Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/323830343a383564343a3a2f33322d3334203d3e20323732363033.roa
File:                     323830343a383564343a3a2f33322d3334203d3e20323732363033.roa (raw, json)
Hash identifier:          rpmi5g46B+xfhELNgItrRhxD3j7qDJ2dtHV/KeqaWAo=
Subject key identifier:   CE:08:55:53:FB:EE:66:64:03:19:9D:37:16:47:29:1E:81:19:03:ED
Certificate issuer:       /CN=8CF184085C59663815BE0942AC2DFBBCDC0A86AE
Certificate serial:       74018A06B5482431A115632EE980B018A8199E6B
Authority key identifier: 8C:F1:84:08:5C:59:66:38:15:BE:09:42:AC:2D:FB:BC:DC:0A:86:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/323830343a383564343a3a2f33322d3334203d3e20323732363033.roa
Signing time:             Wed 05 Mar 2025 19:00:10 +0000
ROA not before:           Wed 05 Mar 2025 18:55:10 +0000
ROA not after:            Wed 04 Mar 2026 19:00:10 +0000
asID:                     272603
IP address blocks:        2804:85d4::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl
                          rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 04:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:01:8a:06:b5:48:24:31:a1:15:63:2e:e9:80:b0:18:a8:19:9e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CF184085C59663815BE0942AC2DFBBCDC0A86AE
        Validity
            Not Before: Mar  5 18:55:10 2025 GMT
            Not After : Mar  4 19:00:10 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9d:45:88:65:dc:dd:0f:cf:47:ef:c0:5d:f8:
                    e6:92:9d:ab:54:27:b6:b3:78:6c:6e:68:65:52:a0:
                    01:57:9d:62:13:7a:90:68:cf:77:96:03:18:87:fb:
                    a8:ca:c7:b9:6c:01:c0:33:25:ea:66:5f:20:57:00:
                    b1:93:02:c0:cd:a3:7f:6f:1d:eb:74:bc:0e:aa:b7:
                    b2:43:11:37:c1:2a:69:8d:5b:ee:9e:98:e0:51:13:
                    f1:77:7a:a3:a8:3d:0a:19:41:02:8b:0a:b9:4e:c5:
                    8b:39:85:3f:64:d6:bd:0b:6b:77:01:ab:44:21:72:
                    6a:d8:44:05:07:53:ca:11:c9:84:e2:a2:3f:83:fe:
                    88:60:e1:64:54:01:12:11:9c:91:10:c8:a0:68:cc:
                    84:bb:e1:f7:d9:7d:ca:00:63:7e:f7:b9:a3:63:bb:
                    16:5a:d7:45:08:56:5e:7d:3b:c3:1a:fc:f7:7a:8b:
                    4a:1d:b4:e5:d5:5c:84:4f:64:92:21:f5:a6:52:01:
                    52:f0:e9:c4:e9:4a:02:3c:1b:ed:6c:f0:12:c5:6a:
                    7f:c3:84:93:27:01:18:e4:55:58:e7:a6:8f:d6:8e:
                    3a:33:2d:28:22:f4:1b:25:9b:85:61:ed:e6:a8:1b:
                    3c:87:5a:59:fc:a8:60:d9:0d:93:11:42:7f:9c:87:
                    fb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:08:55:53:FB:EE:66:64:03:19:9D:37:16:47:29:1E:81:19:03:ED
            X509v3 Authority Key Identifier:
                keyid:8C:F1:84:08:5C:59:66:38:15:BE:09:42:AC:2D:FB:BC:DC:0A:86:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CF184085C59663815BE0942AC2DFBBCDC0A86AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e54hBv8Jx9XqQwUxbsMDsfFC1md1WGXWcBcS8MQjTz9/1/323830343a383564343a3a2f33322d3334203d3e20323732363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:85d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:84:14:da:ae:6f:29:e6:64:48:9e:fc:d4:98:c5:94:1c:b6:
         3c:0c:5e:ba:b1:49:95:38:f5:2c:6d:5a:51:8a:6e:9a:50:19:
         87:db:30:69:47:2f:3b:e2:8a:b8:40:c5:fe:97:90:0f:db:02:
         ff:3f:4d:f5:50:09:ab:ac:f0:b9:30:1e:1f:e7:35:6f:5b:b3:
         de:f4:87:df:52:50:f8:16:1c:35:83:64:a4:dd:e0:23:e5:44:
         8c:2d:e8:f6:3c:ff:9c:bf:e1:3e:ba:9a:d5:c9:68:8e:f7:d5:
         a1:f2:74:15:3e:c1:5f:9b:32:bd:e4:61:6e:48:dd:d9:7d:1e:
         41:53:d6:80:72:bd:0a:49:8f:6b:1c:18:2a:58:8d:a0:01:61:
         87:65:29:f9:71:bc:73:b0:5c:7e:0e:6b:f0:cb:6d:58:a0:0d:
         b3:39:9b:ae:db:db:7e:eb:6d:27:2b:e7:24:6a:41:58:93:e6:
         43:4d:a1:b8:75:66:96:a0:85:b6:04:4e:e3:91:b3:e6:f8:aa:
         7b:43:08:c0:11:d4:ee:99:73:b2:4c:ed:b7:ec:01:ce:8e:49:
         94:bc:89:81:75:ea:27:71:3d:39:6a:0e:8b:f3:ee:5f:2e:2d:
         4a:94:5f:05:1b:a8:ac:4c:cd:da:1b:ed:f9:3c:1f:fe:b9:c9:
         24:50:eb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:11:40 2025 by rpki-client