Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa
File:                     323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa (raw, json)
Hash identifier:          0INbT1t4kAAjGvU1yRiLIOPLTcbEjnghfSNGgwS5c04=
Subject key identifier:   42:E7:B1:EA:CA:AB:72:53:74:35:78:CB:47:05:74:F8:7C:27:7C:11
Certificate issuer:       /CN=E4ED504E9F98DC971B6C70D41D971F5CE49587C8
Certificate serial:       02C515B3F028A077289342350B3A1C91F5DDB1F9
Authority key identifier: E4:ED:50:4E:9F:98:DC:97:1B:6C:70:D4:1D:97:1F:5C:E4:95:87:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa
Signing time:             Mon 17 Feb 2025 22:52:40 +0000
ROA not before:           Mon 17 Feb 2025 22:47:40 +0000
ROA not after:            Mon 16 Feb 2026 22:52:40 +0000
asID:                     273606
IP address blocks:        2804:8978:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.crl
                          rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 01:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c5:15:b3:f0:28:a0:77:28:93:42:35:0b:3a:1c:91:f5:dd:b1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4ED504E9F98DC971B6C70D41D971F5CE49587C8
        Validity
            Not Before: Feb 17 22:47:40 2025 GMT
            Not After : Feb 16 22:52:40 2026 GMT
        Subject: CN=42E7B1EACAAB7253743578CB470574F87C277C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:96:6e:2d:d7:c5:a3:6a:88:59:3e:76:d7:
                    ac:cf:a1:e2:63:0d:a0:6b:4c:04:49:b2:4e:72:a3:
                    fa:d0:19:2e:63:ca:df:d2:b3:ca:8d:98:1a:43:8b:
                    dd:9b:c0:e1:6b:d3:4e:39:9a:ff:ae:fd:87:28:fd:
                    8a:bc:e7:f0:ce:0e:cc:5b:fd:6e:24:22:04:fd:e5:
                    5b:c4:f1:00:99:cc:7e:f5:56:62:47:5e:9d:8a:9c:
                    b9:61:51:79:00:e2:d5:b7:61:1c:27:df:4e:be:2b:
                    b1:41:c6:cb:e2:14:2f:2d:4a:c4:38:bd:7c:a1:41:
                    c0:5b:08:9b:57:53:dd:1a:00:3e:b3:b3:da:64:02:
                    7f:83:38:d8:95:ec:9c:f4:7a:df:6f:0b:15:da:06:
                    81:ef:55:12:83:6f:68:4d:99:9a:ed:3e:a3:13:4b:
                    85:1c:87:e9:f5:cf:24:cc:c1:8f:12:da:fe:40:57:
                    26:dd:3a:c1:35:7b:fd:27:f8:39:65:15:7b:50:8f:
                    a3:99:5c:1b:83:eb:a8:18:a1:36:33:fa:5f:ca:fb:
                    57:5e:3e:7c:58:b2:b7:ed:dc:21:8d:93:82:2f:56:
                    d4:1c:bf:fa:05:15:81:f4:33:e6:91:60:f7:06:e1:
                    1b:fe:f2:ff:12:f4:3b:28:29:e4:8c:dc:c9:61:05:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E7:B1:EA:CA:AB:72:53:74:35:78:CB:47:05:74:F8:7C:27:7C:11
            X509v3 Authority Key Identifier:
                keyid:E4:ED:50:4E:9F:98:DC:97:1B:6C:70:D4:1D:97:1F:5C:E4:95:87:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4ED504E9F98DC971B6C70D41D971F5CE49587C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1b:f1:07:59:26:5a:ea:ae:7d:e3:27:1f:f3:ce:0f:d8:be:7e:
         58:ad:c1:19:9f:d2:43:1d:e4:b3:ed:50:1c:78:73:3f:9f:e4:
         64:40:14:12:65:08:92:80:de:52:a1:66:f7:b0:0a:52:85:b5:
         8c:b5:64:ad:41:2e:c3:8d:fc:cc:ee:c7:db:5c:73:a7:6b:5b:
         06:d0:3c:91:d6:c1:8d:8b:71:70:d7:cf:eb:aa:09:0e:19:c2:
         0b:6a:eb:15:2b:d5:b6:80:8f:ac:77:9a:1d:2f:ba:42:6f:66:
         f3:1e:43:7d:5f:20:32:f0:04:97:67:6c:b2:8a:34:b2:84:58:
         b2:e7:40:c6:94:06:8e:d0:3d:a1:5c:11:55:29:3f:21:77:15:
         fc:c9:e2:2b:06:1a:22:66:81:c0:67:90:bf:06:48:f9:f4:5d:
         b9:01:19:9a:07:ae:49:01:4e:84:68:55:d1:1d:f1:a5:82:15:
         1c:06:7a:3a:fe:11:b2:93:fe:8b:bf:f1:f0:d5:57:b8:10:e7:
         d0:b7:fa:2a:e9:50:e7:74:5d:52:6a:5e:7e:a0:a2:7a:61:26:
         c4:f8:7b:9a:93:73:3c:2c:6b:e2:1f:a9:e2:ff:3d:8f:2e:e8:
         f7:7c:79:85:d7:6e:cc:4e:fd:c3:0a:04:0c:2c:71:09:20:df:
         b4:0b:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:18:52 2025 by rpki-client