Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/323830343a373736633a3a2f33322d3438203d3e20323731313737.roa
File:                     323830343a373736633a3a2f33322d3438203d3e20323731313737.roa (raw, json)
Hash identifier:          Lk2TjinnyRLjYCqIwRiXjdSZRCMZuc0b5mUt24HYAEw=
Subject key identifier:   31:E4:FB:07:42:AD:63:EB:4F:D4:89:53:32:59:94:A2:39:9A:07:5F
Certificate issuer:       /CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
Certificate serial:       326C7E5486AD99803B7465B18C480AA7D249A0A3
Authority key identifier: F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/323830343a373736633a3a2f33322d3438203d3e20323731313737.roa
Signing time:             Thu 06 Mar 2025 16:01:06 +0000
ROA not before:           Thu 06 Mar 2025 15:56:06 +0000
ROA not after:            Thu 05 Mar 2026 16:01:06 +0000
asID:                     271177
IP address blocks:        2804:776c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl
                          rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:6c:7e:54:86:ad:99:80:3b:74:65:b1:8c:48:0a:a7:d2:49:a0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
        Validity
            Not Before: Mar  6 15:56:06 2025 GMT
            Not After : Mar  5 16:01:06 2026 GMT
        Subject: CN=31E4FB0742AD63EB4FD48953325994A2399A075F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:5d:24:02:24:ac:17:93:16:d3:21:fb:8b:
                    ef:a7:96:ed:42:4a:7e:04:de:26:a9:0d:2d:4c:4a:
                    f2:2b:e8:71:1b:44:d9:83:df:ab:c9:2c:ba:1c:73:
                    d6:fb:bf:a3:bb:2b:13:23:86:79:51:f3:8a:bd:2a:
                    d6:91:80:f8:d7:a8:86:0e:4a:02:89:09:a5:52:34:
                    f0:81:26:17:f4:08:34:01:6e:b4:77:e8:6e:21:3a:
                    8e:57:ef:4f:ed:7a:05:75:e5:92:3f:5b:b4:f6:09:
                    9e:ac:09:68:57:73:5e:99:ab:d1:b9:e5:cd:93:5a:
                    3b:ea:1b:ad:ac:c5:87:8c:02:31:09:6a:07:fe:57:
                    45:b6:bf:ba:15:34:44:b0:3c:95:e4:b7:b7:58:7e:
                    c1:f3:3a:e1:22:2f:9e:00:f1:ce:78:5b:f8:60:9e:
                    20:ee:15:e5:57:5f:20:e2:35:23:cf:ff:a6:fe:46:
                    45:a0:90:ec:be:5b:66:d9:45:d5:95:a8:ce:7a:91:
                    25:0d:69:12:52:f2:a0:3f:d3:8f:f1:e2:28:0e:d1:
                    47:9c:23:22:05:de:70:91:f6:e0:f8:b2:64:bf:96:
                    c2:8d:7c:82:92:77:fb:ba:32:ef:4f:a1:92:6c:f6:
                    48:b8:5e:e1:c9:fe:3d:a4:98:06:a6:96:c6:df:2f:
                    1e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E4:FB:07:42:AD:63:EB:4F:D4:89:53:32:59:94:A2:39:9A:07:5F
            X509v3 Authority Key Identifier:
                keyid:F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/323830343a373736633a3a2f33322d3438203d3e20323731313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:776c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:c2:85:4d:1b:a5:7c:03:f5:98:31:63:0a:ef:62:79:97:d5:
         c3:9b:54:71:20:3e:04:be:b0:fc:d1:7b:c0:66:f7:80:92:90:
         7c:43:dd:63:68:c2:c2:b9:79:80:0b:60:5e:ce:be:ae:9d:6a:
         a8:f1:8f:71:2d:7d:26:eb:db:01:1e:c7:c2:0b:bd:0e:22:11:
         21:f4:e0:35:43:8f:85:0c:df:c0:44:69:bd:5f:90:94:b3:5b:
         c6:c6:6c:47:98:6d:54:d9:89:ee:52:73:22:00:a5:5a:3a:f7:
         b8:7c:1a:1c:c6:cf:63:11:63:83:22:65:f9:52:4c:ae:c0:7f:
         05:25:8a:69:27:2f:a4:79:2c:78:e6:ea:97:88:d5:52:c3:a4:
         c7:ec:99:36:05:da:df:66:a0:59:ba:8a:af:40:4e:47:87:62:
         ef:af:ea:b1:ae:11:24:7d:ad:a3:64:18:20:85:df:b9:a1:40:
         1a:66:c1:6f:c7:77:a8:78:ae:6e:42:f4:b6:d3:27:3b:9c:06:
         81:b1:3c:4a:f3:54:ca:c2:8a:c9:00:1f:25:9b:82:3d:3f:e3:
         86:86:12:9e:69:73:26:7c:4d:47:2b:ce:b2:55:a6:4a:e5:ff:
         23:2d:55:94:dc:b9:cf:30:d6:62:f4:f8:71:5e:7b:f7:c5:9d:
         c6:61:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:03:10 2025 by rpki-client