Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/323830343a3163343a3a2f33322d3438203d3e20323632373434.roa
File:                     323830343a3163343a3a2f33322d3438203d3e20323632373434.roa (raw, json)
Hash identifier:          THw0LmFZApB4LrQffeFvGzSoGlQq6wsYFkIXs0L4Rpk=
Subject key identifier:   56:5E:AD:56:F4:F2:41:D8:9A:FB:2C:70:79:AE:F8:D6:27:D5:88:71
Certificate issuer:       /CN=1DF4513E0496CBA9FDADA2D53702B61BB989E297
Certificate serial:       4A0A29AC8434A9D9F54E7DC698B94423B8683EFA
Authority key identifier: 1D:F4:51:3E:04:96:CB:A9:FD:AD:A2:D5:37:02:B6:1B:B9:89:E2:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/323830343a3163343a3a2f33322d3438203d3e20323632373434.roa
Signing time:             Mon 10 Mar 2025 20:46:59 +0000
ROA not before:           Mon 10 Mar 2025 20:41:59 +0000
ROA not after:            Mon 09 Mar 2026 20:46:59 +0000
asID:                     262744
IP address blocks:        2804:1c4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.crl
                          rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:0a:29:ac:84:34:a9:d9:f5:4e:7d:c6:98:b9:44:23:b8:68:3e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DF4513E0496CBA9FDADA2D53702B61BB989E297
        Validity
            Not Before: Mar 10 20:41:59 2025 GMT
            Not After : Mar  9 20:46:59 2026 GMT
        Subject: CN=565EAD56F4F241D89AFB2C7079AEF8D627D58871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:e3:f4:d5:08:c4:ba:00:ab:bb:b9:6d:28:
                    42:77:91:31:33:8c:dc:20:e9:2a:76:0b:fc:fa:cd:
                    52:d9:1b:09:25:3f:a4:b3:9e:d3:8a:2b:35:8e:13:
                    47:1b:38:bd:da:1e:21:5a:aa:83:21:d0:cf:8d:e2:
                    ce:a6:8e:00:66:e9:f5:9c:68:fc:2f:34:37:93:46:
                    33:64:1f:e6:15:96:31:7d:4a:2d:47:8e:24:e0:6e:
                    ab:1c:85:42:18:da:70:82:7b:c3:20:28:34:b0:37:
                    11:cf:da:fd:6c:a4:0e:ea:a9:e3:18:c6:b8:81:30:
                    f4:c4:0d:58:ed:b2:47:02:72:9e:24:88:80:a3:5b:
                    a3:f3:1c:3b:eb:15:58:41:04:73:3e:f4:3a:60:01:
                    a5:15:cd:27:81:95:49:9e:b9:7d:4c:ed:a4:e9:fa:
                    63:cf:fd:c4:48:d7:62:1a:81:e8:8a:0c:62:cb:89:
                    c8:ac:bb:88:74:56:e5:46:e8:08:b2:8c:8e:37:f3:
                    e3:60:06:6a:04:35:4e:d5:62:ed:9f:4c:6f:68:1f:
                    83:ba:15:fe:98:4d:41:71:63:90:17:37:36:13:31:
                    21:15:5c:3a:ec:ab:42:41:d1:2b:1e:04:6d:5e:1a:
                    78:0c:0a:99:7d:b4:ea:f2:22:de:75:de:ad:2a:ca:
                    f8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5E:AD:56:F4:F2:41:D8:9A:FB:2C:70:79:AE:F8:D6:27:D5:88:71
            X509v3 Authority Key Identifier:
                keyid:1D:F4:51:3E:04:96:CB:A9:FD:AD:A2:D5:37:02:B6:1B:B9:89:E2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/1DF4513E0496CBA9FDADA2D53702B61BB989E297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DF4513E0496CBA9FDADA2D53702B61BB989E297.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYog6YedRW1q11qvMJ3HntL3S14pTpW9whT7Ts4gwSMc/0/323830343a3163343a3a2f33322d3438203d3e20323632373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:19:bb:12:b9:53:d7:24:ee:75:25:32:99:de:87:50:aa:
         60:c2:42:0c:ff:9a:6f:d4:6a:0a:60:f3:68:10:24:02:25:31:
         b3:9d:bc:18:2c:60:ec:c9:d8:57:c9:4e:3e:f3:90:db:95:50:
         17:5b:d6:f0:ef:7f:1a:dc:7b:8c:35:99:76:36:bb:7b:db:0b:
         20:96:4a:9e:28:a8:80:4a:74:22:3d:09:56:d4:0c:9f:7a:33:
         5c:5a:a3:55:9b:75:00:ce:cb:4f:69:d1:4d:18:6f:cb:40:e5:
         d5:3e:18:b4:8c:31:df:77:0c:e7:d8:82:e3:61:8b:6a:17:05:
         fe:5c:63:38:4a:f3:34:cf:64:7c:1b:27:9d:53:93:85:bc:35:
         48:fc:42:5c:b9:0e:2a:08:f6:89:c4:cf:52:21:c1:3c:c2:9c:
         69:cd:b8:d7:3a:68:01:da:fa:58:25:e6:07:cc:e6:f6:c1:6e:
         9a:b0:05:59:d3:30:16:e9:e3:6f:62:5c:a1:88:84:34:aa:8f:
         22:36:b2:c1:e1:5e:3b:79:e5:1b:a8:c6:d5:2c:a8:66:d0:5a:
         89:a9:eb:c8:e0:34:5f:51:29:01:a4:00:73:73:74:a5:5f:ff:
         bb:a1:bc:7b:b4:da:cd:0a:9d:0f:ca:6d:98:7d:50:83:ab:a5:
         32:fb:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:30:21 2025 by rpki-client