Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/323830343a376263383a3a2f33322d3438203d3e20323731343534.roa
File:                     323830343a376263383a3a2f33322d3438203d3e20323731343534.roa (raw, json)
Hash identifier:          aOLviBr8somORj+0WpAjkZh3nOqd7jihQP5882XO0e4=
Subject key identifier:   75:AC:06:91:F3:F0:25:AC:99:27:4D:21:BE:00:79:08:4D:85:C5:7E
Certificate issuer:       /CN=1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE
Certificate serial:       43CDC083B888BCE7F5E8AB8C8DA29DE49B81A33D
Authority key identifier: 1B:92:E5:F5:32:F4:DB:8B:C3:B6:31:9A:F0:D8:C1:D0:0A:98:6A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/323830343a376263383a3a2f33322d3438203d3e20323731343534.roa
Signing time:             Thu 06 Mar 2025 14:13:58 +0000
ROA not before:           Thu 06 Mar 2025 14:08:58 +0000
ROA not after:            Thu 05 Mar 2026 14:13:58 +0000
asID:                     271454
IP address blocks:        2804:7bc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.crl
                          rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 07:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:cd:c0:83:b8:88:bc:e7:f5:e8:ab:8c:8d:a2:9d:e4:9b:81:a3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE
        Validity
            Not Before: Mar  6 14:08:58 2025 GMT
            Not After : Mar  5 14:13:58 2026 GMT
        Subject: CN=75AC0691F3F025AC99274D21BE0079084D85C57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:be:28:d9:f0:69:d1:07:d7:c0:42:1a:67:
                    38:2f:88:3b:a6:1a:e3:50:79:24:3d:e8:bd:df:bd:
                    e5:91:b1:4d:fb:2a:aa:83:9f:19:86:8f:30:b0:78:
                    5d:07:3a:20:b5:ac:aa:30:46:76:84:c4:ab:b9:84:
                    7f:f0:63:0a:6d:45:7b:1d:b8:83:28:f4:66:92:74:
                    b3:2d:62:95:d9:15:34:58:9c:98:4c:02:12:4a:50:
                    3d:3a:5b:ad:b9:f2:c6:79:ea:4f:09:32:a4:0f:2e:
                    7e:1d:69:ce:a7:b5:77:90:4f:c6:57:73:53:31:1e:
                    15:75:36:1e:ae:0a:3a:a9:31:b2:8f:ce:54:b9:3e:
                    cb:b3:d3:6b:80:d0:49:da:15:c7:31:83:2a:ed:f9:
                    d9:8a:00:f3:5f:bd:ab:c6:ef:23:bd:25:85:09:5b:
                    54:56:ca:d9:1e:2c:f7:1d:bd:22:63:95:4c:87:ba:
                    ec:f6:a7:17:74:3a:78:0e:2e:c9:35:97:e6:c6:4a:
                    96:fc:58:c4:1a:4e:06:23:7b:90:31:8b:d2:5b:52:
                    ee:f0:db:1d:97:c1:3f:b0:56:9a:e6:e8:69:56:09:
                    47:00:98:14:84:d0:6a:06:a1:d4:78:c8:3c:8d:ea:
                    d7:2b:5a:c9:75:01:ca:f2:9c:27:f0:7e:58:a1:ec:
                    12:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AC:06:91:F3:F0:25:AC:99:27:4D:21:BE:00:79:08:4D:85:C5:7E
            X509v3 Authority Key Identifier:
                keyid:1B:92:E5:F5:32:F4:DB:8B:C3:B6:31:9A:F0:D8:C1:D0:0A:98:6A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/323830343a376263383a3a2f33322d3438203d3e20323731343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:d8:a8:7c:00:2f:2e:c8:a0:0b:32:3f:48:82:e2:ae:63:f8:
         a3:d0:14:c0:b2:c6:33:7d:ed:24:3d:3c:f9:da:b6:79:fe:29:
         b7:97:76:78:e0:d7:9d:c3:67:95:37:7d:9e:34:a0:21:65:35:
         92:21:4a:c8:bc:57:a6:f6:f7:a7:5b:9e:a8:9d:df:b3:dc:97:
         cd:ff:59:6a:d1:e6:5d:98:bf:80:f4:b1:f4:fc:ac:1c:23:88:
         f2:1d:46:44:73:00:20:a2:1c:f2:09:97:9f:10:a0:13:8c:94:
         dc:86:4d:b1:ee:fe:e4:6d:c7:f4:2f:0f:e9:cf:d1:b1:88:12:
         4c:c6:40:c3:8d:b5:de:a6:d1:2c:3b:c7:3e:47:28:4e:02:ee:
         85:d4:9e:8c:60:bb:99:36:51:7a:43:8e:ab:18:8e:fe:c2:39:
         76:f4:f5:3a:72:06:ed:02:e5:7e:ba:86:13:c4:55:6a:4e:8d:
         fe:01:ee:d9:0c:7f:da:63:74:c7:32:e8:1e:84:bc:ad:2e:42:
         e2:c0:ec:2e:cb:a5:43:28:b8:f0:1d:2a:b2:41:fe:5a:7d:b6:
         2b:0e:0f:fe:e6:21:7a:62:ce:a5:00:3a:8b:78:7b:34:1c:9e:
         ae:d0:3f:d6:98:b1:a3:bf:49:9c:34:f3:6b:33:bb:e8:0e:95:
         4c:13:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:53:54 2025 by rpki-client