Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a3a2f33342d3334203d3e20323731353139.roa
File:                     323830343a376363633a3a2f33342d3334203d3e20323731353139.roa (raw, json)
Hash identifier:          LJg0qIswYi2VO/edZihG1bpazFMYcqSZVFlGIuj3Nqo=
Subject key identifier:   0F:B1:72:62:A6:59:61:99:99:39:66:12:B0:A5:9D:AB:08:33:16:C9
Certificate issuer:       /CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
Certificate serial:       1FD535A3AA3DFE4F8A1E452345B90C5220D8533D
Authority key identifier: 2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a3a2f33342d3334203d3e20323731353139.roa
Signing time:             Fri 07 Feb 2025 19:21:24 +0000
ROA not before:           Fri 07 Feb 2025 19:16:24 +0000
ROA not after:            Fri 06 Feb 2026 19:21:24 +0000
asID:                     271519
IP address blocks:        2804:7ccc::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl
                          rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 14:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d5:35:a3:aa:3d:fe:4f:8a:1e:45:23:45:b9:0c:52:20:d8:53:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF887F8235B5F7A13DECACAEC8C940A740BF480
        Validity
            Not Before: Feb  7 19:16:24 2025 GMT
            Not After : Feb  6 19:21:24 2026 GMT
        Subject: CN=0FB17262A659619999396612B0A59DAB083316C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6b:1d:f7:33:b5:1e:53:fd:42:10:4d:11:5c:
                    97:b8:cf:79:5c:59:bc:9a:9b:6e:ea:45:d6:cc:ca:
                    aa:a0:2d:25:57:d4:46:fc:c8:23:8f:6f:bc:c1:f7:
                    94:db:07:4f:13:7b:7d:d8:1d:21:ef:84:f9:35:93:
                    42:e3:45:bb:d9:96:9d:67:0c:ee:70:07:d2:f1:07:
                    90:2f:32:71:30:09:d7:8b:70:ca:23:22:13:c1:b1:
                    e9:fe:c2:2c:1b:81:6f:59:cf:64:62:4b:f4:25:18:
                    0e:95:ee:b3:6c:98:06:7a:86:e9:2a:15:f9:5f:5d:
                    e5:41:10:31:f8:0a:69:02:cb:ff:18:0e:13:8c:6b:
                    28:db:f9:8d:74:d3:47:1d:76:18:f4:61:93:1b:b9:
                    d9:d9:52:b8:13:f0:9c:14:8c:e1:00:46:5b:8d:e5:
                    62:64:9b:af:1d:ae:c9:16:b3:92:01:54:96:ad:b5:
                    81:6a:7b:57:87:ea:78:78:6f:37:53:2c:8a:0c:e0:
                    f1:66:2b:50:cf:f9:9f:0b:84:13:44:7a:34:e8:55:
                    a9:df:05:59:f9:5e:0d:8f:3d:e2:6e:fc:b8:fa:48:
                    1c:0e:a1:6c:3e:40:b1:dc:fc:92:70:8e:9e:af:63:
                    43:67:2d:ed:45:76:e4:bb:3b:b2:b5:4f:8e:dd:3a:
                    50:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B1:72:62:A6:59:61:99:99:39:66:12:B0:A5:9D:AB:08:33:16:C9
            X509v3 Authority Key Identifier:
                keyid:2E:F8:87:F8:23:5B:5F:7A:13:DE:CA:CA:EC:8C:94:0A:74:0B:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/2EF887F8235B5F7A13DECACAEC8C940A740BF480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EF887F8235B5F7A13DECACAEC8C940A740BF480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/APGNgex2xoYeUYdCBbDhMjDMaR7ECLMQqhX9hsKpzAKc/0/323830343a376363633a3a2f33342d3334203d3e20323731353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ccc::/34

    Signature Algorithm: sha256WithRSAEncryption
         7e:86:92:c4:9e:1e:9a:f6:9e:30:c2:4e:54:2d:b9:91:35:48:
         14:b7:f1:0f:ed:5d:c3:9b:a6:44:b0:49:dd:49:12:87:79:6b:
         e8:73:61:bd:33:46:10:e3:83:0c:97:07:f3:2e:13:78:1c:11:
         79:03:e9:b9:cb:29:41:12:d4:0f:e7:3b:de:5f:1a:81:b4:a0:
         3e:6f:9e:e1:59:cb:02:2b:dd:32:cf:c9:78:1e:b6:50:a6:08:
         54:1a:44:d1:2a:de:3f:68:65:15:0c:df:61:29:01:1a:51:f6:
         05:0f:11:9e:ab:14:50:3f:a4:b4:97:bf:29:f8:51:43:11:63:
         56:6c:ad:30:8d:f5:97:37:45:0f:6a:ac:2a:40:4f:56:4a:d5:
         5f:9b:bf:b7:c2:e7:7b:50:a4:24:74:31:4d:b2:8c:22:23:87:
         f1:28:18:e9:fe:97:97:76:50:9d:7f:05:b6:52:d4:71:f7:6a:
         e5:89:6d:ea:35:54:c5:a2:36:df:ce:64:a4:7f:d3:42:40:a8:
         fd:56:4b:c0:c9:e5:e9:dd:5e:bf:f8:d8:4f:49:9f:d0:93:5a:
         7a:05:49:1f:c4:5e:b0:47:20:fc:21:c3:c8:9a:37:19:79:fa:
         67:26:38:bb:47:26:aa:36:05:73:37:7d:62:4a:f9:b7:99:44:
         41:e9:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:31:26 2025 by rpki-client