Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/323830343a333761343a3a2f33322d3438203d3e20323632353433.roa
File:                     323830343a333761343a3a2f33322d3438203d3e20323632353433.roa (raw, json)
Hash identifier:          ik/vnn5PqmLu33j68d8HnEO554LFD//GZWm2hETyXQ8=
Subject key identifier:   C1:87:BE:6F:7A:51:3E:CB:D2:9C:19:6C:7B:8D:CB:EE:B8:C4:F4:A4
Certificate issuer:       /CN=AE466D7909B281D340C712F382B9405A03BD4381
Certificate serial:       4E5DC7D6FE423DBC2F18C758A4B6B49F4EE8A015
Authority key identifier: AE:46:6D:79:09:B2:81:D3:40:C7:12:F3:82:B9:40:5A:03:BD:43:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE466D7909B281D340C712F382B9405A03BD4381.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/323830343a333761343a3a2f33322d3438203d3e20323632353433.roa
Signing time:             Tue 21 Jan 2025 20:35:02 +0000
ROA not before:           Tue 21 Jan 2025 20:30:02 +0000
ROA not after:            Tue 20 Jan 2026 20:35:02 +0000
asID:                     262543
IP address blocks:        2804:37a4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/AE466D7909B281D340C712F382B9405A03BD4381.crl
                          rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/AE466D7909B281D340C712F382B9405A03BD4381.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE466D7909B281D340C712F382B9405A03BD4381.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 07:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5d:c7:d6:fe:42:3d:bc:2f:18:c7:58:a4:b6:b4:9f:4e:e8:a0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE466D7909B281D340C712F382B9405A03BD4381
        Validity
            Not Before: Jan 21 20:30:02 2025 GMT
            Not After : Jan 20 20:35:02 2026 GMT
        Subject: CN=C187BE6F7A513ECBD29C196C7B8DCBEEB8C4F4A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cd:2f:9e:31:32:51:01:78:20:5d:d8:04:12:
                    d9:52:30:4a:92:99:5d:0c:33:80:76:eb:21:25:02:
                    18:85:3b:e1:a4:82:57:ba:10:0e:15:09:e0:c8:0a:
                    56:1e:ad:c2:0a:81:f6:58:6e:b9:98:d7:5d:87:25:
                    e4:5b:3f:b0:2e:ff:2a:0c:20:f6:ac:d5:08:1d:07:
                    52:1d:76:10:65:d1:33:4f:ad:f4:e1:b0:65:82:da:
                    56:d2:95:c8:31:fb:b2:67:f0:84:72:83:56:f4:4b:
                    ed:53:b3:86:60:00:db:de:00:4d:a2:0f:bf:53:cb:
                    9d:b1:0d:2a:05:a5:4f:7c:0b:ad:97:5a:0b:c6:ef:
                    e6:39:26:25:9e:a6:b8:b8:01:70:04:b8:10:df:7f:
                    a2:ef:b5:bd:06:75:7e:a9:eb:ca:9d:1f:44:97:24:
                    69:06:2a:7c:1a:27:3e:81:f1:5c:31:ca:92:70:03:
                    2e:8f:67:d0:28:52:70:03:73:c9:d6:d9:0c:7a:18:
                    4a:8d:d4:67:97:8b:d2:78:75:02:12:98:5b:dd:e7:
                    30:c8:29:92:30:2f:9e:4f:64:75:de:60:9b:7e:b3:
                    8c:fc:bb:19:51:0a:95:48:ba:2e:19:9b:f5:2c:b0:
                    7a:12:48:68:58:10:54:11:21:13:04:64:af:a1:0f:
                    cf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:87:BE:6F:7A:51:3E:CB:D2:9C:19:6C:7B:8D:CB:EE:B8:C4:F4:A4
            X509v3 Authority Key Identifier:
                keyid:AE:46:6D:79:09:B2:81:D3:40:C7:12:F3:82:B9:40:5A:03:BD:43:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/AE466D7909B281D340C712F382B9405A03BD4381.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE466D7909B281D340C712F382B9405A03BD4381.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/323830343a333761343a3a2f33322d3438203d3e20323632353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:68:aa:fb:94:da:d8:ba:d4:03:a7:02:46:a1:cc:7d:41:b5:
         ec:a1:27:73:5c:c4:35:3d:3b:2f:db:72:4c:0a:0e:52:0d:e2:
         ad:eb:13:f9:98:de:9f:76:b3:d0:d6:bc:89:64:72:d2:55:9a:
         12:d2:00:f6:4d:a0:3e:09:5c:f4:29:0c:74:e2:e0:97:99:7f:
         96:4a:b6:9d:8b:03:91:e5:33:62:3d:ff:9d:1d:fe:e1:c6:84:
         15:c8:7b:39:eb:87:09:5d:fe:71:11:f6:2d:b0:34:6a:53:65:
         4d:ae:3a:30:2d:9a:33:05:3c:63:20:e3:7e:da:ad:bd:27:a7:
         c1:23:0a:b0:f7:dc:e2:60:2e:b5:4b:79:85:11:41:3b:8a:ac:
         11:a0:37:f8:a1:49:df:08:06:6b:1f:6c:2e:bb:74:f0:03:9b:
         b2:c6:14:0d:d6:0a:e8:0c:c7:74:d2:92:15:dd:16:a4:42:70:
         32:23:a8:af:83:95:0b:d5:bf:ca:3e:db:b3:3b:73:51:3f:ac:
         7e:38:a1:b8:75:75:b7:0e:13:25:83:f8:65:58:13:4f:60:b5:
         75:0e:cf:66:c1:a4:04:39:a4:56:e9:20:9b:a3:39:cd:b5:25:
         fa:8e:0a:c4:b9:e5:52:01:f4:14:fa:7e:7b:b5:4d:2c:2e:82:
         37:87:26:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:19 2025 by rpki-client