Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a3a2f33322d3332203d3e20323633313436.roa
File:                     323830343a313737383a3a2f33322d3332203d3e20323633313436.roa (raw, json)
Hash identifier:          zVAZZXTsF1GF6/aqPXSFqzT3E5CdbOkUSagBoyqS6Ks=
Subject key identifier:   77:B1:87:43:14:C1:9F:88:86:25:1E:3D:CE:D6:B1:2B:BE:2E:4B:0B
Certificate issuer:       /CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
Certificate serial:       4351A4DB4566622577B2E52BE88936F137966818
Authority key identifier: E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a3a2f33322d3332203d3e20323633313436.roa
Signing time:             Thu 06 Mar 2025 08:20:29 +0000
ROA not before:           Thu 06 Mar 2025 08:15:29 +0000
ROA not after:            Thu 05 Mar 2026 08:20:29 +0000
asID:                     263146
IP address blocks:        2804:1778::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl
                          rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:51:a4:db:45:66:62:25:77:b2:e5:2b:e8:89:36:f1:37:96:68:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493
        Validity
            Not Before: Mar  6 08:15:29 2025 GMT
            Not After : Mar  5 08:20:29 2026 GMT
        Subject: CN=77B1874314C19F8886251E3DCED6B12BBE2E4B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:7e:92:50:13:66:e6:ad:c1:31:01:b1:bc:
                    60:f9:95:f3:d1:1e:07:89:b7:fb:d6:4f:91:ca:b2:
                    f4:07:e7:51:e2:c9:31:e4:bd:eb:02:cf:21:72:2b:
                    0d:51:1b:88:aa:23:16:ff:8f:1f:e7:a3:8a:38:3d:
                    6f:7d:ea:b1:38:ca:69:77:7b:0b:3d:f5:64:f7:c3:
                    a2:50:34:4b:95:56:6a:c3:cc:b9:57:42:2b:6c:69:
                    64:25:2a:f0:ce:f2:ff:4f:54:f3:34:99:df:17:77:
                    45:99:94:38:af:41:eb:2f:da:05:dc:8b:4c:e2:29:
                    b2:b3:ec:cb:5a:eb:b5:c7:46:ed:1f:2a:88:bf:c0:
                    bb:22:b0:6a:5b:42:47:5e:d2:7c:5a:46:65:70:74:
                    51:94:90:29:91:09:98:9b:ce:22:56:99:1d:f7:8c:
                    87:f7:6b:77:88:92:c1:52:59:81:4f:bb:2d:b4:c1:
                    83:c0:31:3b:31:94:7e:fd:9e:47:3b:0f:4b:7a:92:
                    6a:00:ca:f8:14:d5:34:4f:bc:f9:f6:16:8e:c6:1e:
                    08:0f:98:b1:77:fb:58:fc:5c:3d:fa:d0:fd:0c:c7:
                    c4:e8:58:90:a6:69:c5:2b:24:57:e8:7e:43:8b:e3:
                    cc:e3:43:b0:39:0f:88:e2:95:7e:4c:50:54:2e:59:
                    7a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B1:87:43:14:C1:9F:88:86:25:1E:3D:CE:D6:B1:2B:BE:2E:4B:0B
            X509v3 Authority Key Identifier:
                keyid:E6:FA:E3:A7:A7:90:29:B5:F5:3F:2E:1A:94:0B:19:4F:E9:B3:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6FAE3A7A79029B5F53F2E1A940B194FE9B3F493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/1/323830343a313737383a3a2f33322d3332203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:d3:95:a2:55:ba:89:9b:c9:9f:e6:d9:86:48:d7:57:eb:ec:
         4b:88:59:ac:8d:7c:43:65:97:56:59:30:44:ff:a3:65:1e:4c:
         ef:15:8e:73:bc:ae:b5:6d:0e:71:30:d8:88:7c:61:b2:0a:61:
         bb:36:dd:cd:2e:f4:d7:d7:15:90:b8:89:0f:6e:b9:de:45:21:
         0f:f6:d5:c5:56:29:ae:6d:87:3b:3b:00:53:16:a3:2d:a9:ea:
         57:e6:17:35:24:bc:9c:67:8d:1f:c6:df:1b:d2:3f:7c:eb:b8:
         e7:db:a0:47:b4:be:89:cf:cf:b1:8d:d7:4f:f9:b9:90:53:04:
         fe:67:37:c4:32:fa:b3:37:34:0f:a4:18:5b:62:ad:df:1e:44:
         ef:d0:7c:6f:24:45:82:4f:b8:c9:b1:c6:ff:c1:19:28:07:8d:
         aa:aa:b7:c2:a1:5d:d3:3e:2b:36:62:ca:86:1e:94:0b:55:b8:
         d9:53:32:20:47:28:52:7d:d5:f9:a9:3e:d5:52:92:60:fc:f6:
         f8:65:49:0e:af:e4:81:66:05:01:2e:00:0d:e6:69:a3:09:ec:
         84:37:33:25:2e:e4:90:b8:ef:70:60:95:27:78:01:2e:b1:12:
         9a:09:08:ab:53:4d:33:07:6f:39:f2:e9:ed:a5:10:5e:14:86:
         8f:f5:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:44:30 2025 by rpki-client