Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/323830343a316231633a3a2f33322d3438203d3e203631373039.roa
File:                     323830343a316231633a3a2f33322d3438203d3e203631373039.roa (raw, json)
Hash identifier:          cEKthVn7ry7z/MuAAv3xjBi/MSpE9dNv5ZIkzNb8LfE=
Subject key identifier:   4B:5F:B5:30:B2:D1:8B:AA:DC:CF:3B:4A:44:F0:B5:2D:69:8F:B9:4E
Certificate issuer:       /CN=EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34
Certificate serial:       7CF03CA983717002B6F5EC876F0A64FA75070FC2
Authority key identifier: EA:07:CB:42:A7:DC:EB:70:8A:94:E2:A1:5A:A0:C4:6F:A5:27:1E:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/323830343a316231633a3a2f33322d3438203d3e203631373039.roa
Signing time:             Thu 06 Mar 2025 03:16:35 +0000
ROA not before:           Thu 06 Mar 2025 03:11:35 +0000
ROA not after:            Thu 05 Mar 2026 03:16:35 +0000
asID:                     61709
IP address blocks:        2804:1b1c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.crl
                          rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 18:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:f0:3c:a9:83:71:70:02:b6:f5:ec:87:6f:0a:64:fa:75:07:0f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34
        Validity
            Not Before: Mar  6 03:11:35 2025 GMT
            Not After : Mar  5 03:16:35 2026 GMT
        Subject: CN=4B5FB530B2D18BAADCCF3B4A44F0B52D698FB94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:d3:e1:8a:0d:8d:03:b0:8a:45:b1:03:ca:
                    35:8d:f1:a9:5d:9f:cc:b7:0d:ae:da:23:b0:f3:8a:
                    a6:2e:27:f5:6f:ab:f8:76:2e:d0:ed:65:2a:da:10:
                    1f:c3:d0:9f:75:42:c3:c0:f0:00:cc:67:a0:06:f8:
                    38:06:c1:8f:35:fd:91:36:b7:10:71:19:28:69:b5:
                    19:33:55:34:18:3b:89:cf:8a:5c:4f:f8:a9:e0:f4:
                    b2:75:e7:f3:71:f6:6a:b1:26:95:9e:19:94:57:02:
                    e0:a8:d6:5f:7f:e1:17:20:b7:33:2c:1c:3a:f0:b2:
                    0c:f4:d1:af:29:4f:bd:12:5a:84:1c:d9:88:a5:51:
                    02:89:99:66:4f:f6:09:8a:d6:a2:a2:a3:3d:7d:c8:
                    3c:24:af:98:fb:72:62:b8:42:7d:00:10:fc:57:49:
                    28:e0:13:1f:29:48:2a:67:9d:91:a7:1e:44:f7:05:
                    12:be:3d:7d:ee:eb:94:7d:12:e6:d7:c2:dc:d4:56:
                    db:8d:bd:d5:0b:12:88:a1:37:07:40:8a:7f:9b:86:
                    cd:26:1b:0a:84:8f:79:b9:c4:bb:ec:21:b6:4f:00:
                    28:3e:4b:a4:17:0f:e2:e0:4f:97:ab:c7:1c:34:c5:
                    0b:81:be:70:48:52:e9:b2:0f:d4:a8:b8:f3:1b:ff:
                    8d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5F:B5:30:B2:D1:8B:AA:DC:CF:3B:4A:44:F0:B5:2D:69:8F:B9:4E
            X509v3 Authority Key Identifier:
                keyid:EA:07:CB:42:A7:DC:EB:70:8A:94:E2:A1:5A:A0:C4:6F:A5:27:1E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA07CB42A7DCEB708A94E2A15AA0C46FA5271E34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C2LDajWWHoJXmfj6T2WNHFuAKtERWzKe9CUawCMLkZpo/1/323830343a316231633a3a2f33322d3438203d3e203631373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:a0:0b:51:54:73:b9:48:4b:f7:5d:40:5b:24:46:96:a4:ed:
         83:d3:1d:4d:5d:32:8d:96:4e:ab:73:d0:44:1d:8d:dd:7a:6f:
         ba:69:4e:a3:d3:e0:bb:24:20:69:f3:ab:f0:da:dd:84:b1:4a:
         33:45:ba:4b:ef:5b:84:ca:e9:be:41:ec:44:ae:5a:68:45:a4:
         e7:da:ac:63:92:2f:30:13:c0:f8:b4:96:37:26:79:5f:7d:f2:
         a0:91:80:54:67:60:b7:01:9b:3a:79:56:0e:8d:ff:10:2d:bc:
         ca:53:69:2a:c2:cf:a9:93:a2:4c:00:1d:45:7f:0e:0d:7a:b8:
         a3:30:47:c5:34:93:f4:d8:95:b7:16:02:4d:f8:da:81:97:60:
         84:65:b8:cb:73:0d:db:6c:0b:39:8d:a5:c2:d6:11:6e:c1:91:
         47:58:07:7f:90:85:90:4d:5c:d2:24:ef:2d:bf:0e:df:a2:79:
         34:02:f9:41:da:65:53:81:cb:f3:99:1c:d1:0d:43:87:88:5d:
         4f:3d:6e:42:64:90:43:23:29:6c:4f:5e:0f:e0:02:8a:67:3b:
         aa:16:b9:34:60:4f:8e:33:7e:27:92:6a:82:6b:80:f5:f2:86:
         5d:15:c8:bf:00:85:13:c4:b5:41:52:0e:9a:7c:ba:1c:a7:36:
         9b:33:d5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:51:19 2025 by rpki-client