Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/323830343a3563343a3a2f33322d3438203d3e20323632353430.roa
File:                     323830343a3563343a3a2f33322d3438203d3e20323632353430.roa (raw, json)
Hash identifier:          kyBmK7wiRQhxYMv5QhVwBtvB9WoyP5YOT8BjDzcJH+Y=
Subject key identifier:   06:21:06:C4:D0:AE:75:E8:24:7B:2E:EC:DB:1A:FD:B6:25:E5:EF:42
Certificate issuer:       /CN=47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271
Certificate serial:       07AF88254562130E8916BEA1864FBD5B5F5D2ADC
Authority key identifier: 47:C9:37:9E:E2:F8:BD:5D:FA:D7:0F:B9:3B:FB:C9:B4:F2:11:A2:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/323830343a3563343a3a2f33322d3438203d3e20323632353430.roa
Signing time:             Thu 06 Mar 2025 17:57:54 +0000
ROA not before:           Thu 06 Mar 2025 17:52:54 +0000
ROA not after:            Thu 05 Mar 2026 17:57:54 +0000
asID:                     262540
IP address blocks:        2804:5c4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.crl
                          rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 08:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:af:88:25:45:62:13:0e:89:16:be:a1:86:4f:bd:5b:5f:5d:2a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271
        Validity
            Not Before: Mar  6 17:52:54 2025 GMT
            Not After : Mar  5 17:57:54 2026 GMT
        Subject: CN=062106C4D0AE75E8247B2EECDB1AFDB625E5EF42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:28:07:d7:0c:8e:12:81:a2:7d:d1:19:77:d1:
                    2c:74:84:da:95:ec:77:ee:41:c0:48:bc:e5:61:83:
                    08:36:bd:33:b7:95:bd:b4:a4:57:fb:a8:52:86:98:
                    f6:72:96:fa:3b:66:83:70:6e:3d:2c:14:ae:1f:0c:
                    d0:a6:a8:b9:bf:87:f2:20:de:54:1a:24:ea:56:73:
                    43:fd:83:ff:d6:e7:a5:1c:a0:8a:bd:b4:cd:3d:0c:
                    70:80:cb:07:45:85:34:b9:40:28:39:28:2d:14:7f:
                    64:6c:5c:a6:a9:2a:80:17:73:91:d6:bb:f0:42:86:
                    44:98:fa:07:45:e6:5e:4a:8a:20:8e:a1:bc:99:2c:
                    3c:8b:c2:3a:60:d7:d2:c4:4e:1e:b0:76:d1:d1:92:
                    de:55:6c:f6:e3:5d:99:52:62:0d:49:44:6c:c9:5e:
                    e0:bc:d8:4b:6b:92:df:d3:46:5b:9e:64:8c:40:51:
                    13:fa:1a:24:c3:29:ad:d6:0c:84:36:c0:79:01:fb:
                    0b:25:41:26:bb:c1:a8:16:89:79:d4:b3:c8:6c:11:
                    91:ba:f0:3c:8a:62:f6:f5:ab:17:d6:36:4a:14:42:
                    eb:dd:49:5d:15:17:bf:df:ac:70:dd:0c:95:1a:86:
                    22:be:62:ef:d9:de:93:3f:a7:0d:05:76:3d:73:09:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:21:06:C4:D0:AE:75:E8:24:7B:2E:EC:DB:1A:FD:B6:25:E5:EF:42
            X509v3 Authority Key Identifier:
                keyid:47:C9:37:9E:E2:F8:BD:5D:FA:D7:0F:B9:3B:FB:C9:B4:F2:11:A2:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47C9379EE2F8BD5DFAD70FB93BFBC9B4F211A271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E8caTf6AzNtnjfAVfFGYg5TAp6bQnkQvCk2Z8EPYyUTj/1/323830343a3563343a3a2f33322d3438203d3e20323632353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:f1:1a:db:b1:f2:a6:c0:7a:31:5e:de:dd:b1:25:77:1c:c4:
         0a:6b:9a:6a:44:17:8f:96:19:21:79:a4:5a:4d:f6:9d:c8:26:
         10:7b:c9:11:9a:d3:c9:e1:6c:1f:e2:70:32:1f:4a:e3:a8:24:
         5e:b7:77:8a:ad:59:c2:7b:69:83:10:7e:1e:e9:4c:2e:a3:1e:
         d8:8f:1b:c0:5f:15:50:12:39:50:7c:fd:ac:bf:41:d5:23:84:
         ec:a4:cc:74:93:fd:42:93:13:1e:3f:15:b9:bc:6b:54:6f:11:
         66:a9:4f:16:25:37:61:cd:e0:b2:48:a4:64:72:04:8d:cf:28:
         ca:78:e6:93:b3:87:45:27:ac:25:c3:9c:62:06:4a:c0:be:a0:
         82:b6:ff:95:d6:17:d4:6d:01:95:5c:e9:d4:c8:a7:d3:94:95:
         21:c0:52:92:3a:78:95:78:6e:d1:8d:46:74:b8:74:6a:57:1a:
         98:88:ca:13:be:0c:18:57:cb:66:fb:ab:15:5d:76:b6:fe:51:
         a0:38:e9:55:bf:c6:57:f8:c2:b5:03:f9:de:ed:cc:83:bf:ef:
         21:12:c8:c5:5a:5a:06:9a:1a:ef:40:b8:51:ef:00:a1:08:b2:
         82:35:76:68:96:f2:f7:d3:e1:7c:b5:c1:50:53:b1:0f:7d:bb:
         d9:93:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:57:59 2025 by rpki-client