Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/323830343a343230303a3a2f33322d3332203d3e20323637343731.roa
File:                     323830343a343230303a3a2f33322d3332203d3e20323637343731.roa (raw, json)
Hash identifier:          6S+0R47GzCMBrBMBQOI4dDSt/Rq/13LxRdIrP4yVxMY=
Subject key identifier:   ED:CA:59:2D:B8:72:EE:D5:0B:5B:CB:A1:E2:92:99:B6:4E:DD:55:80
Certificate issuer:       /CN=70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345
Certificate serial:       25E567C17B16C9827BAAA9947EECDA95EC8C636E
Authority key identifier: 70:EF:5E:1A:EE:B9:FF:8D:5F:AF:7F:72:DD:2B:B9:0C:BE:10:93:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/323830343a343230303a3a2f33322d3332203d3e20323637343731.roa
Signing time:             Tue 11 Feb 2025 13:13:17 +0000
ROA not before:           Tue 11 Feb 2025 13:08:17 +0000
ROA not after:            Tue 10 Feb 2026 13:13:17 +0000
asID:                     267471
IP address blocks:        2804:4200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.crl
                          rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:14:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e5:67:c1:7b:16:c9:82:7b:aa:a9:94:7e:ec:da:95:ec:8c:63:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345
        Validity
            Not Before: Feb 11 13:08:17 2025 GMT
            Not After : Feb 10 13:13:17 2026 GMT
        Subject: CN=EDCA592DB872EED50B5BCBA1E29299B64EDD5580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:67:64:63:1c:05:b9:f1:cc:7f:7b:28:1a:16:
                    fe:ca:1d:6e:cb:63:8d:65:e8:a4:57:19:75:bb:7e:
                    d3:97:22:f8:1e:92:69:a6:7b:6f:63:5b:0d:eb:16:
                    d2:02:bd:e7:b9:aa:83:97:3a:f4:49:1b:74:73:ae:
                    e3:a0:3e:32:3f:1f:d3:02:eb:4b:28:18:9a:85:c2:
                    a7:c4:1a:bd:ed:34:3d:6a:98:ce:1f:73:31:f8:dd:
                    d4:e4:b8:d3:8e:ee:73:4d:1c:ed:12:a3:4e:28:d1:
                    c3:ef:bb:14:0d:8a:25:a5:e3:e1:7d:15:88:32:88:
                    2e:55:fa:2c:74:33:93:49:b0:b2:4c:7f:88:a5:f7:
                    b1:0f:3d:4c:36:26:89:b8:7e:2b:ce:d6:fe:6f:bc:
                    03:9c:bb:91:af:cc:6b:0c:3d:77:56:34:10:93:ad:
                    f4:55:48:ff:26:22:e5:18:51:5b:6d:4b:a4:00:9e:
                    6b:82:29:ee:d5:3d:7c:dc:3e:64:f9:ab:cd:b6:fa:
                    ff:36:43:3f:49:9d:4a:80:a0:7a:4c:31:c7:b2:a1:
                    dd:11:5a:4c:7a:27:7e:24:c6:44:b2:b3:99:f1:3e:
                    9e:e0:5b:22:ee:61:05:56:3a:f7:fa:4f:c8:5f:62:
                    6a:f7:9d:17:41:14:17:f9:f4:8a:4d:f1:ae:43:51:
                    79:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CA:59:2D:B8:72:EE:D5:0B:5B:CB:A1:E2:92:99:B6:4E:DD:55:80
            X509v3 Authority Key Identifier:
                keyid:70:EF:5E:1A:EE:B9:FF:8D:5F:AF:7F:72:DD:2B:B9:0C:BE:10:93:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70EF5E1AEEB9FF8D5FAF7F72DD2BB90CBE109345.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YSbdg2dfU9zKqfnsxSpic8nDpyFbA7tz7eUD8fS5xDp/0/323830343a343230303a3a2f33322d3332203d3e20323637343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4200::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:a0:7f:f6:ec:3d:97:b5:56:3b:46:27:51:34:6c:8a:14:18:
         70:fa:18:fe:1b:2a:8e:b3:89:40:ba:a3:42:eb:f0:fb:c6:06:
         06:59:7d:ca:53:99:45:50:2d:d1:4c:2c:46:27:8b:ba:f7:3f:
         fc:91:44:b0:0b:75:09:9c:2f:63:0c:3d:72:7f:be:b1:e5:89:
         48:87:58:39:d4:c6:a1:52:d5:13:be:db:e5:51:a7:23:97:a6:
         87:38:21:d7:ee:9f:d5:63:f3:39:68:83:62:54:75:02:56:70:
         2b:be:c7:5d:d8:57:59:6a:b9:1d:9b:9c:a9:27:cb:84:5f:51:
         69:ee:e3:be:ac:ff:91:21:f5:a9:6a:c5:98:cb:ea:96:f5:9d:
         9d:c5:1e:fb:4d:fc:aa:b3:c3:c5:f6:fe:ce:12:5b:9f:0f:80:
         64:5f:44:e5:4f:c4:92:23:21:82:30:a8:9a:66:78:fa:1a:d1:
         26:9a:3a:4a:d5:58:b3:af:30:3a:d8:0a:6a:82:78:72:c6:05:
         68:14:f4:a6:45:d9:23:49:9d:a2:78:fc:a8:50:f4:1a:8a:29:
         d1:3d:ba:e1:95:a6:d0:23:bb:a6:f3:6a:54:4d:40:55:e2:8d:
         69:b1:96:6e:33:bf:40:3b:08:00:2d:12:07:42:1d:13:a0:20:
         52:dc:e6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:41:02 2025 by rpki-client