Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/323830343a346362303a3a2f33342d313238203d3e20323637333835.roa
File:                     323830343a346362303a3a2f33342d313238203d3e20323637333835.roa (raw, json)
Hash identifier:          MxN3sQ7DiVIAbxEmIqtHs315v2THdCLVIjHFC01hUkw=
Subject key identifier:   D9:34:EC:56:50:F5:45:CD:93:9A:95:81:DB:25:46:0F:80:FE:E0:EE
Certificate issuer:       /CN=2544A744BF63CAFEE703C310B888A17EEA5620E4
Certificate serial:       1B53A4CDB6C518458D2C6B54A8F40C12AC37724C
Authority key identifier: 25:44:A7:44:BF:63:CA:FE:E7:03:C3:10:B8:88:A1:7E:EA:56:20:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/323830343a346362303a3a2f33342d313238203d3e20323637333835.roa
Signing time:             Sat 08 Feb 2025 21:14:46 +0000
ROA not before:           Sat 08 Feb 2025 21:09:46 +0000
ROA not after:            Sat 07 Feb 2026 21:14:46 +0000
asID:                     267385
IP address blocks:        2804:4cb0::/34 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.crl
                          rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:41:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:53:a4:cd:b6:c5:18:45:8d:2c:6b:54:a8:f4:0c:12:ac:37:72:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2544A744BF63CAFEE703C310B888A17EEA5620E4
        Validity
            Not Before: Feb  8 21:09:46 2025 GMT
            Not After : Feb  7 21:14:46 2026 GMT
        Subject: CN=D934EC5650F545CD939A9581DB25460F80FEE0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:48:64:06:fa:51:54:84:45:e2:5a:18:d4:b9:
                    79:f0:f4:6f:1a:c5:1c:6d:43:25:c7:7c:ff:20:d9:
                    f6:f4:67:c9:a6:ee:f6:aa:bc:fd:fd:c4:4e:5c:25:
                    3e:83:81:70:d9:ff:79:65:ff:8f:5a:d0:3a:27:b1:
                    d2:10:3d:98:36:c6:14:59:94:db:b1:80:27:0f:e8:
                    d4:23:d5:d8:3c:ea:49:a3:86:53:96:94:0c:5e:62:
                    8f:7f:c9:56:93:7c:55:c5:4f:57:8f:6e:c6:c2:98:
                    15:49:f9:77:9b:48:4a:e3:c3:24:d3:17:ed:57:be:
                    da:0b:ad:bc:f5:23:d6:57:ba:ed:6b:19:7a:02:a9:
                    cf:7f:5c:ba:59:e5:40:ec:c4:fc:1a:42:17:91:ba:
                    ef:bd:af:58:3e:fc:e9:93:8a:11:12:44:1d:1b:e2:
                    8b:71:e8:c1:9c:55:30:63:38:cb:23:42:72:37:51:
                    83:07:d3:34:cc:c4:c4:60:ab:23:a8:02:74:d6:b8:
                    76:72:85:d0:d1:ec:39:76:c8:e2:17:d5:3c:14:af:
                    13:b2:e0:8c:9b:0e:6c:53:be:74:98:ef:65:a8:69:
                    34:db:10:e2:2e:e1:97:28:c8:89:33:52:6f:e7:f1:
                    47:d8:fe:d1:9b:03:16:f0:47:7a:fb:dc:65:2f:f9:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:34:EC:56:50:F5:45:CD:93:9A:95:81:DB:25:46:0F:80:FE:E0:EE
            X509v3 Authority Key Identifier:
                keyid:25:44:A7:44:BF:63:CA:FE:E7:03:C3:10:B8:88:A1:7E:EA:56:20:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/2544A744BF63CAFEE703C310B888A17EEA5620E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2544A744BF63CAFEE703C310B888A17EEA5620E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/323830343a346362303a3a2f33342d313238203d3e20323637333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cb0::/34

    Signature Algorithm: sha256WithRSAEncryption
         5a:74:4e:54:44:b6:8e:33:42:36:bd:7c:6e:21:6b:15:16:9d:
         c0:5c:3a:8d:15:e8:e2:e4:37:71:36:e9:da:8d:f4:07:e1:ed:
         62:c0:2d:0e:5e:83:3d:b2:02:3c:f7:01:6f:29:7d:3f:45:60:
         21:86:96:c5:36:6b:49:e2:1a:4d:ac:c3:fe:af:1f:cf:0d:d0:
         54:05:70:e1:50:26:40:bd:e3:48:70:78:fe:2e:8b:d3:0c:fa:
         d7:6c:d5:93:ef:a2:6c:eb:33:1f:da:dc:0b:6e:f5:99:86:25:
         5f:f5:48:74:71:cf:a3:8d:79:1e:f5:37:75:73:fe:43:38:d2:
         05:90:fe:78:c6:31:f6:07:b3:8f:d1:44:16:fb:f2:64:6a:92:
         37:fd:5a:de:63:63:04:dc:8c:ca:25:75:40:7d:ad:c7:96:67:
         c1:5e:6e:8c:8a:64:0b:64:48:4b:f5:2f:92:6b:06:bb:2d:3e:
         ab:46:6e:11:07:65:f3:11:ec:f1:62:68:a8:9b:73:1c:4a:3f:
         9c:1c:ca:2b:67:97:9a:1d:67:24:9d:1a:11:b9:67:57:9c:86:
         35:f9:5e:fa:ce:d8:f2:06:88:7d:0b:d6:7f:a1:ed:ff:bf:58:
         e4:a7:a7:78:e8:93:30:3c:f4:9a:7c:07:e2:fc:78:70:3a:fd:
         dd:9b:7e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:40 2025 by rpki-client