Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/323830343a393130633a3a2f34382d3438203d3e20323734363135.roa
File:                     323830343a393130633a3a2f34382d3438203d3e20323734363135.roa (raw, json)
Hash identifier:          KmJYDKoKta2ety1eZVDLbBtTztKD7m/AAHZ8Mqaeyi4=
Subject key identifier:   EC:24:8E:7E:CD:96:45:D8:BE:F9:22:FD:11:6F:E3:67:D2:1D:A6:7F
Certificate issuer:       /CN=1C01E425C778F17A85EF01B47E8119E9F9426614
Certificate serial:       4216A54EB554FF335CAA82902E103256B533906F
Authority key identifier: 1C:01:E4:25:C7:78:F1:7A:85:EF:01:B4:7E:81:19:E9:F9:42:66:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C01E425C778F17A85EF01B47E8119E9F9426614.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/323830343a393130633a3a2f34382d3438203d3e20323734363135.roa
Signing time:             Sun 02 Mar 2025 03:17:00 +0000
ROA not before:           Sun 02 Mar 2025 03:12:00 +0000
ROA not after:            Sun 01 Mar 2026 03:17:00 +0000
asID:                     274615
IP address blocks:        2804:910c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/1C01E425C778F17A85EF01B47E8119E9F9426614.crl
                          rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/1C01E425C778F17A85EF01B47E8119E9F9426614.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C01E425C778F17A85EF01B47E8119E9F9426614.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 16:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:16:a5:4e:b5:54:ff:33:5c:aa:82:90:2e:10:32:56:b5:33:90:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C01E425C778F17A85EF01B47E8119E9F9426614
        Validity
            Not Before: Mar  2 03:12:00 2025 GMT
            Not After : Mar  1 03:17:00 2026 GMT
        Subject: CN=EC248E7ECD9645D8BEF922FD116FE367D21DA67F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:f5:cb:27:ff:f5:c5:f6:1e:37:0b:8d:41:
                    04:49:fa:4b:09:b4:70:d6:90:8d:c6:c5:90:00:a9:
                    1d:75:2e:e9:0c:54:8a:b0:fb:b5:a9:41:63:4f:2a:
                    a1:f3:9f:90:ec:c9:dd:60:86:28:3e:6f:a6:eb:4d:
                    c0:c0:23:f5:0c:78:a4:fd:e8:88:6c:26:58:7e:be:
                    2b:04:0b:ba:e4:b2:f7:52:e1:a2:03:3a:88:62:20:
                    35:b6:91:ec:9c:47:fe:ab:3f:3b:ec:f9:44:58:dc:
                    3f:a3:37:3d:6e:96:4a:3d:9e:f6:07:6b:a7:55:2c:
                    01:9b:eb:e0:3c:cf:e4:94:e4:03:ff:8b:e9:57:36:
                    cf:3c:42:6e:7d:6d:c5:0a:37:05:42:76:a8:de:2d:
                    75:28:7d:1b:be:00:34:61:8c:ec:ef:ed:c6:b5:aa:
                    53:16:58:b0:07:02:82:ea:c2:27:d9:e2:75:19:db:
                    dc:16:d2:49:5d:cf:47:0f:03:3a:30:9d:c0:28:35:
                    3f:a7:a5:0e:c8:10:15:0d:40:eb:81:bb:36:e7:bc:
                    ea:05:10:34:a3:f3:83:39:8b:7a:a4:23:86:ba:3c:
                    37:fd:df:2b:68:0a:2d:6a:69:19:07:9d:58:d3:99:
                    93:a1:ae:98:1b:43:a3:e0:ab:58:c2:ba:36:0a:7d:
                    49:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:24:8E:7E:CD:96:45:D8:BE:F9:22:FD:11:6F:E3:67:D2:1D:A6:7F
            X509v3 Authority Key Identifier:
                keyid:1C:01:E4:25:C7:78:F1:7A:85:EF:01:B4:7E:81:19:E9:F9:42:66:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/1C01E425C778F17A85EF01B47E8119E9F9426614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C01E425C778F17A85EF01B47E8119E9F9426614.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxSuT3Yp7f46T6KGTj3RRygzec7yfXpycu8SPHP1MkjP/0/323830343a393130633a3a2f34382d3438203d3e20323734363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:910c::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:c5:be:e0:e3:e4:7f:98:d2:c0:af:7d:fb:4a:71:de:d7:
         68:3a:2b:65:f0:cb:45:a7:b9:fa:90:29:38:e1:05:33:88:be:
         9c:d1:26:fb:e2:b3:c3:9e:9e:9f:77:94:fc:0c:66:64:10:98:
         29:d9:4f:ae:7e:49:be:c9:75:6e:7a:dd:a6:b6:a7:af:cb:35:
         86:ba:69:0c:c9:18:19:65:29:95:d1:00:3e:50:7f:02:f7:7e:
         d7:20:af:31:6e:f3:e6:f5:26:4a:27:3a:0c:d7:30:3b:0a:1c:
         d5:85:50:84:fb:34:33:f9:8b:61:96:00:81:37:18:81:c0:40:
         fc:8a:e4:d5:3d:e8:c5:ba:8c:09:87:0d:31:a3:8f:f1:6a:33:
         9a:36:5d:19:20:9e:fc:6d:42:2e:62:25:36:fe:1b:21:f5:8a:
         15:f6:d1:8f:9d:c8:85:da:d3:df:b8:f4:54:2c:9b:f2:93:1d:
         f6:23:a4:74:13:49:c1:3f:f2:98:da:99:6d:43:c2:d6:9b:a1:
         00:cf:9b:26:00:9a:e0:06:51:83:a6:d1:0f:10:be:b5:ad:7f:
         b8:e9:cb:87:5f:57:bc:c2:be:fe:db:79:48:c1:69:f5:bc:53:
         2a:a1:6b:0f:38:11:9e:41:a0:de:16:08:f7:da:71:a4:ce:37:
         17:8e:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:11:22 2025 by rpki-client