Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/323830343a376433633a3a2f33322d3336203d3e20323731353438.roa
File:                     323830343a376433633a3a2f33322d3336203d3e20323731353438.roa (raw, json)
Hash identifier:          /IE6CWiBh26f81Kr4BpZCRexpRhO9B1cxAQNhAOXkPY=
Subject key identifier:   93:03:66:02:41:5E:3C:23:EC:36:65:13:F1:1C:D1:74:7A:58:D4:60
Certificate issuer:       /CN=090868DBC98ADC1F6A723C3495F8BFBDF361207C
Certificate serial:       4B60341826E1123EAA1A9B65206843F64D64C87D
Authority key identifier: 09:08:68:DB:C9:8A:DC:1F:6A:72:3C:34:95:F8:BF:BD:F3:61:20:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/323830343a376433633a3a2f33322d3336203d3e20323731353438.roa
Signing time:             Wed 22 Jan 2025 18:43:03 +0000
ROA not before:           Wed 22 Jan 2025 18:38:03 +0000
ROA not after:            Wed 21 Jan 2026 18:43:03 +0000
asID:                     271548
IP address blocks:        2804:7d3c::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.crl
                          rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 05:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:60:34:18:26:e1:12:3e:aa:1a:9b:65:20:68:43:f6:4d:64:c8:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090868DBC98ADC1F6A723C3495F8BFBDF361207C
        Validity
            Not Before: Jan 22 18:38:03 2025 GMT
            Not After : Jan 21 18:43:03 2026 GMT
        Subject: CN=93036602415E3C23EC366513F11CD1747A58D460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:1f:0d:83:5d:62:83:cd:c6:47:1a:f1:1c:
                    20:44:70:ea:86:48:1a:56:c8:56:53:2f:e2:1e:19:
                    a9:6a:77:04:7d:6e:5d:c5:5c:9e:7b:da:09:52:25:
                    47:79:a0:85:ef:3c:90:c0:19:27:fe:80:d4:ce:6b:
                    34:cb:dd:79:25:eb:e0:73:f4:c7:78:48:be:2c:f3:
                    d4:f3:5d:75:97:5a:f9:d3:ad:95:cf:2e:70:1c:d8:
                    c8:33:12:04:cc:bc:c7:2f:81:c1:86:fd:83:0e:1b:
                    db:a4:94:57:df:de:ee:05:13:2c:7f:05:91:99:ad:
                    36:da:1f:b2:be:c7:14:da:3a:d3:16:f4:0c:74:e4:
                    3b:c4:f8:93:b0:18:1e:04:ed:0a:81:69:24:ed:f3:
                    f9:9c:db:9e:49:e5:bb:5a:74:14:59:2e:0f:8f:ac:
                    b5:c3:5a:24:43:8f:28:08:36:9b:01:36:dc:2a:33:
                    96:e3:ac:7a:d8:cf:e4:33:54:28:96:85:95:f3:9b:
                    89:52:5c:07:ef:0e:0e:3b:79:28:51:44:c7:9f:f7:
                    fa:8f:36:b8:05:56:cd:4e:4b:13:bd:c6:bb:4a:6f:
                    d1:9e:2d:3d:5a:80:53:f6:39:f0:85:c2:59:61:35:
                    c7:49:7b:29:09:02:43:90:a2:58:b6:71:ee:6a:14:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:03:66:02:41:5E:3C:23:EC:36:65:13:F1:1C:D1:74:7A:58:D4:60
            X509v3 Authority Key Identifier:
                keyid:09:08:68:DB:C9:8A:DC:1F:6A:72:3C:34:95:F8:BF:BD:F3:61:20:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/090868DBC98ADC1F6A723C3495F8BFBDF361207C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/1/323830343a376433633a3a2f33322d3336203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:55:1e:0b:f5:7e:e8:54:19:ae:3f:bd:b5:74:c2:43:f9:5a:
         a5:88:f5:4b:21:36:26:11:5b:29:f2:2d:5b:46:a0:c3:dc:4e:
         5a:84:4f:b0:15:b3:63:e4:22:bc:49:6b:ef:6b:e9:31:fe:9a:
         29:1d:c8:8d:fc:26:c3:f0:03:5a:79:a2:17:c5:24:53:7d:29:
         82:83:45:87:29:a8:70:d7:bb:91:63:73:f3:34:18:9b:62:19:
         7b:74:9a:a0:04:34:3a:77:9f:2d:45:d2:b2:86:5d:5e:ac:d1:
         a2:ff:ed:23:26:cf:9d:6c:e9:07:79:18:6d:dd:ca:a4:ba:34:
         a7:a6:7f:15:89:30:51:e4:4c:f5:de:ca:11:41:d3:f3:be:04:
         e9:43:69:fe:25:34:34:be:06:89:13:63:68:8a:8c:80:82:5c:
         04:5f:ef:c4:e7:26:ef:0e:a2:4e:ab:c5:4a:30:59:af:21:db:
         6d:43:59:91:8e:87:f7:d6:2a:90:a1:cd:00:8d:49:40:17:70:
         99:6a:2b:4b:38:fb:ef:0e:af:99:2f:84:36:49:3d:aa:d8:4e:
         e9:62:41:1d:1b:4e:7f:19:35:ea:d5:71:c7:7e:fd:78:8b:0a:
         a7:23:6c:3a:c7:47:18:c6:86:6c:fe:be:3f:10:f8:40:37:4e:
         fb:10:38:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 08:45:32 2025 by rpki-client