Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa
File:                     323830343a346162303a3a2f33322d3438203d3e20323637323537.roa (raw, json)
Hash identifier:          /I5vajGjFQQ7M9n3lu24TssVjqdIlopWk+bSOlpSkFE=
Subject key identifier:   9B:1D:A8:A0:89:C8:69:FA:E1:72:1C:96:0B:D2:99:31:DB:70:BE:C6
Certificate issuer:       /CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
Certificate serial:       545C2D78FEF141F30C42DC376ECF423098147719
Authority key identifier: A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     267257
IP address blocks:        2804:4ab0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl
                          rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 06:28:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5c:2d:78:fe:f1:41:f3:0c:42:dc:37:6e:cf:42:30:98:14:77:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=9B1DA8A089C869FAE1721C960BD29931DB70BEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:64:1a:72:47:32:51:a2:68:14:54:93:09:6b:
                    ec:26:e5:36:87:03:7f:a5:b4:e0:a3:fe:5d:66:63:
                    dc:a4:fc:52:4e:ba:ef:1b:eb:b7:d0:7d:b6:e3:62:
                    5f:c8:0b:7a:84:97:84:3e:93:c9:1d:03:da:70:b2:
                    e1:e2:33:6a:92:da:8e:c6:d0:a1:9b:45:1a:25:40:
                    54:4a:fb:8a:d2:1f:be:33:60:09:23:e6:23:7e:84:
                    a1:ce:66:51:09:29:e4:6e:86:ab:44:dd:6a:a2:4d:
                    80:f7:b2:1c:bf:79:db:a7:68:1e:08:06:fb:76:e2:
                    8f:d6:af:bb:e3:1a:48:99:7a:9b:75:40:46:e8:54:
                    c3:8f:e9:3b:96:69:f3:ba:e6:5f:39:32:cb:c1:ce:
                    09:e3:b5:84:fe:46:63:39:c2:25:b2:67:a7:c4:77:
                    1e:75:98:58:2c:92:52:a3:52:e5:0d:48:ea:71:45:
                    ba:87:6d:a1:6c:a9:10:6a:ff:a4:85:bf:47:ba:fa:
                    d0:30:3d:63:2c:5b:79:64:9c:58:c2:65:eb:a7:4b:
                    09:21:4b:56:a8:d8:91:9b:86:90:fc:e5:f9:e3:e3:
                    21:02:e6:5c:0f:e5:8e:f4:a9:a1:aa:ec:3f:6b:a2:
                    d8:f5:ce:56:9c:8d:57:d6:34:fd:1a:be:9b:9b:19:
                    c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1D:A8:A0:89:C8:69:FA:E1:72:1C:96:0B:D2:99:31:DB:70:BE:C6
            X509v3 Authority Key Identifier:
                keyid:A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:6e:2c:c0:f7:64:f2:bc:9f:61:e3:ec:33:2b:f6:eb:cd:d1:
         e6:69:4c:2a:77:87:66:85:e0:e8:d1:bb:3a:5f:a7:f5:aa:fe:
         80:03:15:86:51:a4:2d:84:65:33:ec:0b:12:de:ea:da:45:55:
         00:97:88:97:67:98:97:e8:51:df:78:af:2b:bb:51:53:77:58:
         24:61:69:79:b6:8e:75:ad:bd:fc:1f:e4:db:28:6d:ee:bc:12:
         cd:9c:b9:b2:1a:5d:b2:fc:eb:84:d9:3b:3b:8c:27:dc:7f:68:
         36:ff:43:01:78:a7:fe:89:ee:fa:18:15:b8:05:db:f5:b1:fb:
         33:33:c4:5d:8b:00:59:dd:72:84:7a:3a:1f:f9:ba:c0:ed:24:
         79:43:14:ee:4c:f2:ba:67:52:f4:e6:a7:84:8a:fa:83:dd:25:
         07:ea:d4:ba:a4:37:b6:8a:0d:f6:5a:3b:fb:8d:2e:e7:b6:f4:
         f3:13:d0:bf:45:a6:75:cd:a5:44:ad:cc:58:15:bb:61:a6:9d:
         3f:37:40:8d:4e:69:82:2c:df:a1:18:3d:71:9c:3a:f3:52:66:
         0e:db:20:e3:5c:1f:7b:27:09:5a:13:48:28:61:4a:91:de:89:
         0a:d3:71:69:d4:b0:8a:02:e1:1c:23:3c:69:34:c8:8a:69:a5:
         96:9b:c0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:19:35 2025 by rpki-client