Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa
File:                     323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (raw, json)
Hash identifier:          1qApqT8c98HJfSZVdIpkogEpxPHVsWJrpgIqGByb4/4=
Subject key identifier:   A8:EA:FC:B0:1E:07:EF:F9:95:42:06:3A:CA:AF:D2:8A:80:27:C6:B4
Certificate issuer:       /CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Certificate serial:       2E8802A407D288626D47EE2277CE37AF4188CC9F
Authority key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa
Signing time:             Fri 07 Mar 2025 01:25:35 +0000
ROA not before:           Fri 07 Mar 2025 01:20:35 +0000
ROA not after:            Fri 06 Mar 2026 01:25:35 +0000
asID:                     267549
IP address blocks:        2804:431c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
                          rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:88:02:a4:07:d2:88:62:6d:47:ee:22:77:ce:37:af:41:88:cc:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
        Validity
            Not Before: Mar  7 01:20:35 2025 GMT
            Not After : Mar  6 01:25:35 2026 GMT
        Subject: CN=A8EAFCB01E07EFF99542063ACAAFD28A8027C6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:d8:c8:3e:a8:d1:22:c1:7e:64:7a:1b:8e:
                    dd:21:55:5e:a5:27:0e:92:a8:51:4b:4a:76:0f:2e:
                    bb:0b:8a:77:87:c6:86:a4:11:08:58:79:c9:0a:59:
                    d7:70:25:db:85:77:7f:48:5d:5e:b7:b3:77:a8:e4:
                    98:e1:01:e5:02:9d:3b:74:cf:f2:0f:0c:12:5d:e5:
                    e6:6f:e3:ae:fd:73:12:9b:14:d0:5f:d1:5a:7a:71:
                    0b:6e:99:5a:80:ee:f5:ee:81:e0:bb:43:bf:62:58:
                    b8:0f:ba:a2:7e:2f:f8:61:e3:df:60:9a:4c:90:56:
                    6d:52:fc:89:75:02:9a:62:31:49:a8:2b:f7:c6:9d:
                    e1:2c:38:1d:08:b9:b5:ac:ee:d7:65:b7:aa:df:fa:
                    a7:b7:19:b7:7e:10:f6:ab:0a:59:80:b8:73:bf:6b:
                    8a:4d:0f:b0:8b:bf:7f:7d:b1:b4:69:81:60:f1:a0:
                    cb:e4:10:bb:fc:e5:8b:9b:2e:b1:4b:a6:d4:7b:b0:
                    b5:8d:56:cf:4b:60:94:67:a4:e6:fe:e0:69:81:a1:
                    79:39:96:ed:f4:91:2f:62:47:dc:de:c4:52:3a:e5:
                    ec:c3:e4:f3:87:be:3a:19:49:a1:b6:93:ae:f0:21:
                    fb:8b:fc:e0:d9:89:b1:69:dc:36:3e:3c:b3:cb:b1:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EA:FC:B0:1E:07:EF:F9:95:42:06:3A:CA:AF:D2:8A:80:27:C6:B4
            X509v3 Authority Key Identifier:
                keyid:94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:431c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:16:d9:61:15:04:23:a9:fe:69:7b:97:fb:8a:81:4c:d9:80:
         15:2b:0a:ae:8d:e7:57:7e:8e:a6:cc:c9:6b:f4:75:bd:16:14:
         c7:79:70:6a:95:40:16:c4:32:a2:8c:96:14:ce:4b:6a:06:0f:
         77:67:0d:f8:9c:ee:9a:64:bf:38:65:22:82:ed:f2:11:58:23:
         86:6e:1f:21:74:8c:c9:e4:71:a5:10:e9:b1:35:90:08:76:84:
         a1:e9:a4:62:20:52:07:44:cb:c3:1b:18:d6:c7:8c:c8:af:f6:
         2a:36:80:4c:12:41:44:c1:96:ef:56:4f:1f:06:7f:c5:d8:65:
         1e:e1:d8:31:81:ed:3e:b2:81:1a:54:2d:b4:56:43:a8:ee:16:
         c8:59:0c:8a:ce:74:71:6b:2a:a5:97:ff:92:2c:01:5f:a4:c7:
         ec:12:6f:b5:34:8e:20:d6:62:1f:52:5c:fb:60:77:9a:e6:2c:
         f8:a8:55:a4:33:a3:28:03:97:3f:26:07:a3:32:93:7b:72:6e:
         e9:cf:59:66:d7:cd:64:31:65:e3:c6:95:34:21:14:24:4a:74:
         12:3b:ec:0e:9b:00:18:0e:fc:52:e9:a4:33:b4:77:2f:49:a5:
         70:d6:6c:8d:72:75:55:f1:74:20:4a:e9:39:55:fd:50:e9:41:
         d6:70:5f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:21:38 2025 by rpki-client