Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/323830343a3337633a3a2f33322d3438203d3e203532393831.roa
File:                     323830343a3337633a3a2f33322d3438203d3e203532393831.roa (raw, json)
Hash identifier:          Zxp5gjp3ixEkri29zxZgs/Dc1qWtuaC1RFUNy87jgoY=
Subject key identifier:   75:67:85:3F:A1:76:D8:3F:5E:23:41:4B:0C:88:60:B6:0B:35:09:CF
Certificate issuer:       /CN=4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB
Certificate serial:       51B2CBFF26CB0AA6736CDDA1EAE7687C3DC4F89E
Authority key identifier: 4B:C8:5D:25:1A:FF:6A:91:EA:FA:C4:B1:5C:1D:7C:15:FD:7B:8A:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/323830343a3337633a3a2f33322d3438203d3e203532393831.roa
Signing time:             Mon 16 Dec 2024 17:04:18 +0000
ROA not before:           Mon 16 Dec 2024 16:59:18 +0000
ROA not after:            Mon 15 Dec 2025 17:04:18 +0000
asID:                     52981
IP address blocks:        2804:37c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.crl
                          rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 15:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b2:cb:ff:26:cb:0a:a6:73:6c:dd:a1:ea:e7:68:7c:3d:c4:f8:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB
        Validity
            Not Before: Dec 16 16:59:18 2024 GMT
            Not After : Dec 15 17:04:18 2025 GMT
        Subject: CN=7567853FA176D83F5E23414B0C8860B60B3509CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5b:53:97:d0:e2:b9:8d:d9:88:3a:f8:ba:90:
                    95:03:7e:de:3f:3f:e4:e0:9e:6e:af:95:92:ff:cd:
                    fa:64:77:d9:79:ef:02:0f:8c:7b:54:37:49:1c:bb:
                    cc:f0:23:21:2d:a2:cb:97:6a:40:d2:15:e5:61:13:
                    63:2c:ad:04:11:3f:95:b0:c7:b3:87:4e:ec:d7:6a:
                    81:03:30:89:e2:4c:78:58:ad:16:e7:97:57:ea:e0:
                    87:18:f3:3a:a1:09:71:61:82:9a:3a:e7:4d:1c:94:
                    d3:72:01:97:76:b6:e2:2a:94:a5:e6:74:61:0c:4f:
                    6c:98:a6:3c:fe:73:f4:1d:32:b2:18:9e:27:2a:74:
                    b1:b3:a7:bf:52:c4:49:0b:83:40:46:4c:4b:ad:fe:
                    12:fb:b7:cb:0b:30:fe:f8:6f:e8:45:f2:9a:9c:46:
                    6c:68:f3:82:f2:2a:bb:ce:87:ca:91:b5:bb:3e:45:
                    b1:a5:df:6c:1e:34:12:65:42:f5:05:21:69:07:a9:
                    cc:ba:e6:cc:ae:66:5f:18:4f:8e:01:0e:d0:06:c0:
                    b8:eb:e1:92:18:1e:7b:42:e4:fa:9b:e9:4e:5a:fb:
                    42:2b:ae:d5:32:f0:8e:16:c0:47:69:b9:25:d9:63:
                    01:0b:94:4c:13:86:3e:5c:1b:25:4f:03:bc:37:c1:
                    7f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:67:85:3F:A1:76:D8:3F:5E:23:41:4B:0C:88:60:B6:0B:35:09:CF
            X509v3 Authority Key Identifier:
                keyid:4B:C8:5D:25:1A:FF:6A:91:EA:FA:C4:B1:5C:1D:7C:15:FD:7B:8A:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BC85D251AFF6A91EAFAC4B15C1D7C15FD7B8ABB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/323830343a3337633a3a2f33322d3438203d3e203532393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37c::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:93:bd:1b:6f:10:01:3b:95:92:cd:01:92:e5:1b:03:97:d8:
         ff:4e:1c:6c:81:d4:44:6c:ea:a3:4b:f3:0e:a1:03:ee:3b:cf:
         26:9e:27:a3:76:05:ac:f4:79:5c:62:b9:33:62:63:0f:ad:3e:
         d7:bb:f5:e5:6d:ed:39:99:06:2f:62:4f:01:1d:99:67:87:43:
         cd:3f:81:d2:e5:5d:05:7f:c4:5e:c8:2b:f6:06:20:52:80:21:
         4d:87:0a:70:9a:82:07:60:f6:33:0c:0b:0d:d4:90:5e:66:d8:
         0d:c7:4a:f2:e8:90:0c:b9:0d:f0:36:c8:1d:2f:8d:94:55:54:
         31:cb:e2:4b:6b:3e:91:23:07:e2:01:99:f5:a7:c3:03:f5:5f:
         1a:c5:05:e1:7c:24:d5:ae:75:3e:6a:fa:7c:2a:94:2f:ea:34:
         33:d0:c4:e7:20:48:a1:f1:fc:fc:27:66:b1:15:58:8f:f6:c7:
         c2:2e:c6:8d:c5:66:f7:c1:1c:26:47:02:2f:f4:35:28:d8:82:
         9f:90:d6:d2:bc:a2:f9:2f:72:47:95:62:81:7e:b6:79:85:62:
         a5:81:03:74:82:ee:37:ea:2c:ab:6b:77:28:51:14:91:1f:c3:
         c6:39:87:56:3b:6e:6d:95:7e:b1:ae:97:b4:1e:ca:fd:d7:cc:
         68:01:42:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:39:17 2025 by rpki-client