Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa
File:                     323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa (raw, json)
Hash identifier:          gmnOYwKRaLpVq26C9gG9UnwrPfVOcTT+TmAKx0Q6xFU=
Subject key identifier:   19:75:E8:14:72:14:B5:C6:9C:39:CB:80:11:85:CD:84:25:41:B7:C2
Certificate issuer:       /CN=D54C376960A26972A0B767BDA084048DFFE3673E
Certificate serial:       32552153375BAC8F13BE52EB2CD862CB58AFCEB5
Authority key identifier: D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     2716
IP address blocks:        2804:0:1c00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl
                          rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 15 Apr 2025 03:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:55:21:53:37:5b:ac:8f:13:be:52:eb:2c:d8:62:cb:58:af:ce:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D54C376960A26972A0B767BDA084048DFFE3673E
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3082010A0282010100C30A16640A45DD565A4FBE4C5EE9BED2362260D5DFD07C9A7641476459A8DA4280140B9E20003BA8B5717B356CAC48FD469C96B19BF67FA9F5420E561A10DF362967D48B5E484F1377A6C99A3EFBE90484BF1ED15203E8EAF22F88C16651C0324C84891D560A6AA6619577A8CD8865D7CC76A907CED5481EDFFFD3FA002B623F1E62BA2BBC4AF5BD8606A3822D425645B587554B7A096FB182DC5863D67E9F07A72D3EA33C135D80D3B03A513AE8277044130947833D4BEC153EF0E8083BAB9B650F4A95828A132080636C5EDCB701C08879D7EE11D8D5FCEEF629FD611B67A88B6349EE18C13D91929942506AF182E10891864ADF1F740CA9357D64311FCA010203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:16:64:0a:45:dd:56:5a:4f:be:4c:5e:e9:
                    be:d2:36:22:60:d5:df:d0:7c:9a:76:41:47:64:59:
                    a8:da:42:80:14:0b:9e:20:00:3b:a8:b5:71:7b:35:
                    6c:ac:48:fd:46:9c:96:b1:9b:f6:7f:a9:f5:42:0e:
                    56:1a:10:df:36:29:67:d4:8b:5e:48:4f:13:77:a6:
                    c9:9a:3e:fb:e9:04:84:bf:1e:d1:52:03:e8:ea:f2:
                    2f:88:c1:66:51:c0:32:4c:84:89:1d:56:0a:6a:a6:
                    61:95:77:a8:cd:88:65:d7:cc:76:a9:07:ce:d5:48:
                    1e:df:ff:d3:fa:00:2b:62:3f:1e:62:ba:2b:bc:4a:
                    f5:bd:86:06:a3:82:2d:42:56:45:b5:87:55:4b:7a:
                    09:6f:b1:82:dc:58:63:d6:7e:9f:07:a7:2d:3e:a3:
                    3c:13:5d:80:d3:b0:3a:51:3a:e8:27:70:44:13:09:
                    47:83:3d:4b:ec:15:3e:f0:e8:08:3b:ab:9b:65:0f:
                    4a:95:82:8a:13:20:80:63:6c:5e:dc:b7:01:c0:88:
                    79:d7:ee:11:d8:d5:fc:ee:f6:29:fd:61:1b:67:a8:
                    8b:63:49:ee:18:c1:3d:91:92:99:42:50:6a:f1:82:
                    e1:08:91:86:4a:df:1f:74:0c:a9:35:7d:64:31:1f:
                    ca:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:75:E8:14:72:14:B5:C6:9C:39:CB:80:11:85:CD:84:25:41:B7:C2
            X509v3 Authority Key Identifier:
                keyid:D5:4C:37:69:60:A2:69:72:A0:B7:67:BD:A0:84:04:8D:FF:E3:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/D54C376960A26972A0B767BDA084048DFFE3673E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D54C376960A26972A0B767BDA084048DFFE3673E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eb4AGjfNY9zd7tBmwhTXLTJyFFAFzUFqPgeHUCN1Swa/1/323830343a303a316330303a3a2f34382d3438203d3e2032373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:0:1c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:49:8d:67:c9:cf:28:3a:2d:ff:83:0b:ec:34:f4:c1:4e:1e:
         d7:12:cf:d9:05:5a:3d:10:d3:d9:25:db:bc:5c:ca:69:dc:4c:
         f0:76:f9:15:5b:7b:55:34:b7:73:65:a8:62:68:86:61:64:8e:
         e8:f6:f8:aa:88:fe:0a:a7:18:42:f8:1f:af:57:6f:f9:23:cd:
         3f:56:cb:77:50:3b:e3:20:a4:2b:0c:4c:68:1b:82:e5:ec:3f:
         b6:c6:36:77:a3:a6:ee:2c:6a:24:b5:a2:7d:76:ea:17:36:87:
         c0:82:5e:9b:93:65:74:39:d2:91:9d:96:d8:a4:ff:d5:67:b8:
         b8:c9:e9:d0:d8:71:e4:57:e5:b7:0e:53:56:c2:17:29:06:22:
         42:f0:1a:da:07:73:df:7d:15:5d:a8:47:ad:4d:bf:f8:cc:ef:
         4e:ad:f9:c1:79:f4:46:84:20:1e:1b:36:4a:ef:72:1e:6b:c0:
         36:c1:d3:91:d9:17:9b:83:bb:ba:ec:df:e6:72:4c:bc:dd:ef:
         b0:87:c1:04:80:36:f7:7f:de:3b:97:ca:b9:d3:e4:e8:22:bd:
         39:0a:b2:67:68:ab:4d:66:fb:60:95:aa:27:44:55:a4:90:53:
         c6:a6:5b:e1:fa:08:a5:4e:c4:84:d0:01:19:79:f1:e6:48:67:
         72:c7:f6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:14:38 2025 by rpki-client