Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa
File:                     323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa (raw, json)
Hash identifier:          W1292/BcWOTRDGyKIQhRZDZ5ipv8FaYFTRS6yYMZw5s=
Subject key identifier:   57:44:6B:61:FF:9D:87:E5:62:83:2A:A0:E0:4C:87:1F:CC:F9:54:AC
Certificate issuer:       /CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
Certificate serial:       53B572030764C3DA092F0CC4F1AC9838CD5B9329
Authority key identifier: 31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa
Signing time:             Thu 06 Mar 2025 01:00:36 +0000
ROA not before:           Thu 06 Mar 2025 00:55:36 +0000
ROA not after:            Thu 05 Mar 2026 01:00:36 +0000
asID:                     61637
IP address blocks:        2804:1c18:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl
                          rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b5:72:03:07:64:c3:da:09:2f:0c:c4:f1:ac:98:38:cd:5b:93:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A
        Validity
            Not Before: Mar  6 00:55:36 2025 GMT
            Not After : Mar  5 01:00:36 2026 GMT
        Subject: CN=57446B61FF9D87E562832AA0E04C871FCCF954AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:f7:44:28:a8:ba:bd:da:65:8b:db:01:47:
                    35:22:de:ea:a9:c8:1f:8f:28:1b:4d:0f:af:bd:aa:
                    02:f1:bc:c2:e0:a7:58:41:fb:13:cb:07:57:75:43:
                    4b:b7:9c:8a:38:d5:8a:e5:47:b6:b7:5b:2e:fb:ad:
                    48:d9:99:d0:b7:c8:a1:3d:90:3c:0c:53:9f:d9:bd:
                    89:4f:c0:b9:7d:9d:78:19:87:8b:8a:7b:03:6f:93:
                    c5:20:50:27:0a:28:94:c1:3a:09:e5:0a:56:ec:ef:
                    74:20:cf:b1:68:5a:b2:d8:e5:d8:29:66:be:91:5e:
                    8e:ea:49:c6:61:d4:86:f2:f9:94:de:d3:b5:41:08:
                    70:7d:29:bb:4b:1b:08:0b:b9:28:63:e4:5c:7f:ff:
                    0c:e8:8f:ee:a3:ed:bc:8a:da:49:9e:c9:b2:3e:c9:
                    c6:4a:47:b5:d9:e2:92:31:36:0b:2b:64:99:15:fd:
                    d6:a6:7a:19:20:54:96:64:b2:ed:f0:5e:ca:bf:1f:
                    8b:0f:ea:35:26:d2:6f:cb:4a:74:8e:64:c3:2a:1d:
                    e6:26:18:40:87:b6:ce:79:cb:73:8c:c8:41:1e:56:
                    5d:7e:42:eb:03:55:2d:d4:ec:d3:25:6c:f3:90:fa:
                    d4:ad:51:7e:d6:d9:6e:ed:75:8d:19:e9:ef:3e:16:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:44:6B:61:FF:9D:87:E5:62:83:2A:A0:E0:4C:87:1F:CC:F9:54:AC
            X509v3 Authority Key Identifier:
                keyid:31:9F:BA:E5:BF:62:00:F6:0E:F0:9C:DB:C1:B9:00:50:A7:C0:5E:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319FBAE5BF6200F60EF09CDBC1B90050A7C05E0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9sSrf7pfXMP7sFz3qRc66cadPZtHUVwMxDiPk4vxadrF/1/323830343a316331383a643030303a3a2f33362d3336203d3e203631363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c18:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         26:82:fd:6f:0a:2f:b7:47:41:68:25:70:60:c9:90:c4:7b:b8:
         51:78:38:15:de:08:76:50:67:b3:eb:ec:94:63:2e:79:3b:35:
         45:a7:6b:40:90:42:9f:85:8c:b2:9a:7a:c9:11:9d:1a:58:50:
         74:eb:7c:fe:bf:c2:f2:d9:fb:f9:cc:83:65:de:68:5e:bb:b2:
         fc:f2:ec:ec:91:68:67:23:f0:2b:5c:1c:0a:50:5d:c3:b2:9d:
         b4:8d:e2:63:23:ba:f8:00:c2:2d:e2:1f:80:bb:52:10:b0:3a:
         49:7f:a2:6c:f2:bc:c0:25:3e:27:72:59:48:04:70:8c:f2:bf:
         ee:56:e0:14:04:0e:e8:e7:b8:52:be:61:2e:9d:bd:e4:dc:83:
         a4:9c:9e:df:08:73:e1:ac:43:8d:1c:61:c0:a9:1c:94:13:d2:
         32:b4:4c:d2:a7:1e:c7:cc:fb:97:ba:d8:80:51:dc:7e:51:79:
         ff:bc:5d:b8:b4:49:51:bc:d3:f4:61:58:0b:6a:c3:34:ab:18:
         45:9a:5f:1b:f8:7c:fc:8b:79:89:7e:e1:a0:0e:2c:67:63:ba:
         c1:fe:b1:f5:48:21:82:f2:ec:38:e9:37:f7:85:be:4a:51:61:
         9a:47:33:84:65:3a:8e:d5:fc:b6:78:36:1b:06:2a:e1:ae:d0:
         6d:a3:bf:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:10:54 2025 by rpki-client