Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/323830343a353365343a3a2f33322d313238203d3e203533313831.roa
File:                     323830343a353365343a3a2f33322d313238203d3e203533313831.roa (raw, json)
Hash identifier:          QJ4HiBHxsCQQPRAtx+xxKlZCua3P1Dk8tHsptc5rspI=
Subject key identifier:   A3:1D:19:03:A7:23:3C:95:00:47:58:4D:EB:5E:E1:61:80:4D:12:42
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       0C42605ECBBE81025C685C5EA277CD6D90C9EB9E
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/323830343a353365343a3a2f33322d313238203d3e203533313831.roa
Signing time:             Wed 16 Apr 2025 19:20:02 +0000
ROA not before:           Wed 16 Apr 2025 19:15:02 +0000
ROA not after:            Wed 15 Apr 2026 19:20:02 +0000
asID:                     53181
IP address blocks:        2804:53e4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 21:57:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:42:60:5e:cb:be:81:02:5c:68:5c:5e:a2:77:cd:6d:90:c9:eb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: Apr 16 19:15:02 2025 GMT
            Not After : Apr 15 19:20:02 2026 GMT
        Subject: CN=A31D1903A7233C950047584DEB5EE161804D1242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:71:8a:ed:e8:87:49:47:b3:9b:1a:6a:3d:
                    d1:8a:1a:6f:96:13:8e:78:00:59:77:31:f3:2d:8b:
                    f8:90:fc:61:bd:e7:72:e2:89:a0:58:7c:12:51:6a:
                    2c:61:b1:d3:12:75:40:91:16:b5:fe:d9:9e:d7:54:
                    f8:26:7d:b5:38:c5:15:bf:05:32:96:35:fb:5e:af:
                    3d:f4:0a:d0:e0:e4:22:87:06:86:37:58:d9:0b:68:
                    cb:df:03:6a:c9:42:db:45:9a:66:f3:5d:d8:27:e7:
                    78:db:a8:18:09:4a:21:12:88:42:47:db:bf:9a:e0:
                    c9:27:72:f7:ed:01:19:57:d2:ef:52:47:5a:a7:bb:
                    4c:c1:3f:6c:a4:0a:35:7c:2d:c2:4f:7e:dd:3f:cc:
                    4f:21:9b:39:e2:8e:94:c9:13:db:af:7b:95:54:c6:
                    79:63:b8:6d:95:83:0f:46:4b:9e:a7:94:d0:88:36:
                    65:cd:11:2d:94:ac:a1:5c:c4:f1:5a:16:b0:39:f4:
                    58:a6:0a:5e:8b:98:4f:38:3f:f7:ec:b9:09:85:e7:
                    8a:ff:4c:68:52:fc:04:d5:83:6a:c1:fd:51:60:0f:
                    93:ef:05:b1:67:5b:0e:cb:bd:63:d2:63:f4:83:ee:
                    f3:8f:d5:33:9a:93:48:ab:67:95:ea:cd:78:c7:46:
                    67:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1D:19:03:A7:23:3C:95:00:47:58:4D:EB:5E:E1:61:80:4D:12:42
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/323830343a353365343a3a2f33322d313238203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:53e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:ef:14:18:82:94:1a:e7:76:3a:cc:6f:64:b3:93:90:2f:34:
         48:c8:72:07:73:8d:19:05:ab:06:df:87:4b:23:a5:8f:39:00:
         f7:a6:8b:df:41:2b:7a:f9:e6:9a:ed:3e:c8:40:a1:95:60:10:
         0b:14:85:0d:55:6a:da:b5:12:f1:80:21:96:d0:c8:6f:df:6b:
         a6:0d:4a:8b:90:7a:de:19:d9:98:ae:39:c0:5a:18:c8:bc:42:
         92:31:76:21:cc:cd:8c:30:26:5d:3f:fd:ba:c8:e6:69:12:d8:
         f7:6b:28:46:f9:b8:2a:e6:a3:94:d1:c9:3d:21:dd:e9:cb:74:
         a0:25:35:50:f7:58:fa:8d:5d:1d:da:58:2e:b0:20:c4:1f:66:
         1e:6b:a5:06:09:b7:c7:6b:25:cc:ed:d7:c9:74:14:7c:5d:62:
         22:6a:07:ee:f7:8c:e4:c9:dd:de:05:ee:ed:3c:ab:c6:9c:40:
         d9:02:6d:29:e4:a1:a2:d2:29:ae:3b:aa:b8:1c:a2:5f:de:1c:
         f2:27:d8:b3:a9:a5:ad:ad:75:39:3d:02:67:5c:a8:fe:0b:da:
         97:40:d3:9c:fd:20:43:ec:fc:87:52:56:45:c6:25:bd:81:e5:
         c9:e9:4e:db:d4:2e:b5:51:c1:43:61:5c:fa:cc:aa:7f:63:fb:
         f0:c8:fe:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:18:07 2025 by rpki-client