Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363030303a3a2f33382d3338203d3e203533313733.roa
File:                     323830343a6534633a363030303a3a2f33382d3338203d3e203533313733.roa (raw, json)
Hash identifier:          qMURHb0bng8I3/t+sRlQoRHLvlDzbFWS4XMFdQ58AIE=
Subject key identifier:   2A:2D:4C:CC:C9:19:F8:6F:55:8C:F6:5D:9B:30:BD:25:D1:60:09:CC
Certificate issuer:       /CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
Certificate serial:       0E17C970C408372E168B9A96695B6D4DD0BC120B
Authority key identifier: AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363030303a3a2f33382d3338203d3e203533313733.roa
Signing time:             Thu 06 Mar 2025 02:41:54 +0000
ROA not before:           Thu 06 Mar 2025 02:36:54 +0000
ROA not after:            Thu 05 Mar 2026 02:41:54 +0000
asID:                     53173
IP address blocks:        2804:e4c:6000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl
                          rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 08:39:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:17:c9:70:c4:08:37:2e:16:8b:9a:96:69:5b:6d:4d:d0:bc:12:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC900D8B6183D3194381784B68CA9C9D75CCAF76
        Validity
            Not Before: Mar  6 02:36:54 2025 GMT
            Not After : Mar  5 02:41:54 2026 GMT
        Subject: CN=2A2D4CCCC919F86F558CF65D9B30BD25D16009CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:ad:8b:f0:ed:f1:fa:dc:f2:60:4c:6f:b5:
                    2f:06:c9:85:71:3c:df:88:f6:91:70:6e:db:ad:f7:
                    1b:c1:73:4e:4b:9b:b3:6e:bc:48:e9:b7:9e:18:88:
                    9b:08:ae:09:3f:8f:1c:1c:5e:23:14:1b:65:35:e1:
                    5e:1d:84:0a:f6:24:b9:30:38:dc:cf:64:30:f3:82:
                    b7:2a:31:18:96:d7:d3:1d:42:9d:23:5f:22:68:f4:
                    3c:20:b3:bd:64:4a:97:2d:07:0a:19:15:71:5c:06:
                    ae:3f:99:1e:3f:0b:11:a1:7a:55:15:29:0e:1f:a7:
                    5d:28:e7:b6:e4:fc:a4:b1:df:fb:61:dd:2a:30:d8:
                    a3:04:af:8f:b7:0a:ed:be:e3:1a:5e:d9:01:29:0a:
                    19:c8:95:7b:d3:6f:19:47:16:3c:26:4f:b7:73:31:
                    e6:78:50:bc:42:af:67:36:1d:e0:88:32:95:9b:ca:
                    51:8f:c2:3c:5f:3e:cb:18:93:a8:e6:2e:8f:af:04:
                    f8:a0:39:83:d8:4a:d1:d6:25:92:57:c8:7a:4a:90:
                    47:fe:ce:1d:45:4c:89:d0:d2:68:ab:ff:15:ad:db:
                    dd:8b:65:45:6a:f5:32:db:44:a0:d1:fc:83:e6:eb:
                    71:ee:0e:fb:a9:c2:f0:fe:03:e8:e3:56:50:a5:51:
                    02:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2D:4C:CC:C9:19:F8:6F:55:8C:F6:5D:9B:30:BD:25:D1:60:09:CC
            X509v3 Authority Key Identifier:
                keyid:AC:90:0D:8B:61:83:D3:19:43:81:78:4B:68:CA:9C:9D:75:CC:AF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC900D8B6183D3194381784B68CA9C9D75CCAF76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/As6mTcYF2tKJB7CatcHzjLKa77oMmeDLT1PPTsWFkTS6/1/323830343a6534633a363030303a3a2f33382d3338203d3e203533313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e4c:6000::/38

    Signature Algorithm: sha256WithRSAEncryption
         bd:10:ab:34:ba:8a:3d:7f:b3:b2:a0:78:4a:41:55:09:79:29:
         17:8e:33:0e:1e:49:f8:7d:b6:88:7a:3e:07:33:3c:b1:f3:4b:
         f6:df:e0:e8:20:ce:e7:c1:83:7e:55:2f:89:2f:6f:63:a5:db:
         d2:b3:09:0a:98:a3:91:c9:f4:1e:91:a2:59:9c:17:7d:af:71:
         50:7d:27:d1:88:5f:de:85:f4:70:71:8a:b3:d1:cd:3c:ab:5f:
         9b:f6:f0:34:c9:dc:8e:4f:b0:b6:44:49:3e:91:cf:f4:c9:86:
         90:86:07:b6:05:23:9c:45:30:e8:e6:22:1c:8b:e8:b4:1d:9f:
         5a:81:aa:f1:c9:27:dc:4d:8d:02:5c:a3:0e:23:4a:de:b0:19:
         af:43:f6:c6:62:ff:79:5d:04:7b:db:aa:c0:97:3b:9b:ca:99:
         9b:dc:b6:87:7d:35:8f:00:52:4f:02:5d:a0:52:ee:b2:8a:46:
         45:ea:15:8d:92:b2:76:e2:21:b3:98:93:5c:46:ca:28:9c:c2:
         90:af:f1:22:15:69:13:e7:04:23:06:ed:f0:7f:db:b3:af:ff:
         fb:34:5d:2c:42:5d:10:4b:03:d3:54:02:c9:a9:20:8a:c8:c9:
         13:23:b1:4a:73:3a:08:62:be:b6:ee:2f:91:14:c2:86:a5:24:
         9e:ff:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:47:59 2025 by rpki-client