Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a323a3a2f34382d3438203d3e20323637343834.roa
File:                     323830343a316136383a323a3a2f34382d3438203d3e20323637343834.roa (raw, json)
Hash identifier:          2shVIyRSnNrK4X7lI0ITHDlTEs0nX7hp/7MSNvz507w=
Subject key identifier:   FD:14:8B:A2:E4:51:D4:10:CF:A6:F9:C7:F1:EE:DE:7F:6B:F7:F0:1D
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       6E9EF34E58E0E589251825034FEACA2149676555
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a323a3a2f34382d3438203d3e20323637343834.roa
Signing time:             Mon 10 Feb 2025 14:41:51 +0000
ROA not before:           Mon 10 Feb 2025 14:36:51 +0000
ROA not after:            Mon 09 Feb 2026 14:41:51 +0000
asID:                     267484
IP address blocks:        2804:1a68:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 19:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9e:f3:4e:58:e0:e5:89:25:18:25:03:4f:ea:ca:21:49:67:65:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:36:51 2025 GMT
            Not After : Feb  9 14:41:51 2026 GMT
        Subject: CN=FD148BA2E451D410CFA6F9C7F1EEDE7F6BF7F01D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:13:45:ab:c1:d7:ce:69:67:e7:90:67:c2:c9:
                    04:a3:39:1f:ae:6a:72:06:39:dc:c7:5a:0b:8a:65:
                    01:cb:1d:97:85:4b:5e:4e:11:bd:27:37:3a:62:94:
                    73:e0:f1:fa:5d:d8:8b:c4:69:43:38:6c:aa:67:6f:
                    da:a7:ce:a5:43:60:f6:7e:8e:ae:fd:4e:0c:e6:66:
                    46:e2:8d:2d:21:0d:c4:bf:b0:5f:d2:29:85:ca:29:
                    d6:a4:ae:b7:c5:3b:0d:9c:aa:6b:1c:14:3a:64:0d:
                    d1:6b:c8:d8:5d:68:fc:cf:02:2b:b5:6b:fb:ba:49:
                    42:ee:4a:75:cc:88:80:5d:c6:94:11:4a:5f:bd:dd:
                    a2:39:3b:d2:3c:47:21:5d:37:93:f5:11:db:67:98:
                    42:40:68:ab:2d:e0:71:75:b0:e1:29:5d:0c:83:ba:
                    53:35:b4:57:05:ea:65:38:a8:ca:d1:9e:18:1c:2a:
                    3a:56:b4:a7:25:2d:7d:c4:bd:87:89:79:82:27:db:
                    66:48:1d:bf:76:33:b8:cb:a2:f7:c3:8a:10:92:48:
                    55:8d:1c:a2:07:66:7e:a0:a6:fa:6c:21:ed:fb:16:
                    e5:3c:7d:18:d9:14:eb:9e:20:ee:ae:29:62:14:95:
                    6e:12:6f:2c:ac:70:fb:47:45:bc:31:4f:05:9b:33:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:14:8B:A2:E4:51:D4:10:CF:A6:F9:C7:F1:EE:DE:7F:6B:F7:F0:1D
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a316136383a323a3a2f34382d3438203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a68:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:dc:02:f1:bb:27:4d:0a:06:10:7a:4b:37:da:0d:cc:02:09:
         3a:b9:a9:92:8f:03:db:80:e1:ca:06:69:73:ca:13:42:d4:52:
         6b:2d:77:7a:84:84:63:fc:d2:75:dd:bb:14:25:d1:47:46:5b:
         7a:79:e8:2e:92:82:27:d6:ed:8a:c1:f1:ec:1a:a4:f9:fa:f8:
         75:82:f3:b0:b2:3e:1d:51:99:10:58:21:c7:1c:94:cb:24:01:
         af:49:fb:c7:a3:93:38:11:8a:6f:db:62:d1:61:50:e3:2a:c7:
         d9:34:62:1b:9d:3b:dd:c9:d7:44:08:6c:ee:77:90:27:68:5a:
         e6:63:e2:b8:c9:14:c0:f4:ad:08:31:c2:d8:69:55:e4:a0:59:
         d5:cb:0a:a8:de:25:2f:0a:c2:be:a2:94:e3:79:99:31:c4:d6:
         ba:e1:dd:c6:cf:ff:e2:85:fa:95:95:15:f8:52:9c:8b:72:1d:
         1b:2e:45:a8:ae:83:4e:4f:21:4a:fc:97:2e:08:f7:52:98:a9:
         66:de:48:79:08:8e:01:31:d4:c3:fa:0b:51:0d:15:bf:51:78:
         17:41:2d:a1:06:45:fb:56:56:fe:87:8e:70:5c:45:be:fd:20:
         bc:58:a5:5c:0e:16:c1:7f:05:f8:80:10:3d:73:06:ff:5c:06:
         96:70:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 11:29:13 2025 by rpki-client