Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa
File:                     323830343a323465343a3a2f33322d3332203d3e20323634323437.roa (raw, json)
Hash identifier:          xBmcP/YeDZGsb4KTokoRr2w6rc0i+MAEv6W8eR0cvJ8=
Subject key identifier:   19:14:D1:A7:04:2F:F5:DF:37:A4:3B:2C:46:36:EC:2A:36:C5:D1:62
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       68B3366CA2E8D283223445A9D23679DD28ECA999
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264247
IP address blocks:        2804:24e4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl
                          rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 16:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b3:36:6c:a2:e8:d2:83:22:34:45:a9:d2:36:79:dd:28:ec:a9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=1914D1A7042FF5DF37A43B2C4636EC2A36C5D162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:af:3c:88:a9:70:8c:38:66:54:99:f4:83:
                    cd:8d:68:06:50:d6:53:fb:16:8e:3a:4a:84:3e:03:
                    c8:72:5b:17:22:12:da:4f:0e:5f:cb:98:4d:d7:ff:
                    6d:0c:91:c4:45:4e:14:c3:f3:79:60:63:43:b2:f1:
                    0c:0c:f5:80:3e:e6:fd:14:c6:a2:e1:5c:d6:8d:60:
                    d3:07:ea:8c:bf:7f:11:89:5b:d8:13:d7:63:fd:0b:
                    cf:27:2e:88:d3:8b:36:fe:6c:c9:ef:20:6d:96:4a:
                    20:c9:73:cd:06:f2:bf:94:d9:59:1c:93:05:cc:bb:
                    34:80:59:27:64:23:85:8e:e8:dd:c7:1a:fd:20:30:
                    ee:9c:bc:54:3d:21:83:27:e0:b4:9b:dd:63:66:ae:
                    d4:68:cf:9d:0d:17:98:ad:98:fb:c6:36:6e:2d:b9:
                    27:dd:3a:88:18:55:47:b8:35:7c:3a:cd:f2:02:c4:
                    d6:7f:01:94:0c:94:9d:fa:2a:5c:30:ab:64:a9:92:
                    1f:dd:07:e3:a8:1b:55:34:0b:5f:e2:dd:ea:f8:84:
                    0d:5d:99:31:ff:e4:b3:f9:bf:6f:46:e6:88:2a:5c:
                    32:8b:b8:57:7e:b6:ac:9f:bb:d6:97:35:85:8d:28:
                    d6:67:0b:42:d7:33:ad:8d:33:56:fd:7b:e5:0b:61:
                    29:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:14:D1:A7:04:2F:F5:DF:37:A4:3B:2C:46:36:EC:2A:36:C5:D1:62
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a3a2f33322d3332203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:a4:ad:e9:4c:07:bf:05:88:f9:e6:e1:51:fa:92:8c:79:b2:
         5b:1d:76:53:16:a5:42:4e:37:aa:1b:6a:16:3b:d8:16:cb:e7:
         24:74:5e:33:df:dd:ae:09:86:45:fa:e5:5e:3a:6b:1a:27:6b:
         5e:b4:42:6e:e8:7e:8c:b4:01:a2:28:af:27:ca:29:cc:96:97:
         4a:7b:42:11:df:95:fb:c6:b0:00:f6:bb:af:0f:2b:d4:5d:68:
         b7:4d:83:a6:eb:14:75:95:77:bb:1f:02:be:4b:08:ef:dc:10:
         38:3e:c8:9d:c1:ef:a5:56:e8:4f:50:d2:bf:17:f4:63:a6:96:
         60:d5:c3:b6:3b:09:30:d1:20:17:28:bc:9f:47:fa:14:ad:fe:
         a1:68:df:4d:98:6e:77:12:8b:01:16:89:86:b2:ad:f8:e1:b0:
         8e:b0:0f:b7:19:d6:84:b3:57:46:98:73:aa:d3:96:81:0f:ec:
         f1:69:0d:d5:0c:67:1a:60:c0:79:75:89:7d:20:7d:ba:13:d5:
         e5:68:4a:67:aa:03:c8:77:d1:fa:ab:fb:f2:27:95:f2:e6:d7:
         a1:fc:6d:b2:f4:fc:34:69:8d:07:3c:9b:70:e2:12:79:7c:94:
         19:e5:c0:bb:50:6f:92:56:5f:ba:c8:cb:11:26:c5:cd:69:b8:
         e3:1f:1f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:30 2025 by rpki-client