Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d3332203d3e20323636323238.roa
File:                     323830343a336361633a3a2f33322d3332203d3e20323636323238.roa (raw, json)
Hash identifier:          EX5Iaef1ARQrpPTvk9/gywbb6Jru6g/6wHDpk8J3pxo=
Subject key identifier:   DC:B0:CF:9D:49:2C:9D:F8:62:B5:24:3C:84:5A:C6:1B:52:46:45:BA
Certificate issuer:       /CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47
Certificate serial:       4D047E5B669348D2F19FF00AB54AFE9AC5F10AA6
Authority key identifier: E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d3332203d3e20323636323238.roa
Signing time:             Tue 19 Nov 2024 23:50:59 +0000
ROA not before:           Tue 19 Nov 2024 23:45:59 +0000
ROA not after:            Tue 18 Nov 2025 23:50:59 +0000
asID:                     266228
IP address blocks:        2804:3cac::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl
                          rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 12:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:04:7e:5b:66:93:48:d2:f1:9f:f0:0a:b5:4a:fe:9a:c5:f1:0a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7F1F0A299597CC5656B837D3DFD4B63C8649C47
        Validity
            Not Before: Nov 19 23:45:59 2024 GMT
            Not After : Nov 18 23:50:59 2025 GMT
        Subject: CN=DCB0CF9D492C9DF862B5243C845AC61B524645BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:90:df:80:24:ec:83:7e:e8:1a:7d:9d:3a:cb:
                    04:83:32:3a:09:5b:12:a2:20:91:7d:e9:eb:af:01:
                    eb:68:fb:b2:24:c6:46:2d:1e:14:25:96:c0:dc:e8:
                    07:d5:30:f5:81:b3:70:58:41:95:fb:bf:f8:6b:f5:
                    6b:4e:63:c0:c7:ca:5c:cf:87:00:20:2b:c6:86:8c:
                    e2:08:c6:4b:61:0d:4f:02:22:82:9d:f3:55:60:88:
                    dd:a6:e0:16:92:a6:fd:90:db:b7:54:82:1b:97:5f:
                    f2:b0:bc:8e:f2:c3:e7:c2:85:a3:75:b2:fc:e6:2e:
                    70:82:0d:7c:44:69:b5:cf:64:32:b5:cb:ce:32:64:
                    8d:1a:c0:44:39:20:af:7f:43:04:bd:24:30:eb:b2:
                    3b:07:1a:29:9b:12:a9:10:c9:19:c2:7d:ba:b3:0a:
                    11:54:3f:cc:5e:69:67:45:22:94:90:c7:e8:d8:50:
                    d9:f9:80:7d:2f:4d:f4:4c:f9:16:27:69:da:98:29:
                    84:20:82:f2:c5:16:b2:69:7a:b1:ae:5d:ba:3b:25:
                    78:04:e0:5d:ad:e4:bc:f9:72:8a:5d:da:50:5a:11:
                    76:94:f9:c1:f4:e9:bd:e9:60:b7:7d:14:98:bb:e2:
                    99:fa:a8:99:c0:2a:51:d8:96:53:ef:7b:99:ef:80:
                    3e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B0:CF:9D:49:2C:9D:F8:62:B5:24:3C:84:5A:C6:1B:52:46:45:BA
            X509v3 Authority Key Identifier:
                keyid:E7:F1:F0:A2:99:59:7C:C5:65:6B:83:7D:3D:FD:4B:63:C8:64:9C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7F1F0A299597CC5656B837D3DFD4B63C8649C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cn8u5nSRm6oSuVNnkJghYBcrYDZsBgbKC4CRXsSSo2w9/0/323830343a336361633a3a2f33322d3332203d3e20323636323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3cac::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:f4:4a:1b:5f:b1:36:69:99:51:b5:fe:da:b9:1f:44:2c:4d:
         ba:90:67:17:ea:28:85:7c:8b:b8:23:05:c9:f4:20:e3:e4:0e:
         9f:0d:34:d0:f7:ec:e6:5a:f6:df:45:53:02:d3:cf:f2:64:cd:
         31:4f:af:db:81:a5:31:b7:3e:c0:5e:0a:37:36:45:56:4c:28:
         db:fd:56:57:a3:32:42:48:83:9e:d6:d4:ba:83:c6:e3:20:c8:
         87:4f:e7:1b:cd:5e:b2:5f:f6:86:c8:5e:28:ff:de:47:18:94:
         11:40:e9:34:8e:b6:2b:f6:e5:d3:f7:23:fa:16:3a:99:95:f1:
         56:2e:00:93:9f:0f:10:40:d7:00:e3:62:7e:51:6d:00:87:bb:
         82:09:3d:8f:f1:7f:4c:50:7c:e8:c5:28:30:d2:1c:cd:af:d0:
         ef:e3:1c:c7:9a:32:3a:ba:eb:d9:0d:79:9e:68:36:51:0d:a0:
         ea:69:7b:26:98:cd:37:f4:e8:c2:9d:40:dc:7f:0f:74:a3:bc:
         17:47:f6:49:58:24:d2:a8:b7:cb:0d:80:76:44:31:eb:dc:ce:
         14:d3:29:2e:a0:47:d4:a1:bc:12:d3:45:2a:9c:9f:f4:f8:71:
         7c:3a:d0:de:f4:1a:74:33:87:32:88:27:e6:77:f6:93:fa:08:
         f6:94:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:15 2025 by rpki-client