Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33332d3333203d3e203631363337.roa
File:                     323830343a316331383a3a2f33332d3333203d3e203631363337.roa (raw, json)
Hash identifier:          rXQ9mHoAIsBba5+DFq3fYs+NhS/RHHo+vMFQfylLbOY=
Subject key identifier:   E7:AA:F4:B1:AB:9A:EA:02:AD:DF:29:7F:42:25:DD:E5:7D:42:51:81
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       32AE53F2F5B0C3A94586B0E40A49CB694794E215
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33332d3333203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:28 +0000
ROA not before:           Thu 06 Mar 2025 00:55:28 +0000
ROA not after:            Thu 05 Mar 2026 01:00:28 +0000
asID:                     61637
IP address blocks:        2804:1c18::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ae:53:f2:f5:b0:c3:a9:45:86:b0:e4:0a:49:cb:69:47:94:e2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:28 2025 GMT
            Not After : Mar  5 01:00:28 2026 GMT
        Subject: CN=E7AAF4B1AB9AEA02ADDF297F4225DDE57D425181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:15:5b:01:cf:8f:e5:b3:3e:fa:5f:99:e6:a3:
                    fb:ed:71:12:51:66:2d:62:29:ca:01:4c:d8:f6:ca:
                    c2:c2:7e:94:38:6f:d3:94:68:bf:b9:57:20:dc:db:
                    cb:7f:25:a4:c5:66:54:78:86:32:c2:9e:e3:53:36:
                    3a:77:9f:b8:c6:aa:15:d2:61:ba:c6:c1:75:98:48:
                    94:3f:44:a1:a4:79:e6:b7:22:7e:2d:d7:dc:0c:3f:
                    47:55:9b:5d:b3:07:99:10:09:17:c6:b1:de:42:58:
                    f5:a6:c9:8b:03:35:e2:d5:71:3b:1b:bd:81:ed:3f:
                    be:db:66:6c:1a:84:66:40:bf:72:e3:f0:0c:61:da:
                    a8:cf:a5:2c:d2:59:8c:23:a5:bb:83:5f:e3:5a:f5:
                    3b:d1:db:ca:6c:26:12:46:bd:fc:5c:1e:9f:8a:47:
                    89:9b:6b:5c:55:d9:7a:db:ed:1c:0a:aa:1d:ab:e0:
                    4e:36:50:9e:28:5d:7a:bf:65:2e:4f:85:dc:47:6a:
                    36:0b:b5:73:b7:b6:3e:37:d0:ab:67:d2:8c:b0:92:
                    76:31:85:c6:47:29:a2:d0:02:1e:ae:8d:0f:01:e2:
                    4c:a0:0c:87:c2:ae:42:ab:66:06:02:35:cc:65:51:
                    c9:f3:92:82:84:a3:80:4b:de:f0:a1:7a:ed:c4:25:
                    3b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AA:F4:B1:AB:9A:EA:02:AD:DF:29:7F:42:25:DD:E5:7D:42:51:81
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a3a2f33332d3333203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18::/33

    Signature Algorithm: sha256WithRSAEncryption
         98:25:63:39:f5:d6:31:3f:3e:ff:d4:bd:07:6a:cf:45:39:7f:
         bb:9f:78:7b:70:2f:7b:d9:e4:41:d4:14:89:60:00:24:7e:63:
         5c:5e:6d:13:e1:0b:2b:98:33:5d:bf:80:61:46:7d:70:a2:8f:
         12:84:3b:ce:9c:d2:e0:7c:46:4d:fd:63:7f:eb:30:bb:bc:f4:
         31:31:76:ad:ad:e0:df:44:3b:06:37:7b:10:50:f9:69:a0:5f:
         b1:74:a2:8d:23:ba:5f:d8:24:81:32:6d:a2:4b:ec:0a:7e:c0:
         1b:32:89:67:ff:3c:23:16:92:7f:55:e2:4d:b2:f3:e9:3c:1d:
         4b:f1:00:ea:8a:2b:f4:47:a8:40:3b:4e:7a:9c:47:4d:be:ab:
         bd:a3:e7:8b:8e:ca:3b:c1:b1:68:d0:ee:a0:c8:90:16:97:4d:
         f2:16:6d:c9:d6:5f:3e:58:11:bd:e4:43:fa:db:b1:76:b5:2b:
         03:45:f9:28:cb:c4:d1:e1:96:f9:89:86:0b:9e:11:a3:93:43:
         a1:9d:b4:20:e2:60:36:20:3d:b5:e3:ce:24:2a:06:2e:fe:47:
         81:31:9c:9d:45:d3:29:b9:bd:57:1e:a9:fa:65:fa:a7:10:57:
         be:72:01:e5:66:92:55:8b:bf:f1:c5:b1:fe:57:47:d1:4e:19:
         17:59:39:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:59 2025 by rpki-client