Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a383030303a3a2f34352d3435203d3e20323633343537.roa
File:                     323830343a313231633a383030303a3a2f34352d3435203d3e20323633343537.roa (raw, json)
Hash identifier:          IOZIkc9jqnldSPRqEUpxHjM0W9gdIpOxXYizR3MzeUA=
Subject key identifier:   16:C7:FF:DB:40:44:1A:77:70:AF:8E:5D:8F:B2:E8:CA:B2:88:EE:7F
Certificate issuer:       /CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
Certificate serial:       2117B14BA7694D83223842F51833D99C0351C827
Authority key identifier: D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a383030303a3a2f34352d3435203d3e20323633343537.roa
Signing time:             Wed 27 Nov 2024 14:10:10 +0000
ROA not before:           Wed 27 Nov 2024 14:05:10 +0000
ROA not after:            Wed 26 Nov 2025 14:10:10 +0000
asID:                     263457
IP address blocks:        2804:121c:8000::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl
                          rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 23:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:17:b1:4b:a7:69:4d:83:22:38:42:f5:18:33:d9:9c:03:51:c8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Validity
            Not Before: Nov 27 14:05:10 2024 GMT
            Not After : Nov 26 14:10:10 2025 GMT
        Subject: CN=16C7FFDB40441A7770AF8E5D8FB2E8CAB288EE7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0d:59:dc:1b:a6:cd:20:1f:51:b1:74:ac:b2:
                    ce:e7:83:37:45:50:9b:9e:a3:d0:f1:ae:75:55:61:
                    45:f3:20:08:d5:48:0a:cc:6b:a9:2e:00:8e:d3:e0:
                    08:3f:a8:e9:b9:29:f2:7b:a8:43:97:c3:85:62:e8:
                    60:8f:8d:ae:ae:c2:bb:73:0c:a4:e0:a4:28:3d:18:
                    fc:c9:59:b1:9d:a5:e8:90:a3:b0:d3:4f:80:ad:4d:
                    d2:04:26:57:2b:b7:92:6a:9a:69:a1:f8:63:72:f7:
                    11:59:34:c4:87:85:d6:c4:e5:c2:40:8d:af:b6:0a:
                    4c:3c:17:c5:00:44:4c:04:09:45:b0:eb:03:c3:5e:
                    56:12:3a:58:c9:34:d7:58:81:f0:1d:85:47:a3:43:
                    47:b5:8f:2e:d3:26:23:9c:1e:41:e1:ef:4e:31:52:
                    97:8a:50:c9:79:9a:55:20:fd:e5:e6:2a:e3:df:17:
                    74:30:18:a2:db:9c:c4:62:48:2c:98:88:25:9a:0e:
                    de:01:01:70:4f:fd:c3:02:7f:87:0d:c9:66:6a:e5:
                    bb:09:99:06:17:49:35:7f:21:3a:bb:d5:36:62:da:
                    1a:97:f6:ae:44:62:ff:76:68:ac:d0:7e:b1:a8:ae:
                    d2:d1:12:fd:74:54:41:4e:6a:b3:65:de:31:da:df:
                    7e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C7:FF:DB:40:44:1A:77:70:AF:8E:5D:8F:B2:E8:CA:B2:88:EE:7F
            X509v3 Authority Key Identifier:
                keyid:D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/323830343a313231633a383030303a3a2f34352d3435203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:121c:8000::/45

    Signature Algorithm: sha256WithRSAEncryption
         60:a0:91:d5:70:d2:42:3e:77:5b:da:63:c9:72:7d:e6:34:a8:
         fa:40:47:0f:95:db:d1:9b:bf:da:95:20:c1:ef:e5:a5:d1:ef:
         f5:9f:49:a3:91:db:48:57:d9:1b:cd:4e:fd:39:77:66:f6:84:
         a9:67:9e:e2:4d:f0:89:6b:22:8b:9c:66:92:d6:6b:dd:cf:07:
         63:d1:65:fc:fd:a5:4a:2f:cb:4b:21:c3:66:ef:e8:87:87:de:
         ff:7d:c1:82:7c:20:a6:e8:7a:cf:f8:1c:0d:54:4f:ad:36:fc:
         86:7d:a3:0f:f8:1f:19:00:a5:f4:b5:56:cc:c9:f5:0e:54:80:
         d1:a9:0d:07:9e:f3:7a:9b:17:d9:06:0a:e4:bc:24:04:6e:c4:
         22:64:c2:eb:a3:de:b7:f0:eb:bc:04:95:1d:db:54:62:37:46:
         04:e3:f0:e2:40:55:49:e0:9b:f7:b3:ec:7c:e7:7a:71:b6:8f:
         25:c8:30:b3:2f:99:eb:f7:8c:4b:25:a5:c8:f7:79:07:c4:84:
         0a:be:cf:00:8d:72:97:35:ae:3f:e5:8e:df:6f:87:4b:72:5e:
         36:fc:4d:6a:7b:96:f4:47:36:50:73:9d:37:68:dd:23:2a:4f:
         72:db:83:11:96:23:05:60:4b:0a:c0:c9:a5:ce:d7:2d:c7:b2:
         e8:38:74:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:00 2025 by rpki-client