:            Mon 11 Aug 2025 16:58:50 +0000
asID:                     263623
IP address blocks:        2804:102c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.crl
                          rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 17:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:01:af:00:37:b5:61:dd:40:66:02:56:db:31:86:85:77:16:1a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1
        Validity
            Not Before: Aug 12 16:53:50 2024 GMT
            Not After : Aug 11 16:58:50 2025 GMT
        Subject: CN=97E3A0E4270BC00C7D85ACD6AE24DCFD05FDC9B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:60:0e:dc:38:97:d9:79:ef:7e:1a:14:97:9b:
                    53:3c:fe:3f:47:da:72:aa:b0:6f:1f:ab:98:5c:56:
                    4a:c0:4e:9f:d0:34:2a:ff:9c:41:8f:68:4c:ba:6c:
                    7e:51:10:40:e8:45:ad:69:78:e6:8b:dd:98:18:d0:
                    0e:d2:1c:4e:7f:1f:bc:59:75:ec:b8:35:d7:f0:95:
                    1c:dc:9c:71:b0:bb:ca:09:c7:2e:f9:96:b5:b3:b5:
                    f4:b2:e6:f0:a0:f4:f6:1d:95:be:b0:6c:16:b9:c2:
                    b4:83:e3:a6:3c:6e:0f:af:90:fb:f6:2b:30:04:70:
                    5b:6d:43:83:33:3d:25:36:0a:97:da:d3:67:d6:31:
                    e6:7b:b8:5a:6f:a2:48:3d:2b:ce:1f:81:ff:7c:b1:
                    6f:d2:f6:91:ae:c1:2c:c3:ff:7f:2a:be:a8:b8:ba:
                    66:38:02:60:f1:6f:b9:a8:06:7f:d9:16:d1:21:fa:
                    ad:75:1c:34:a5:16:8a:67:b6:fc:9b:5e:1c:e5:2f:
                    cd:98:71:a9:1d:00:2b:31:b2:49:22:7c:61:04:81:
                    3a:7e:74:bd:38:b0:57:fc:ff:04:51:7c:1e:fa:b8:
                    ab:7e:d0:1a:f0:6b:17:e9:9d:1d:dd:db:3e:2a:79:
                    a4:20:37:30:dc:5f:5a:65:97:08:78:82:87:83:5e:
                    d8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E3:A0:E4:27:0B:C0:0C:7D:85:AC:D6:AE:24:DC:FD:05:FD:C9:B0
            X509v3 Authority Key Identifier:
                keyid:E3:9C:8B:A5:F3:D1:22:7D:86:25:CE:6F:02:FE:CB:FA:6E:3B:82:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E39C8BA5F3D1227D8625CE6F02FECBFA6E3B82B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/323830343a313032633a3a2f33322d3438203d3e20323633363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:102c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:3a:7b:cf:3e:e5:ce:ce:b2:74:3a:c8:fa:cb:11:b2:47:96:
         2b:b0:05:05:a7:4a:bb:de:c3:86:00:e0:67:6e:d3:d6:d8:fa:
         59:b0:8a:37:99:9d:14:c0:bf:8c:fe:38:1b:d3:08:28:d7:be:
         d1:53:a2:28:55:ce:7e:83:f8:13:d0:19:31:96:2e:dd:9b:51:
         59:56:a1:7b:a9:bd:e4:12:28:ef:4a:50:c6:b2:93:ea:f0:8a:
         22:96:4d:b7:1c:15:d7:3c:2b:a1:1a:5e:bf:64:e7:67:d2:4d:
         8d:f5:23:f4:cf:95:f1:f0:5e:77:d6:f4:a2:d6:ce:9e:65:76:
         e7:77:65:e0:5f:21:5d:55:e7:98:74:39:1a:40:5a:78:19:24:
         4f:cc:34:fe:4b:b4:ae:14:12:39:2b:93:a8:d6:9b:18:08:cf:
         05:7e:2f:70:cb:50:d0:8a:2f:0d:70:8c:4d:60:16:d2:d4:f3:
         49:95:08:e3:23:36:44:22:13:ba:2c:aa:6b:56:f8:9e:13:2d:
         b6:19:58:34:65:57:4c:5f:06:81:cb:15:b5:98:92:f0:cd:38:
         5e:1a:d6:99:f1:3c:b4:a8:e7:4b:33:13:b8:a4:1e:ad:01:af:
         37:1a:b6:0b:b9:92:b8:f6:f8:91:86:fa:fb:c8:c1:89:77:c2:
         f7:fc:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:35 2025 by rpki-client