Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/323830343a373462633a3a2f33322d3332203d3e20323731303030.roa
File:                     323830343a373462633a3a2f33322d3332203d3e20323731303030.roa (raw, json)
Hash identifier:          i3X2PnejB28nRZIfGxqt9RFnTyfUqqOfONIh4nxooKA=
Subject key identifier:   CA:2D:93:D1:55:C6:B2:A4:FA:87:D4:6A:72:06:01:D1:4B:C0:B0:BA
Certificate issuer:       /CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Certificate serial:       24E038F12A9B99AF1DDCBD3D5A8EE4B6E831318F
Authority key identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/323830343a373462633a3a2f33322d3332203d3e20323731303030.roa
Signing time:             Fri 07 Mar 2025 01:12:10 +0000
ROA not before:           Fri 07 Mar 2025 01:07:10 +0000
ROA not after:            Fri 06 Mar 2026 01:12:10 +0000
asID:                     271000
IP address blocks:        2804:74bc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
                          rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 09:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e0:38:f1:2a:9b:99:af:1d:dc:bd:3d:5a:8e:e4:b6:e8:31:31:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
        Validity
            Not Before: Mar  7 01:07:10 2025 GMT
            Not After : Mar  6 01:12:10 2026 GMT
        Subject: CN=CA2D93D155C6B2A4FA87D46A720601D14BC0B0BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:31:c2:0d:17:35:ed:93:1f:b4:2d:e7:b8:b8:
                    dc:11:6f:52:43:f6:a4:6f:62:ca:d6:22:d6:25:48:
                    96:0c:cd:5a:01:a2:0b:52:a5:72:1e:48:ae:4f:14:
                    0e:4e:bd:69:6d:06:c4:e7:53:76:e4:57:e2:3c:84:
                    d6:1f:53:fe:2d:fc:49:3e:e0:85:2f:b0:8c:2d:27:
                    56:8b:8d:0a:e1:28:76:6e:cb:ec:aa:20:22:28:8c:
                    49:f3:28:a5:58:df:f0:b8:e8:20:3d:cb:1f:4e:bf:
                    40:96:6e:28:e5:f7:c8:53:54:35:56:78:63:d6:4d:
                    67:ca:7f:a7:02:63:e5:88:7d:83:54:02:d8:2e:27:
                    e8:72:f7:0a:39:ae:1d:55:1a:1e:06:3f:d2:3c:bc:
                    23:96:a2:d1:ef:c4:85:5e:27:29:c4:74:1e:99:f6:
                    0d:e5:13:ce:0a:c9:27:8a:7a:c3:5b:59:a1:b6:6a:
                    d5:55:bd:07:80:cc:be:22:36:27:cd:1d:fb:98:da:
                    e4:c3:61:fb:ae:84:ab:59:ca:18:bb:ea:6d:69:35:
                    b8:83:7c:2a:9b:42:69:e5:f4:f1:29:93:c2:ee:c9:
                    87:f3:23:25:3e:d8:a9:e8:7e:72:fb:96:81:8d:eb:
                    12:4e:2d:b9:37:0a:ce:f5:a5:23:3b:b4:0c:13:82:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2D:93:D1:55:C6:B2:A4:FA:87:D4:6A:72:06:01:D1:4B:C0:B0:BA
            X509v3 Authority Key Identifier:
                keyid:1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/323830343a373462633a3a2f33322d3332203d3e20323731303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:52:7d:78:4b:0b:d5:55:ea:8b:af:dd:61:a3:65:b4:c4:
         ed:00:e1:1f:47:fe:22:b5:af:db:b3:fb:eb:6e:f6:ed:9a:bd:
         f1:44:4f:9c:7b:09:79:ad:78:c7:3d:c3:8f:3c:69:95:46:49:
         ee:94:1b:61:5b:00:9d:ed:0e:71:5b:28:81:f4:ee:c9:68:9f:
         c5:16:56:67:b9:4e:8c:ab:ef:74:d5:41:75:23:3c:be:3e:07:
         38:dc:54:f0:a0:9a:f9:62:d0:5a:85:32:7b:34:1b:44:24:db:
         ce:d0:7f:93:d8:5b:11:87:31:dc:37:0c:b1:6f:77:12:be:e7:
         b8:ef:61:5d:7a:e5:bb:9d:c0:40:79:2c:5a:6a:45:06:27:a6:
         db:9f:09:81:bf:c6:eb:13:c7:b8:f5:e5:e2:4f:f0:18:db:5e:
         7a:4c:33:be:4b:54:88:91:9d:a6:ed:46:f0:94:bf:6d:15:2b:
         8f:21:db:15:13:9c:a0:40:92:3e:56:bd:a5:d8:53:7c:05:3c:
         74:ab:94:36:77:36:00:78:4d:f8:50:d9:41:c5:93:db:3e:63:
         f8:e0:01:b0:f0:f1:21:ef:ae:8f:5c:bb:b1:99:18:9f:c8:a8:
         f5:2a:42:67:18:7f:67:ca:35:a4:fa:ba:f9:2a:9b:e6:38:e5:
         b7:53:f6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:15:30 2025 by rpki-client