Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/323830343a333831633a3a2f33322d3332203d3e20323636343537.roa
File:                     323830343a333831633a3a2f33322d3332203d3e20323636343537.roa (raw, json)
Hash identifier:          XOiN5TkkeJGZQdKLDundGd6354GQZjNylfmDQFwpezo=
Subject key identifier:   61:57:A3:5B:E4:65:E2:A2:9D:7F:9D:C4:0E:82:48:2B:2A:09:DC:4A
Certificate issuer:       /CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
Certificate serial:       1795587592E2E5AF0036C50B70734B15D6390968
Authority key identifier: 1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/323830343a333831633a3a2f33322d3332203d3e20323636343537.roa
Signing time:             Fri 17 Jan 2025 11:46:31 +0000
ROA not before:           Fri 17 Jan 2025 11:41:31 +0000
ROA not after:            Fri 16 Jan 2026 11:46:31 +0000
asID:                     266457
IP address blocks:        2804:381c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl
                          rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 10:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:95:58:75:92:e2:e5:af:00:36:c5:0b:70:73:4b:15:d6:39:09:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
        Validity
            Not Before: Jan 17 11:41:31 2025 GMT
            Not After : Jan 16 11:46:31 2026 GMT
        Subject: CN=6157A35BE465E2A29D7F9DC40E82482B2A09DC4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:ba:0c:a3:fa:1c:13:3d:76:64:c5:10:c7:
                    4f:d3:cb:c0:52:91:c8:3f:8e:58:fc:31:be:b4:d5:
                    cb:19:a9:5c:0f:e9:9a:30:60:bb:c9:78:c7:64:f4:
                    32:e6:ed:99:a3:58:d1:c7:21:be:d2:ad:92:78:2c:
                    54:74:49:25:aa:b0:9f:bb:bb:3a:af:9a:e3:da:3d:
                    8a:b3:00:a4:43:7c:e2:11:19:70:e4:19:b2:4c:2c:
                    c0:03:ca:bc:06:1c:60:79:d2:01:18:65:bd:e7:7b:
                    54:fd:4f:13:58:8d:e7:67:75:48:ba:b9:80:3d:b4:
                    cf:f3:b6:de:9c:15:03:73:c9:84:63:87:58:91:eb:
                    14:be:44:ea:84:11:73:f3:25:c0:99:a9:50:8b:7c:
                    c9:ec:1e:79:44:0f:48:e7:00:11:c4:c1:3c:12:b5:
                    c3:74:3a:5b:c8:c7:42:a2:8b:f3:90:51:94:ef:e1:
                    14:7a:71:11:7c:f1:ca:76:20:f8:76:fe:d3:2c:ee:
                    33:aa:23:7f:8a:f0:39:1c:6b:61:0e:71:a9:4d:e8:
                    ce:95:ec:73:05:50:28:cf:d2:4d:0e:a5:6b:3f:15:
                    8d:aa:dd:9f:50:41:b5:2f:ea:52:78:11:e2:ca:e8:
                    4d:b3:59:f6:23:37:3c:6d:af:a7:0f:f3:cd:14:4c:
                    92:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:57:A3:5B:E4:65:E2:A2:9D:7F:9D:C4:0E:82:48:2B:2A:09:DC:4A
            X509v3 Authority Key Identifier:
                keyid:1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/323830343a333831633a3a2f33322d3332203d3e20323636343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:381c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:57:e4:d6:11:c0:81:3d:bb:7f:67:62:86:3b:d4:29:b4:73:
         3f:30:7d:d6:0e:20:ca:25:53:cc:39:92:f3:7d:0b:b1:8a:d2:
         59:e4:ff:f1:28:73:6c:f2:7a:47:77:e4:fa:fe:2e:74:3d:db:
         9c:fd:fa:bf:17:22:ea:ba:46:72:3f:2b:d4:f5:f1:43:58:0d:
         12:98:77:02:af:08:a6:a6:18:20:52:cb:e9:b3:d4:42:c9:3c:
         e6:4a:7a:e4:34:4f:f6:bc:0c:30:d2:65:f8:cc:db:ec:64:9f:
         13:03:5a:09:89:09:d6:a8:39:a6:40:88:e9:83:4a:a0:ed:e2:
         95:77:fe:1f:aa:f0:fc:cc:25:c5:bc:09:74:c9:0a:f7:a1:d1:
         85:bb:46:3c:0b:b6:1e:24:d4:71:8e:69:84:9e:2a:b2:75:0f:
         3f:59:99:ca:74:78:1a:bc:a7:cc:cd:56:a2:49:4e:77:db:08:
         08:c6:7c:c8:13:8d:5d:a6:1e:69:d9:c5:95:7a:4d:54:ae:ed:
         9a:c9:7c:a4:aa:07:ab:7d:2e:ec:7b:28:ae:71:22:32:7e:a1:
         18:ed:6f:74:4c:bf:41:58:74:89:61:f4:82:bd:c5:e3:3b:03:
         1d:6a:2d:1a:12:c7:ae:47:9e:cb:9c:21:0a:07:b3:78:61:6d:
         c1:45:c4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:08:51 2025 by rpki-client