Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/323830343a343766343a3a2f33322d3438203d3e20323637303838.roa
File:                     323830343a343766343a3a2f33322d3438203d3e20323637303838.roa (raw, json)
Hash identifier:          qSBoW+Ob1tLlfRMUs9EIwcC3TV6iuSkkOp4nHdvRW0g=
Subject key identifier:   D7:AB:66:11:1E:36:48:3A:48:22:D6:78:C1:26:98:25:B3:06:01:2D
Certificate issuer:       /CN=C72086566EE782E49254BF59EB3177E027E3F1E6
Certificate serial:       51427A97270BF28468F16F5F948B9B182371FC9C
Authority key identifier: C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/323830343a343766343a3a2f33322d3438203d3e20323637303838.roa
Signing time:             Thu 06 Mar 2025 04:01:05 +0000
ROA not before:           Thu 06 Mar 2025 03:56:05 +0000
ROA not after:            Thu 05 Mar 2026 04:01:05 +0000
asID:                     267088
IP address blocks:        2804:47f4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl
                          rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 09:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:42:7a:97:27:0b:f2:84:68:f1:6f:5f:94:8b:9b:18:23:71:fc:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C72086566EE782E49254BF59EB3177E027E3F1E6
        Validity
            Not Before: Mar  6 03:56:05 2025 GMT
            Not After : Mar  5 04:01:05 2026 GMT
        Subject: CN=D7AB66111E36483A4822D678C1269825B306012D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:c8:cc:04:18:a7:70:f1:65:ba:5b:70:e7:
                    19:82:05:0c:33:86:72:28:c0:27:da:2c:b9:64:41:
                    c1:82:7d:32:74:7b:4f:05:8e:28:12:05:8f:4c:8b:
                    6e:1e:53:6c:a2:b1:e9:97:ab:3d:c4:36:39:56:30:
                    0c:f1:8e:a4:6c:d7:cf:83:94:81:bd:45:e4:98:2e:
                    fd:63:1e:b9:74:f9:9c:cc:34:c6:c1:44:f3:c4:98:
                    23:21:4c:de:ad:f3:90:62:33:be:44:c9:bc:e9:72:
                    25:6a:2a:c9:b6:c4:c4:c2:be:f8:b9:5c:c5:80:cb:
                    7e:7b:a3:6f:53:eb:9c:0c:78:b5:76:a8:8f:f2:64:
                    77:e6:c5:4f:40:34:fd:ff:0f:26:52:a4:4a:f7:e0:
                    d1:3d:4d:dd:f6:2b:6a:eb:2f:be:78:6d:a8:7c:47:
                    f1:12:92:43:ea:2c:6e:0f:14:43:95:3c:37:f7:35:
                    b9:e1:6a:2f:92:a7:31:1d:95:6c:87:1f:52:e8:f4:
                    6c:26:66:bc:db:5f:cc:b8:57:56:f9:b2:bb:81:42:
                    7a:6e:38:12:d2:c9:18:bb:8b:ec:d5:a5:a5:bb:e9:
                    52:b3:bc:0b:b5:00:a6:81:3c:b6:38:a4:c5:06:66:
                    c9:d2:b6:65:33:6b:23:0c:b2:86:56:41:c5:03:5c:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AB:66:11:1E:36:48:3A:48:22:D6:78:C1:26:98:25:B3:06:01:2D
            X509v3 Authority Key Identifier:
                keyid:C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/323830343a343766343a3a2f33322d3438203d3e20323637303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:95:89:02:0d:a7:51:1f:fa:49:f5:42:82:aa:f1:26:6c:1c:
         f2:e4:36:9c:a6:c2:85:ed:8a:9f:7e:1b:db:dc:30:68:83:f0:
         54:b9:3b:2c:66:f7:14:29:90:7d:d4:0b:85:02:0d:a9:3a:5d:
         d5:30:31:ee:8c:64:23:e9:58:27:8f:7d:4a:1a:02:70:11:c9:
         67:d8:6f:94:93:ca:da:38:db:b3:8f:9b:ed:4b:d1:48:02:93:
         13:67:46:6d:2a:fc:c0:d8:bd:fb:fe:d3:22:0e:ef:6b:82:1c:
         11:a3:ec:8e:17:7f:57:ef:18:e0:09:b6:2d:7e:a8:d0:87:58:
         45:ea:66:58:b4:7f:87:b7:43:f8:fc:1c:cc:cd:cb:2b:c1:47:
         3a:ef:ec:da:91:6a:76:35:af:28:09:b0:a6:97:c2:60:b9:af:
         7f:1d:7c:d8:d4:95:9b:5b:50:cf:ce:bd:77:ab:c7:07:85:81:
         dc:d2:33:fc:ad:29:90:a7:c5:3c:d7:cf:39:a1:33:af:1e:19:
         1b:73:3a:77:eb:a6:be:b6:59:fd:c3:ab:84:a7:6f:9e:7e:9e:
         ed:7f:8c:b5:ad:40:6c:96:e3:3a:59:8a:82:5c:76:f9:b3:19:
         38:b4:21:93:d6:9e:ba:37:8c:b6:0b:1e:19:eb:b3:e5:a9:dd:
         f0:05:b2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:51 2025 by rpki-client