Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/323830343a376263383a3a2f33322d3438203d3e20323731343534.roa
File:                     323830343a376263383a3a2f33322d3438203d3e20323731343534.roa (raw, json)
Hash identifier:          uBK4g+e5KL+ZBptZOeXo+tqaatTqaQix+a/Z4+c5BKs=
Subject key identifier:   68:E8:AB:03:A1:62:A2:51:DD:26:1A:23:E8:AB:1C:6E:C7:16:89:44
Certificate issuer:       /CN=1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE
Certificate serial:       6DCC80C2E59DD973D6BA02D813B1D09AF63BCF26
Authority key identifier: 1B:92:E5:F5:32:F4:DB:8B:C3:B6:31:9A:F0:D8:C1:D0:0A:98:6A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/323830343a376263383a3a2f33322d3438203d3e20323731343534.roa
Signing time:             Thu 06 Mar 2025 13:40:31 +0000
ROA not before:           Thu 06 Mar 2025 13:35:31 +0000
ROA not after:            Thu 05 Mar 2026 13:40:31 +0000
asID:                     271454
IP address blocks:        2804:7bc8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.crl
                          rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 14:19:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cc:80:c2:e5:9d:d9:73:d6:ba:02:d8:13:b1:d0:9a:f6:3b:cf:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE
        Validity
            Not Before: Mar  6 13:35:31 2025 GMT
            Not After : Mar  5 13:40:31 2026 GMT
        Subject: CN=68E8AB03A162A251DD261A23E8AB1C6EC7168944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:90:5d:50:0f:a2:bf:2f:91:fa:87:40:4a:
                    90:c7:b5:a6:8e:1d:22:cd:83:c0:01:1f:ed:c6:07:
                    0f:3a:94:cc:e3:84:d2:dd:bd:b0:84:65:b7:fc:a9:
                    26:43:71:21:ff:a9:ea:c4:2c:44:9b:0c:52:02:0b:
                    49:a0:39:9a:2b:c3:07:39:91:c6:d6:d6:45:05:d1:
                    62:0f:7e:66:5c:34:fe:e3:be:a8:1d:4b:f7:f7:d6:
                    37:b0:95:5b:75:7f:c2:33:ec:4d:74:5f:0c:ae:59:
                    e2:c4:55:63:cb:56:6c:8d:63:8e:15:b1:ba:81:64:
                    8d:15:ab:7a:ed:11:b6:8d:83:36:bd:64:5b:20:ed:
                    a9:b1:f0:ce:4f:38:33:ec:8c:a1:b8:c1:d4:75:53:
                    9d:c4:41:e7:fa:f8:62:02:99:bf:18:7d:90:5c:e4:
                    65:f7:db:10:53:ce:20:cb:b6:93:d3:82:17:32:ca:
                    18:48:0e:34:28:06:a8:ac:67:6b:c8:e7:e1:ea:fe:
                    57:fe:86:6f:f6:85:48:f8:1c:e3:0d:10:5c:ab:df:
                    ad:c0:90:18:b9:c4:88:9f:62:c0:02:b6:dc:09:3b:
                    bd:24:d9:ee:25:11:24:b2:9c:4a:fd:0a:d0:b8:74:
                    c9:ef:59:05:c3:8d:0a:71:b6:8e:86:a8:15:ae:3c:
                    76:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E8:AB:03:A1:62:A2:51:DD:26:1A:23:E8:AB:1C:6E:C7:16:89:44
            X509v3 Authority Key Identifier:
                keyid:1B:92:E5:F5:32:F4:DB:8B:C3:B6:31:9A:F0:D8:C1:D0:0A:98:6A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B92E5F532F4DB8BC3B6319AF0D8C1D00A986AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/1/323830343a376263383a3a2f33322d3438203d3e20323731343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:a0:cf:38:ab:25:ab:fc:01:27:f6:ab:54:e5:6e:77:49:89:
         98:04:31:11:f1:60:98:84:8b:d8:9c:75:73:f1:a5:2b:36:4f:
         65:be:f3:d8:97:3a:9d:ae:2d:c8:9b:8f:65:cc:44:95:fc:60:
         ff:56:4e:e9:69:90:1f:a4:3b:8d:37:13:89:49:a2:73:ae:e0:
         f1:78:14:85:b1:19:31:c9:f5:80:79:7c:4e:c6:22:30:d8:26:
         ec:81:06:c0:91:c7:7f:84:86:3a:65:0d:e5:87:db:08:63:28:
         b8:16:e3:19:fa:2e:0f:26:b8:a4:d1:ed:85:70:87:98:db:53:
         af:89:f0:bc:d8:05:3f:3f:ee:41:a9:15:73:48:ae:c7:33:2d:
         ea:33:47:cd:9a:26:6b:bd:dc:8f:e3:96:e6:e9:cb:ee:bd:5e:
         9d:67:40:e0:23:15:66:11:e0:50:e0:34:e1:0b:62:de:22:72:
         ab:30:31:95:10:40:1a:a8:d3:06:bf:ee:38:15:5a:c1:4d:43:
         50:5d:ee:97:41:37:5a:58:38:79:e2:1d:f6:ba:6f:de:ad:44:
         66:29:88:d4:43:9d:19:4b:11:f1:44:30:b2:ca:81:de:14:c7:
         0f:e9:66:9e:46:46:05:22:83:5c:01:19:2f:86:0a:81:4f:51:
         05:83:9a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:08:41 2025 by rpki-client