Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/323830343a346330383a3a2f33322d3438203d3e20323637333434.roa
File:                     323830343a346330383a3a2f33322d3438203d3e20323637333434.roa (raw, json)
Hash identifier:          C08upb+qw2T+XL95gi3b6NmitM0t/Q28myLy4S8Pl1c=
Subject key identifier:   29:78:77:94:1B:A4:06:33:17:AD:0B:4C:47:49:72:70:B5:9D:B3:44
Certificate issuer:       /CN=C501FDCC1F74D6FC745690F08BEDA01EFBB035F0
Certificate serial:       4C6B8C020C4179D183465A2B017A93723D08D203
Authority key identifier: C5:01:FD:CC:1F:74:D6:FC:74:56:90:F0:8B:ED:A0:1E:FB:B0:35:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/323830343a346330383a3a2f33322d3438203d3e20323637333434.roa
Signing time:             Fri 14 Mar 2025 13:33:10 +0000
ROA not before:           Fri 14 Mar 2025 13:28:10 +0000
ROA not after:            Fri 13 Mar 2026 13:33:10 +0000
asID:                     267344
IP address blocks:        2804:4c08::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.crl
                          rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 21:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6b:8c:02:0c:41:79:d1:83:46:5a:2b:01:7a:93:72:3d:08:d2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C501FDCC1F74D6FC745690F08BEDA01EFBB035F0
        Validity
            Not Before: Mar 14 13:28:10 2025 GMT
            Not After : Mar 13 13:33:10 2026 GMT
        Subject: CN=297877941BA4063317AD0B4C47497270B59DB344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:86:4f:b6:f0:80:4f:b3:38:1d:c6:d4:65:
                    cb:9c:f9:f1:85:d7:31:86:9e:cc:56:4a:c0:7e:a1:
                    a6:b2:76:96:14:68:83:33:14:ca:9a:e6:e2:72:5d:
                    50:a7:41:01:f3:bb:60:ca:4d:22:19:e9:b8:3b:6a:
                    64:da:90:14:14:ff:ca:10:ec:24:7a:e1:aa:4a:6f:
                    50:0f:d9:f5:3a:ad:fe:79:1a:f7:3c:e2:26:25:a7:
                    cd:de:52:90:c4:81:cc:e0:4d:ac:4d:69:11:81:cd:
                    5c:46:9a:34:ef:bb:82:21:09:4e:d9:f9:8e:72:a0:
                    e1:46:87:07:22:4a:b1:f4:25:07:c5:c7:1d:61:8a:
                    a0:db:99:6a:fa:3f:34:4f:7e:0d:69:34:53:5f:44:
                    4e:29:4e:f0:ba:c2:7a:b3:08:96:00:2e:0c:f0:ff:
                    7a:0e:61:fe:45:11:a9:d6:2c:0d:5c:42:31:d2:8b:
                    95:b5:ea:ef:7f:1b:0a:72:88:94:9c:b0:39:2d:b9:
                    14:c8:a7:c8:ee:95:08:27:cc:bc:11:08:8b:aa:1b:
                    93:63:82:69:7b:cf:3e:fb:f5:27:13:d4:b1:81:da:
                    6a:d9:af:1d:a6:8c:fb:af:27:11:db:a6:82:d4:3c:
                    0c:99:0f:66:9f:a3:f3:97:be:e0:2f:b8:41:6a:2f:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:78:77:94:1B:A4:06:33:17:AD:0B:4C:47:49:72:70:B5:9D:B3:44
            X509v3 Authority Key Identifier:
                keyid:C5:01:FD:CC:1F:74:D6:FC:74:56:90:F0:8B:ED:A0:1E:FB:B0:35:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/323830343a346330383a3a2f33322d3438203d3e20323637333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c08::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:55:70:f2:79:41:06:d1:15:af:1e:4e:1a:53:62:c6:80:04:
         f7:b5:53:a4:c7:3c:3d:f9:28:2b:62:e3:8d:5c:c0:59:78:5c:
         dc:35:93:08:99:41:71:35:e9:9b:5c:cc:15:b3:2b:f3:d7:ce:
         e4:8a:3f:d1:9a:23:41:2e:78:8a:96:1f:0c:19:38:61:7b:31:
         e2:f6:5a:63:81:ca:06:b5:a8:e6:9d:a6:0e:89:f1:03:c4:18:
         e8:de:9a:32:50:6b:a3:36:28:c6:ba:3d:db:bc:dc:7d:55:5c:
         8c:86:b2:2d:10:2d:1e:40:94:cc:d5:d9:f9:53:64:f5:d2:f5:
         2a:1b:bb:dd:6f:b4:24:25:17:ec:ff:31:b7:7d:cc:64:87:c2:
         e8:b8:71:4c:8d:0b:19:88:a0:95:ea:47:a8:8f:2c:fd:3e:34:
         70:b5:01:82:ca:09:99:94:f2:96:e3:24:5f:eb:d0:19:42:90:
         d0:c0:32:60:a4:e0:b3:9f:b7:ad:eb:99:77:2f:3a:b0:cc:c2:
         d4:92:46:96:ee:35:84:a0:e4:41:df:ef:ff:57:fb:e3:bb:f6:
         a3:8e:d4:14:18:23:80:81:1e:47:82:72:5a:93:f5:4c:cd:d9:
         a2:52:c2:78:96:00:04:26:62:e3:f7:f8:2d:78:c9:f6:af:08:
         fa:c6:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:42 2025 by rpki-client