Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f3332203d3e20323632333232.roa
File:                     323830343a333264633a3a2f3332203d3e20323632333232.roa (raw, json)
Hash identifier:          vrmB5Sh0GVnhMtwphxYGPAIHR2ptBuVrk31o33vBN9k=
Subject key identifier:   12:0E:FF:17:AB:5D:79:01:C4:8B:2B:F9:4F:41:E5:3A:3E:FB:01:C1
Certificate issuer:       /CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
Certificate serial:       7C15A38AE66D7D492A51F10A9D98648D1A149FCC
Authority key identifier: 2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f3332203d3e20323632333232.roa
Signing time:             Thu 06 Mar 2025 20:46:03 +0000
ROA not before:           Thu 06 Mar 2025 20:41:03 +0000
ROA not after:            Thu 05 Mar 2026 20:46:03 +0000
asID:                     262322
IP address blocks:        2804:32dc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl
                          rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 19:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:15:a3:8a:e6:6d:7d:49:2a:51:f1:0a:9d:98:64:8d:1a:14:9f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25
        Validity
            Not Before: Mar  6 20:41:03 2025 GMT
            Not After : Mar  5 20:46:03 2026 GMT
        Subject: CN=120EFF17AB5D7901C48B2BF94F41E53A3EFB01C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:6d:52:f8:27:37:56:77:2b:fb:a1:e3:a2:
                    a7:ba:99:1f:1a:50:cf:9d:da:02:0e:0f:45:08:3d:
                    4a:d2:97:94:15:2c:72:f8:a6:31:5e:d0:b2:97:9b:
                    e5:86:48:38:4d:de:39:99:29:22:2e:75:33:9f:30:
                    bd:dc:f9:58:c6:31:ee:04:b1:d3:32:61:96:d2:b8:
                    92:af:07:d2:ee:ec:92:6d:98:70:0e:34:2e:ca:e6:
                    05:ab:10:5e:e7:68:59:3a:64:07:43:22:88:18:db:
                    ca:b3:02:58:5b:57:6a:8b:85:26:47:41:e6:6d:9b:
                    33:5f:8a:ff:8b:12:a5:52:9a:5b:e4:ba:3a:f1:25:
                    d7:ad:12:5f:ce:9e:56:cb:17:ac:00:29:63:18:3d:
                    fb:94:d9:98:ab:24:59:28:99:c1:78:d3:3c:74:2c:
                    53:34:19:8e:2f:ab:24:e3:b6:c6:ac:e3:6d:da:c3:
                    33:00:cb:b0:3f:79:a9:a6:47:31:34:25:33:5c:1e:
                    36:b0:97:6c:d1:a8:f5:05:9c:d1:47:26:ac:ca:87:
                    95:17:fc:5a:d2:71:d6:67:94:59:b7:81:c7:43:27:
                    6e:99:f6:9b:d4:d1:90:64:86:e0:c8:c7:62:aa:99:
                    ae:49:a3:0b:ce:d9:3b:ba:98:10:41:47:9c:45:38:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0E:FF:17:AB:5D:79:01:C4:8B:2B:F9:4F:41:E5:3A:3E:FB:01:C1
            X509v3 Authority Key Identifier:
                keyid:2C:AF:5A:D1:DD:D1:EA:C6:11:8C:9F:84:75:50:6A:FB:2C:BC:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF5AD1DDD1EAC6118C9F8475506AFB2CBC2D25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oCcVbyHKkLCf95zkRt3fyisbHYcn3o9oZYZ56ZVbjJk/1/323830343a333264633a3a2f3332203d3e20323632333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:f3:70:f6:63:9d:6a:19:18:e7:e1:8f:6f:71:e1:d8:08:88:
         86:a3:6a:1c:c3:7a:49:fd:1d:3c:b9:ec:0d:a1:b9:af:ee:e5:
         61:16:a7:64:89:80:8a:8d:94:4c:bc:5a:6a:7b:78:21:0d:ce:
         bd:e7:e0:c1:e9:27:3e:93:7c:9f:2a:5b:06:ce:89:dd:17:25:
         ff:e7:37:f9:8f:f8:c9:16:26:a4:79:f1:28:f3:88:86:6d:30:
         c3:5f:e0:d8:d8:90:6c:6a:ce:8d:57:6b:52:30:b0:6a:33:b2:
         db:41:ce:38:26:65:96:25:00:50:0a:5f:78:b9:39:f2:d3:7e:
         e3:1c:db:e4:4c:39:d7:ce:d1:9a:2b:96:79:22:99:9a:78:51:
         dc:ea:c7:8e:21:96:8d:ac:f3:cd:bc:14:2e:b8:16:6c:3d:5e:
         e6:66:d4:39:37:f3:04:cd:83:19:65:6f:9d:9e:bb:9f:e2:19:
         8f:ee:02:b5:b0:03:4c:e4:ec:95:57:53:ea:88:fd:7e:14:78:
         61:ad:43:28:bc:a8:69:bc:3b:92:1e:d5:63:34:81:5a:53:fd:
         ac:3e:cd:62:db:57:45:02:a6:91:42:25:1c:f4:22:52:b9:e6:
         be:c8:6c:46:ea:00:20:28:6a:6b:b6:c5:47:d5:0f:bc:f4:ae:
         d7:f4:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:25 2025 by rpki-client