Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/323830343a343061383a3a2f33322d3438203d3e20323635393733.roa
File:                     323830343a343061383a3a2f33322d3438203d3e20323635393733.roa (raw, json)
Hash identifier:          EnlWsydM3BoZMPkFufOzNgjBsHv7n2sE9rgeCUC8Jmc=
Subject key identifier:   AE:85:77:5A:79:FB:F9:1C:37:98:35:6B:D1:33:AF:6A:58:AE:38:AC
Certificate issuer:       /CN=57DB3581E707C22BBA17B8AD12B81942965761D7
Certificate serial:       1CA67B8AF646ED126865CDAAC7DAE1152A7C61D8
Authority key identifier: 57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/323830343a343061383a3a2f33322d3438203d3e20323635393733.roa
Signing time:             Wed 28 Aug 2024 13:37:55 +0000
ROA not before:           Wed 28 Aug 2024 13:32:55 +0000
ROA not after:            Wed 27 Aug 2025 13:37:55 +0000
asID:                     265973
IP address blocks:        2804:40a8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.crl
                          rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a6:7b:8a:f6:46:ed:12:68:65:cd:aa:c7:da:e1:15:2a:7c:61:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57DB3581E707C22BBA17B8AD12B81942965761D7
        Validity
            Not Before: Aug 28 13:32:55 2024 GMT
            Not After : Aug 27 13:37:55 2025 GMT
        Subject: CN=AE85775A79FBF91C3798356BD133AF6A58AE38AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:27:97:12:e5:26:3e:bb:ac:bb:b9:1a:4c:73:
                    41:44:5d:b2:c4:5a:81:8f:28:ed:bd:ec:7a:17:76:
                    e6:b3:a5:4a:c2:c2:9e:c6:a0:ac:01:02:78:7b:2c:
                    e8:1b:90:0f:16:01:ed:9d:c2:9b:50:32:44:51:14:
                    e7:0d:11:23:03:44:17:33:d4:c8:0a:ae:d4:9b:f0:
                    45:a5:73:53:26:88:82:76:ee:9d:a7:5b:62:3f:4e:
                    b3:69:1f:d6:3d:2e:f7:4e:af:6c:1c:fc:6d:db:04:
                    d5:e2:6e:2a:29:46:18:82:8d:32:4a:65:5a:52:b0:
                    a1:a0:41:07:59:fa:65:1a:a9:c4:f4:40:b5:af:0d:
                    73:05:08:df:44:20:93:32:6e:5c:c5:72:7b:83:b1:
                    8e:c1:eb:25:c4:e9:a2:2b:04:b3:68:76:05:cb:b2:
                    c3:93:0b:51:be:1d:5e:c1:94:39:f3:29:20:02:34:
                    48:2e:ad:64:be:49:e1:78:6c:77:bc:1e:56:40:82:
                    5a:d0:7a:43:b1:09:59:8a:cf:fd:ba:06:db:90:86:
                    88:cf:2b:80:db:56:a0:7e:7f:ca:13:ff:14:4f:13:
                    a1:a4:14:2d:a8:9c:ef:4e:0f:4c:d3:e5:8c:07:da:
                    78:54:a5:c4:6a:35:1d:d8:f7:58:16:27:5f:2f:20:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:85:77:5A:79:FB:F9:1C:37:98:35:6B:D1:33:AF:6A:58:AE:38:AC
            X509v3 Authority Key Identifier:
                keyid:57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/323830343a343061383a3a2f33322d3438203d3e20323635393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:40a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:00:ad:6e:d2:91:3d:5d:5e:25:49:c6:eb:64:50:bc:7b:
         e1:ad:f0:20:f7:bc:f3:78:f4:9c:47:9c:d1:af:c5:0a:5a:dd:
         b9:b0:06:e5:56:89:8e:ec:e0:bc:cc:db:8b:51:59:84:b3:b6:
         f5:f5:a9:96:75:d2:09:9c:56:5f:8e:bc:97:49:68:0a:1c:be:
         78:02:b5:2f:3a:7a:f9:69:5e:93:f0:fb:50:2d:1b:f0:f0:f9:
         95:9c:d7:c9:27:87:a0:a6:ae:f4:69:26:df:b8:f1:85:93:7d:
         a2:42:96:3d:8b:2d:25:9c:13:59:4a:02:06:b4:c4:7a:20:b0:
         35:d1:42:03:a7:40:e2:59:e7:e5:85:0d:bf:a0:65:8d:3d:1c:
         25:23:34:75:68:61:9d:ca:a5:2e:70:0e:92:57:ab:4c:16:73:
         ec:bf:cc:bc:5f:c2:4f:13:c8:bb:90:88:eb:db:96:90:9b:92:
         df:42:80:c7:a2:89:9e:b5:87:04:f1:6e:6e:8c:2c:a5:e7:52:
         ea:92:c8:6b:d8:1d:c8:cc:fa:07:be:ea:59:b6:37:99:55:ff:
         fd:17:3c:4c:cc:fb:cf:34:4b:c3:16:6f:9e:a0:3c:35:a1:e5:
         54:12:6f:73:2d:03:f5:99:b8:bf:4f:ef:9f:ee:6b:7e:62:26:
         f7:12:66:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:31 2025 by rpki-client