Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/323830343a313739633a3a2f33322d313238203d3e20323633313539.roa
File:                     323830343a313739633a3a2f33322d313238203d3e20323633313539.roa (raw, json)
Hash identifier:          nLTtmKuRdfLF5MAAWAaMqKfrGI3WbR+yF1cw9si6Lc8=
Subject key identifier:   D8:0A:00:D8:F6:30:A2:88:F1:0B:DB:05:B0:D6:6B:D6:4F:47:18:4F
Certificate issuer:       /CN=E1C71E033F9FB5C689EC6374AFC130B5653EF62C
Certificate serial:       73ADD857B3EB8C3B3314341CE14E6EF0DE6337C5
Authority key identifier: E1:C7:1E:03:3F:9F:B5:C6:89:EC:63:74:AF:C1:30:B5:65:3E:F6:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/323830343a313739633a3a2f33322d313238203d3e20323633313539.roa
Signing time:             Thu 06 Mar 2025 01:48:20 +0000
ROA not before:           Thu 06 Mar 2025 01:43:20 +0000
ROA not after:            Thu 05 Mar 2026 01:48:20 +0000
asID:                     263159
IP address blocks:        2804:179c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.crl
                          rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ad:d8:57:b3:eb:8c:3b:33:14:34:1c:e1:4e:6e:f0:de:63:37:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1C71E033F9FB5C689EC6374AFC130B5653EF62C
        Validity
            Not Before: Mar  6 01:43:20 2025 GMT
            Not After : Mar  5 01:48:20 2026 GMT
        Subject: CN=D80A00D8F630A288F10BDB05B0D66BD64F47184F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:0d:2a:d2:53:10:01:b0:16:54:8a:7c:20:
                    b6:73:5c:df:bd:30:5d:3d:5e:9b:f2:7c:a7:0a:f7:
                    4f:69:bc:8c:54:6e:89:91:f4:95:07:a5:55:72:5f:
                    87:5f:08:39:f1:c1:d7:e8:4a:59:b5:5d:23:84:71:
                    ca:6a:54:7d:d2:b1:83:94:f9:c9:e5:7f:73:68:6f:
                    52:24:9a:6e:e5:9c:91:cd:f6:42:7e:4a:fa:70:4e:
                    4b:84:70:2e:b2:a6:fc:b6:08:f0:2d:e3:6c:e4:5f:
                    a5:5a:ca:8c:d7:78:66:4d:86:47:cf:45:d3:86:e3:
                    8b:e8:fa:f1:52:18:62:b2:9d:22:99:4c:ab:fa:c7:
                    8b:ec:6f:af:0f:3f:b8:a5:a3:54:3b:06:96:7e:bd:
                    ee:99:49:59:64:4d:7b:41:87:0d:99:3a:f1:b8:f2:
                    97:e5:9a:44:9a:72:1d:23:ec:e8:a1:4e:95:0b:8a:
                    49:3b:25:bb:da:4b:d3:3e:28:16:1f:88:89:43:67:
                    36:a5:e9:1b:49:01:1c:82:2e:1a:ce:7c:fe:d4:eb:
                    c9:15:82:76:bb:c5:d8:bf:18:83:0d:89:49:a4:d4:
                    b3:f3:3b:25:3e:84:a3:18:0c:f6:93:d4:d1:ba:a2:
                    cc:b8:eb:06:ea:e1:d0:4f:33:08:c2:a0:87:3c:33:
                    d3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0A:00:D8:F6:30:A2:88:F1:0B:DB:05:B0:D6:6B:D6:4F:47:18:4F
            X509v3 Authority Key Identifier:
                keyid:E1:C7:1E:03:3F:9F:B5:C6:89:EC:63:74:AF:C1:30:B5:65:3E:F6:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1C71E033F9FB5C689EC6374AFC130B5653EF62C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A31kPeiZLkLu5KdqEe6FEjYZf1JFgj6nhcPtd6y1SCuU/1/323830343a313739633a3a2f33322d313238203d3e20323633313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:179c::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:7b:1b:32:01:eb:62:5c:4e:bd:c6:66:a0:23:ca:fb:80:36:
         17:af:4d:e9:50:e0:10:95:0f:de:ec:8c:84:cb:de:8f:f7:9e:
         d8:0f:61:32:d5:8f:34:9b:c2:13:cd:fe:5a:af:5e:80:cf:70:
         6f:f5:21:df:3b:50:1b:7e:38:e8:d6:4f:9d:b8:8c:0d:77:13:
         75:93:71:b7:39:c3:2d:63:6e:24:04:57:09:ed:24:2e:94:18:
         8b:e7:b8:e3:a7:2b:0e:33:59:83:fe:c7:a9:88:49:d9:3c:a7:
         37:7c:8d:7f:ab:de:b4:df:68:1f:2e:ec:04:9e:9b:a6:ec:d6:
         c4:f4:05:d2:57:b4:4a:1e:4c:a6:32:dc:e0:42:3e:f1:28:39:
         bd:e0:66:3d:e6:51:c3:c8:4c:90:42:1b:1c:d8:2c:7c:87:8a:
         09:46:c9:1c:a9:0e:f5:0c:2d:5b:54:61:07:4e:ab:9a:6a:4a:
         e7:1a:63:74:48:ea:24:2d:6f:00:db:6b:dd:42:7f:f8:f6:50:
         60:a0:40:c4:c7:3f:e9:29:fc:32:47:b3:9a:9f:ec:25:ab:a3:
         3e:3b:14:40:72:9b:00:70:1d:07:02:92:8e:eb:bc:1b:a8:c0:
         10:d4:7b:89:97:7e:0a:e0:37:9e:90:95:6f:88:ed:4d:57:80:
         34:8e:3e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:20:22 2025 by rpki-client