Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a3a2f33322d3332203d3e20323636363335.roa
File:                     323830343a336630383a3a2f33322d3332203d3e20323636363335.roa (raw, json)
Hash identifier:          zXLAQzAvzTrcnF7Ja/X04EKon1IYBu3AuXQVBnfFwcU=
Subject key identifier:   EA:1F:68:73:DE:72:97:A1:40:B5:70:E9:D2:EB:8E:8C:D4:9C:F6:13
Certificate issuer:       /CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
Certificate serial:       10958D193F5A8CE1448CBA311F5FC81ACE50F7EA
Authority key identifier: EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a3a2f33322d3332203d3e20323636363335.roa
Signing time:             Thu 06 Mar 2025 02:52:43 +0000
ROA not before:           Thu 06 Mar 2025 02:47:43 +0000
ROA not after:            Thu 05 Mar 2026 02:52:43 +0000
asID:                     266635
IP address blocks:        2804:3f08::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl
                          rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 11:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:95:8d:19:3f:5a:8c:e1:44:8c:ba:31:1f:5f:c8:1a:ce:50:f7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Validity
            Not Before: Mar  6 02:47:43 2025 GMT
            Not After : Mar  5 02:52:43 2026 GMT
        Subject: CN=EA1F6873DE7297A140B570E9D2EB8E8CD49CF613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f4:ff:5e:7b:c3:f5:8c:70:e6:41:12:49:39:
                    96:96:c5:6c:56:09:8b:4f:fb:9c:cc:5c:6c:b8:8b:
                    91:37:df:b0:b1:10:ba:43:6c:30:c2:20:1c:a9:67:
                    a5:b4:f7:bf:02:84:b1:ab:a5:79:7e:ed:62:cb:48:
                    e5:20:f2:ec:4e:6b:e1:ca:96:73:da:0a:25:b8:14:
                    95:58:27:4a:ba:4a:9a:8f:a9:74:c5:68:b7:9d:3d:
                    b3:28:77:3c:dc:9c:ad:3b:80:6a:59:d9:50:d5:5c:
                    7f:95:cd:25:24:8d:f0:ca:b0:7d:4f:fb:f7:93:ab:
                    45:06:6c:d5:2e:48:e6:7f:b9:bc:79:2a:48:d2:40:
                    13:87:5f:c3:5e:21:54:56:31:53:6d:8f:b9:0e:6b:
                    86:ad:52:28:2a:c0:3c:af:58:19:96:08:ea:e9:18:
                    10:07:30:f4:3f:01:32:4c:99:42:59:67:22:c5:60:
                    da:57:83:31:e5:0b:63:70:22:ae:81:01:3a:5c:7d:
                    6b:98:9b:84:1f:e4:25:f3:91:8a:b9:78:40:9e:a6:
                    e3:f7:11:39:f4:18:2a:86:cb:3d:28:95:e8:c4:b3:
                    9e:4b:8d:b5:52:42:1e:1b:9f:b1:cd:87:de:68:9a:
                    e2:db:b0:96:ca:23:21:b0:bd:74:31:68:00:97:33:
                    74:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1F:68:73:DE:72:97:A1:40:B5:70:E9:D2:EB:8E:8C:D4:9C:F6:13
            X509v3 Authority Key Identifier:
                keyid:EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/323830343a336630383a3a2f33322d3332203d3e20323636363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f08::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:1d:d2:39:26:81:22:c6:3c:0e:f1:78:e8:66:6c:55:a7:57:
         48:39:64:10:d1:d7:df:54:36:ea:be:a5:2d:22:3f:11:1f:1a:
         5f:a2:4c:d0:84:c6:6d:19:f1:a7:93:f6:f3:46:63:8c:97:ac:
         c2:5a:a3:e4:6f:c1:d7:ef:59:b7:31:0a:fc:45:21:39:34:7e:
         df:7a:f9:4b:f8:f9:db:e7:35:96:3c:a1:cc:f7:b0:84:c5:b9:
         5b:41:a0:6d:66:8d:bb:16:5d:ac:71:6c:ed:92:64:08:49:67:
         d0:a1:d1:cb:15:d7:04:35:42:e1:83:6d:b2:7c:c0:fc:13:fc:
         4c:15:d3:a3:c7:f4:ba:5d:45:eb:75:36:ad:f7:d9:0f:33:c2:
         14:2d:25:a5:f0:ba:f9:5c:b1:18:af:d8:48:bf:85:71:e8:95:
         42:d5:3a:f0:8e:1d:6d:da:ca:de:b5:9f:78:c3:aa:e2:f4:95:
         f1:34:34:81:b4:b0:c1:e8:94:71:00:0c:09:7f:19:37:34:b2:
         e4:ea:e5:f5:5f:b8:56:fb:31:eb:02:f1:bc:85:88:bb:41:a1:
         a8:fc:79:ee:d1:c3:47:20:b1:77:a9:4c:e9:45:94:be:5d:0c:
         9f:1d:73:a1:7a:8e:92:5b:42:69:ed:b3:f4:50:d5:ab:9a:bd:
         61:77:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:20:27 2025 by rpki-client