Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a343162383a3a2f33322d3438203d3e20323637343532.roa
File:                     323830343a343162383a3a2f33322d3438203d3e20323637343532.roa (raw, json)
Hash identifier:          Gago1U4J4DXiKU/rX+LIZ7/PD/8VKqf2A8290xiAcjc=
Subject key identifier:   09:30:1A:97:70:E6:6A:33:5C:2B:55:82:1D:EA:1D:B8:08:AC:72:92
Certificate issuer:       /CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
Certificate serial:       718BA1FA2DD79BAEEE6B54436FCDBF1A2AF56C71
Authority key identifier: A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a343162383a3a2f33322d3438203d3e20323637343532.roa
Signing time:             Mon 10 Feb 2025 14:33:17 +0000
ROA not before:           Mon 10 Feb 2025 14:28:17 +0000
ROA not after:            Mon 09 Feb 2026 14:33:17 +0000
asID:                     267452
IP address blocks:        2804:41b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 06:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8b:a1:fa:2d:d7:9b:ae:ee:6b:54:43:6f:cd:bf:1a:2a:f5:6c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2
        Validity
            Not Before: Feb 10 14:28:17 2025 GMT
            Not After : Feb  9 14:33:17 2026 GMT
        Subject: CN=09301A9770E66A335C2B55821DEA1DB808AC7292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:45:d9:f3:c3:20:e4:b0:b6:e9:2c:45:7d:
                    95:c4:2b:7b:01:6d:9f:24:52:84:e6:12:dd:66:ab:
                    58:97:d4:77:7b:8b:49:4d:f3:2d:42:79:0e:bb:ee:
                    d1:b3:f7:1b:cd:be:58:c9:16:58:33:32:6c:99:8c:
                    5e:33:95:4b:e0:2f:d7:12:da:91:96:51:61:ce:36:
                    71:8a:f3:e3:33:25:c5:62:a8:57:5f:93:83:57:00:
                    df:3e:14:b2:25:eb:74:a5:3a:eb:ca:4c:92:c3:63:
                    e0:f8:aa:d5:d3:72:42:65:af:fc:79:dd:db:5b:f1:
                    61:b9:14:2f:e3:46:50:b4:a8:f5:73:c7:43:82:f1:
                    90:56:57:61:84:37:2f:ea:50:23:0e:f3:9f:fa:27:
                    64:98:d4:78:06:12:ca:28:95:09:96:ca:cc:d7:7d:
                    14:52:ef:08:58:c1:f5:75:c5:8a:0a:09:5d:05:db:
                    4f:d3:d9:8d:3c:6e:d9:e9:55:e7:37:50:20:93:d1:
                    6f:d2:6b:bd:b1:f1:a2:ae:32:43:bc:c7:8a:68:79:
                    57:9b:22:9d:ac:ee:c6:f1:1f:e9:bb:48:e7:ed:9f:
                    38:bf:6f:53:6d:50:ff:53:53:a0:92:38:18:78:a0:
                    2b:1b:6e:23:2c:33:27:08:32:10:80:44:c6:f0:7c:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:30:1A:97:70:E6:6A:33:5C:2B:55:82:1D:EA:1D:B8:08:AC:72:92
            X509v3 Authority Key Identifier:
                keyid:A5:1F:A8:C0:E8:04:B4:CF:C8:DD:1E:05:3C:24:54:81:ED:0F:66:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A51FA8C0E804B4CFC8DD1E053C245481ED0F66C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/323830343a343162383a3a2f33322d3438203d3e20323637343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:0a:de:85:4e:2f:20:f6:1b:db:52:9c:b3:b1:60:38:13:45:
         2e:2f:d3:9b:21:34:ed:55:ee:68:04:ae:3f:19:a1:c7:65:c1:
         43:dc:5d:ad:ce:32:2a:73:74:fa:b3:4b:fd:93:a9:d4:b2:ac:
         e1:07:d2:e8:d6:2d:99:80:d5:d3:63:6e:5a:cf:8f:29:0a:b5:
         87:64:83:0b:63:85:3a:a2:65:ad:cb:c0:fa:8c:cc:44:7a:e0:
         b1:de:20:e9:3a:16:56:38:e6:9b:88:cd:80:6e:e2:2b:a8:73:
         88:07:ac:dc:97:55:e7:92:3c:e3:ea:0b:d5:c4:1e:10:42:d0:
         ed:ea:b0:6f:05:53:8c:2c:ec:52:c7:46:4d:d8:f1:30:43:09:
         94:9f:5f:83:d0:5d:b4:cb:d6:82:17:10:74:36:ec:87:9e:ef:
         11:88:9f:e5:88:66:9f:3e:f3:26:2e:b0:bb:7f:1c:06:c4:0f:
         0f:ee:f1:17:83:1e:4b:7b:80:9c:03:7a:18:cf:ed:69:0f:cd:
         56:cd:fb:92:f3:28:df:78:3c:aa:5b:7a:0d:4b:ac:65:14:12:
         23:e0:ea:c9:88:e3:4b:c2:d6:64:f4:8c:90:32:00:3e:16:b0:
         f0:95:ab:98:19:b9:61:27:99:78:9e:17:2f:d3:d9:96:7e:44:
         ef:9b:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:59:15 2025 by rpki-client