Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa
File:                     323830343a363939343a3a2f33322d3332203d3e20323730323739.roa (raw, json)
Hash identifier:          8VEpB0xd0VX/j49eruyLM4U0ob1UYw5ULKbATLfjNDk=
Subject key identifier:   E5:2A:03:80:0A:66:BC:74:D4:07:92:74:F7:21:6F:81:43:FD:38:67
Certificate issuer:       /CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
Certificate serial:       2FB7A305112B41C6A06C34C79471A33C770AEF57
Authority key identifier: CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa
Signing time:             Wed 05 Mar 2025 19:00:25 +0000
ROA not before:           Wed 05 Mar 2025 18:55:25 +0000
ROA not after:            Wed 04 Mar 2026 19:00:25 +0000
asID:                     270279
IP address blocks:        2804:6994::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl
                          rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b7:a3:05:11:2b:41:c6:a0:6c:34:c7:94:71:a3:3c:77:0a:ef:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE4086C53A0E1A19AE5AA00A9874ABBD78563A96
        Validity
            Not Before: Mar  5 18:55:25 2025 GMT
            Not After : Mar  4 19:00:25 2026 GMT
        Subject: CN=E52A03800A66BC74D4079274F7216F8143FD3867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:41:6b:d5:29:68:8f:05:03:2d:7a:88:db:da:
                    fb:16:87:e5:6b:4c:1b:af:fc:11:ea:c9:4f:53:76:
                    2a:06:41:4b:f4:c2:2d:38:67:52:fa:71:1f:19:07:
                    38:f1:8e:41:a0:ab:fb:9b:46:a8:22:db:7e:51:e3:
                    9b:ef:9e:51:4c:49:e6:f3:1e:e1:e8:89:74:ce:1a:
                    b2:f6:41:4d:8a:01:06:82:76:8d:f1:bb:c8:09:8a:
                    60:d4:5e:21:0c:86:a6:bb:2a:60:8f:c2:43:db:59:
                    94:ee:d4:53:54:34:a0:60:75:cb:4b:f8:70:ab:c5:
                    b3:20:ff:11:da:6b:ae:39:64:1e:65:dd:21:71:a4:
                    fc:d9:fd:e7:db:c5:7e:b4:05:01:8b:54:b7:6e:91:
                    c3:77:70:40:3b:b6:bc:6f:7a:6f:6f:9c:0a:2e:26:
                    30:ea:e1:82:41:8b:6e:28:87:0d:f1:dc:d2:96:89:
                    52:1d:ba:db:88:ae:76:76:f1:01:a0:a4:f5:0d:73:
                    29:b2:59:12:f2:2d:56:8a:f0:7d:27:2f:d4:4b:ac:
                    00:87:ab:43:4c:f8:47:70:04:49:cb:68:7f:7c:f7:
                    34:61:e0:2d:7f:02:57:25:01:18:16:ac:af:6a:b3:
                    7a:21:08:5d:ce:8a:f6:17:2e:c4:41:f1:80:7f:98:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2A:03:80:0A:66:BC:74:D4:07:92:74:F7:21:6F:81:43:FD:38:67
            X509v3 Authority Key Identifier:
                keyid:CE:40:86:C5:3A:0E:1A:19:AE:5A:A0:0A:98:74:AB:BD:78:56:3A:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE4086C53A0E1A19AE5AA00A9874ABBD78563A96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKxeUWiYKovBBVAV59CcQAuCYQZ4szeqADcd3hpRfLCR/1/323830343a363939343a3a2f33322d3332203d3e20323730323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6994::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:58:01:d2:2a:0d:57:4a:0c:88:2c:91:af:3f:c0:f0:b9:6f:
         71:cc:06:ed:15:ed:75:fe:3d:3b:97:c6:e5:0d:9b:65:7d:20:
         fc:c5:f4:9e:44:32:37:cc:dd:86:9e:d5:1c:4c:e6:4d:a1:20:
         ba:2c:2c:9c:c8:38:c0:30:e8:a1:f8:77:d1:7b:f2:2a:75:d7:
         e4:dd:e4:0b:e0:41:9d:c9:a7:b7:5d:91:69:24:2b:c5:a3:99:
         54:6f:d7:e8:24:cd:8c:19:83:7c:cb:7a:9b:1b:bf:fe:ee:de:
         8c:33:9e:e2:3d:a4:57:7c:5c:3c:cf:91:e6:19:ac:5e:d0:7a:
         7c:7a:b0:ff:b3:1b:1c:8a:13:d0:62:54:38:7a:0e:ca:1c:16:
         cd:83:22:18:95:78:8a:9c:80:d5:d8:98:f2:5a:22:ce:2f:e5:
         a2:0c:19:4d:19:07:b1:b1:e1:05:04:5a:6c:ae:49:2e:bd:0a:
         b6:f4:c2:31:7c:9e:96:a4:5e:d8:d6:1c:a9:6c:2d:a0:a9:b8:
         0d:4b:5a:28:12:53:18:52:77:ce:8e:7d:2c:2e:80:54:40:61:
         69:00:b1:e4:9e:73:4a:ba:17:fb:bb:c5:eb:60:be:11:94:00:
         a8:d8:64:34:aa:ed:7f:79:d9:31:84:7a:7f:19:c9:98:34:00:
         d9:78:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:19:15 2025 by rpki-client