Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          46HMXpsZhy5aCopmWyIGd9U9n9RTBIrPEOzslqG+tkU=
Subject key identifier:   01:CF:F9:4C:FA:53:BD:9E:4C:63:24:89:E9:6C:FC:94:39:84:99:5A
Certificate issuer:       /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial:       43AADC292E3B677C4A1E990608B887073A9A2BD1
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Wed 05 Mar 2025 20:36:00 +0000
ROA not before:           Wed 05 Mar 2025 20:31:00 +0000
ROA not after:            Wed 04 Mar 2026 20:36:00 +0000
asID:                     262617
IP address blocks:        2804:90c:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
                          rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 14:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:aa:dc:29:2e:3b:67:7c:4a:1e:99:06:08:b8:87:07:3a:9a:2b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
        Validity
            Not Before: Mar  5 20:31:00 2025 GMT
            Not After : Mar  4 20:36:00 2026 GMT
        Subject: CN=01CFF94CFA53BD9E4C632489E96CFC943984995A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:f6:73:68:1e:66:cb:18:bd:d1:2d:81:6e:
                    4b:57:a5:14:46:6e:e7:9c:de:26:d2:0f:44:d9:55:
                    7d:51:04:d4:ce:16:cb:b2:07:e1:63:62:ae:4c:82:
                    a2:ac:cb:fb:d7:91:ad:22:be:ae:e1:87:6f:77:cf:
                    14:e6:cd:63:80:0f:16:41:b9:23:0a:ff:1d:60:0c:
                    2d:3f:82:1c:49:c3:9e:da:68:42:3c:57:2b:11:a4:
                    6a:80:d0:52:3e:22:2a:03:be:5f:f2:55:ab:b0:d4:
                    15:cc:6e:77:df:c4:44:4f:be:6f:45:c1:81:c5:6a:
                    ba:88:2e:c7:87:bd:82:c3:03:84:2c:2a:a1:3b:b1:
                    34:d6:1e:91:29:ea:29:58:cb:c5:71:e0:72:0a:0b:
                    10:ef:84:16:6e:ca:58:76:11:7c:db:3a:08:38:19:
                    af:a4:5b:9b:bd:93:db:6d:4a:44:f4:2b:3c:df:6c:
                    c8:00:f5:c0:9a:c6:e6:65:6e:9d:d9:00:c4:5a:90:
                    8f:cf:1f:bd:ba:84:b3:c6:36:3d:c5:b7:cd:ee:a3:
                    e5:f3:87:76:b2:2a:dd:c2:82:5f:69:88:54:00:1d:
                    3f:aa:e5:26:e9:39:65:12:54:d9:07:b2:50:d9:4e:
                    6b:bb:8a:d6:fd:6c:27:c7:28:3d:c8:a6:05:63:a1:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CF:F9:4C:FA:53:BD:9E:4C:63:24:89:E9:6C:FC:94:39:84:99:5A
            X509v3 Authority Key Identifier:
                keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:95:7a:6b:23:32:68:32:fa:b9:61:62:9c:20:a1:c2:18:35:
         10:81:97:39:f6:f9:e4:72:8d:a9:92:c2:65:e8:da:1e:21:77:
         78:50:7d:ef:8b:62:c7:3a:79:39:bb:fa:04:6e:9f:1b:39:07:
         d9:ee:c2:bd:0f:8f:e0:93:ae:c4:13:ba:f9:df:4a:8b:33:83:
         c4:b9:5c:17:07:5c:91:ac:e9:32:bb:1a:1b:0a:a2:5f:8c:3f:
         cd:e8:43:dc:81:38:d3:eb:c5:89:d1:81:78:61:e5:45:f6:ef:
         9a:bd:31:53:63:66:71:d3:2a:68:cb:6e:84:34:c3:df:66:dd:
         8d:ac:c5:5c:2a:e9:a1:ab:9d:99:79:8a:7d:ca:01:8a:3b:1b:
         36:43:90:b4:b1:e8:cf:1b:a6:59:aa:8b:37:fe:19:8c:a2:51:
         36:b5:d6:b0:dd:d3:8f:d4:74:dd:a8:eb:6b:00:96:2a:c4:c1:
         a1:db:b5:1f:6e:85:f0:c4:7c:69:46:bd:1b:fa:6e:fb:09:62:
         75:ce:b7:83:22:ee:06:b7:9c:6a:86:22:23:d9:ba:50:c6:2b:
         75:46:df:a9:f8:e4:f9:b8:9c:7c:22:a7:0a:58:c2:f6:90:c9:
         58:ff:20:4d:e3:76:aa:f0:a6:f0:27:e0:cc:73:79:b6:fd:38:
         90:11:15:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:26:26 2025 by rpki-client