Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/323830343a316366383a3a2f33322d3438203d3e203631363836.roa
File:                     323830343a316366383a3a2f33322d3438203d3e203631363836.roa (raw, json)
Hash identifier:          0Mga+Ug9E3XKJjL5XiOHXvRGsRxBdRsCssCUA14w+7s=
Subject key identifier:   AE:96:5D:68:28:41:D3:7F:7F:D2:54:74:A9:F1:B0:59:2F:DC:A5:B8
Certificate issuer:       /CN=E00A78010D444B2B9D281FDD6A968FFA16A6587E
Certificate serial:       292C1D4526EA5B82F2F9A1C294A41A30CD3E9701
Authority key identifier: E0:0A:78:01:0D:44:4B:2B:9D:28:1F:DD:6A:96:8F:FA:16:A6:58:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E00A78010D444B2B9D281FDD6A968FFA16A6587E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/323830343a316366383a3a2f33322d3438203d3e203631363836.roa
Signing time:             Thu 10 Apr 2025 18:32:53 +0000
ROA not before:           Thu 10 Apr 2025 18:27:53 +0000
ROA not after:            Thu 09 Apr 2026 18:32:53 +0000
asID:                     61686
IP address blocks:        2804:1cf8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/E00A78010D444B2B9D281FDD6A968FFA16A6587E.crl
                          rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/E00A78010D444B2B9D281FDD6A968FFA16A6587E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E00A78010D444B2B9D281FDD6A968FFA16A6587E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 02:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2c:1d:45:26:ea:5b:82:f2:f9:a1:c2:94:a4:1a:30:cd:3e:97:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E00A78010D444B2B9D281FDD6A968FFA16A6587E
        Validity
            Not Before: Apr 10 18:27:53 2025 GMT
            Not After : Apr  9 18:32:53 2026 GMT
        Subject: CN=AE965D682841D37F7FD25474A9F1B0592FDCA5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e1:07:c8:f6:7d:e3:c6:4a:96:bf:20:38:83:
                    de:12:1d:75:07:dd:28:2f:69:55:e0:32:98:d5:08:
                    db:ee:01:62:70:95:2b:db:66:90:c0:a7:b0:35:74:
                    ab:7c:c0:4f:6a:d8:4d:b6:6d:86:48:1a:34:a7:a8:
                    86:2f:5c:6e:81:a5:59:58:7d:a5:93:16:a5:3d:f4:
                    40:26:34:34:77:03:d9:69:85:9c:11:60:0b:84:3d:
                    6b:3d:ee:2a:6e:00:00:50:ce:ff:80:04:14:72:ba:
                    11:3a:c0:87:71:52:c0:97:ba:dc:62:c9:ef:ba:ca:
                    57:f7:10:9b:bc:ac:89:6f:20:84:8e:a5:9c:3a:54:
                    7e:95:d2:a5:40:30:41:32:1a:b3:8d:2b:71:19:fe:
                    af:99:7a:17:ba:5e:4b:28:fe:0f:cc:2e:01:29:eb:
                    a5:9f:65:71:97:2f:54:64:0a:6e:9b:79:42:9c:a8:
                    f0:9d:ea:2a:e6:f1:0f:6c:46:4d:b9:49:6c:b6:c7:
                    93:36:99:bb:f9:18:3e:0d:ca:30:de:c7:1a:a2:c2:
                    9c:98:8f:2b:c1:04:cf:60:6f:68:81:93:67:5f:b2:
                    38:14:fc:f6:1e:01:98:8e:68:40:30:fc:c7:b6:11:
                    41:0c:74:ad:a2:18:fe:f2:11:4f:58:57:af:dc:61:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:96:5D:68:28:41:D3:7F:7F:D2:54:74:A9:F1:B0:59:2F:DC:A5:B8
            X509v3 Authority Key Identifier:
                keyid:E0:0A:78:01:0D:44:4B:2B:9D:28:1F:DD:6A:96:8F:FA:16:A6:58:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/E00A78010D444B2B9D281FDD6A968FFA16A6587E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E00A78010D444B2B9D281FDD6A968FFA16A6587E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/323830343a316366383a3a2f33322d3438203d3e203631363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cf8::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:78:c1:da:a0:ab:54:41:c0:19:ce:92:3a:36:19:84:32:c9:
         2e:1e:9a:e4:20:5e:07:70:e7:f8:7a:10:9d:2c:42:d2:ee:bc:
         a8:ea:b3:df:a4:7a:5b:c0:ce:3f:5b:99:f6:c8:d2:98:86:db:
         de:b7:c2:aa:1e:f6:d5:3c:bb:b2:5e:8b:bf:bc:54:b1:81:43:
         7a:5f:29:50:aa:0e:fb:b2:3c:53:54:17:9e:a8:59:84:1e:3c:
         bb:64:cc:4f:d1:cd:55:9f:bd:86:eb:4a:61:81:94:cd:e3:3e:
         cc:42:57:a4:61:cb:3e:a1:d7:f1:d4:44:99:76:e2:3e:9d:22:
         14:45:d6:7b:e6:51:d9:d0:05:ec:fe:3e:dc:81:ed:de:6d:89:
         43:44:88:0f:91:49:3d:98:79:d3:d9:4f:a2:3d:cb:66:14:be:
         2f:4a:24:a8:46:f7:bb:d3:fd:91:5f:1b:39:b7:25:9d:bd:b0:
         57:fb:81:d9:0a:06:b7:b9:86:e8:b9:65:8c:a5:6c:48:ea:55:
         a6:07:1d:17:f8:71:78:35:48:e8:79:73:a3:42:e3:52:49:60:
         e1:18:33:a3:8f:3f:97:79:2d:92:b1:64:90:db:68:66:db:cc:
         e5:62:29:21:d1:cd:62:cd:3c:f3:d8:68:51:58:75:cc:eb:53:
         b0:93:b2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:29:16 2025 by rpki-client